Struct PushNotificationRecord 

pub struct PushNotificationRecord {
    pub app_id: i32,
    pub user_id: i32,
    pub timestamp: DateTime<Utc>,
    pub notification_type: u32,
    pub count: u32,
    pub foreground_cycle_time: u64,
    pub background_cycle_time: u64,
}

One SRUM push notification record: app notification delivery per interval.

Forensic value: proves app engagement at specific timestamps even without foreground CPU cycles — a communication app receiving C2 instructions shows here before the user interacts.

Fields

app_id: i32

Integer ID of the application (look up in crate::IdMapEntry).

user_id: i32

Integer ID of the user account (look up in crate::IdMapEntry).

timestamp: DateTime<Utc>

UTC timestamp of the measurement interval start.

notification_type: u32

Notification category (0=toast, 1=badge, 2=tile, 3=raw).

count: u32

Number of notifications delivered in this interval.

foreground_cycle_time: u64

Foreground CPU cycle time from real ESE ForegroundCycleTime column. Zero when decoded from the synthetic fixture format.

background_cycle_time: u64

Background CPU cycle time from real ESE BackgroundCycleTime column. Zero when decoded from the synthetic fixture format.

Trait Implementations

impl Clone for PushNotificationRecord

fn clone(&self) -> PushNotificationRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PushNotificationRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PushNotificationRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PushNotificationRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.