Struct Rule

pub struct Rule {
    pub name: String,
    pub names: Vec<String>,
    pub type: String,
    pub packages: Vec<String>,
    pub distribution: Vec<String>,
    pub certificates: Vec<String>,
    pub websites: Vec<String>,
    pub c2: C2Rule,
}

A rule entry that lists indicators of compromise for a strain of stalkerware

Fields

name: String

A canonical name for this strain

names: Vec<String>

Other names this stalkerware is known as

type: String

The kind of app, either stalkerware or watchware

packages: Vec<String>

App identifiers this stalkerware uses

distribution: Vec<String>

Domains that are involved in distributing the app itself (eg. the .apk)

certificates: Vec<String>

Certificates that are in use with this stalkerware

websites: Vec<String>

Websites that are related to this stalkerware (eg. marketing or panels)

c2: C2Rule

Domains and IP addresses that are used by C2 infrastructure

Trait Implementations

impl Debug for Rule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Rule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Rule

fn eq(&self, other: &Rule) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Rule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Rule

impl StructuralPartialEq for Rule