Skip to main content

validate_pattern

Function validate_pattern 

Source
pub fn validate_pattern(pattern: &str) -> Result<(), PatternError>
Expand description

Validates a STIX pattern string

ยงExamples

use stix_rs::pattern::validate_pattern;

// Valid patterns
assert!(validate_pattern("[file:hashes.MD5 = 'abc123']").is_ok());
assert!(validate_pattern("[ipv4-addr:value = '192.168.1.1']").is_ok());
assert!(validate_pattern("[file:name = 'malware.exe' AND file:size > 1000]").is_ok());

// Invalid patterns
assert!(validate_pattern("file:hashes.MD5 = 'abc123'").is_err()); // Missing brackets
assert!(validate_pattern("[]").is_err()); // Empty
assert!(validate_pattern("[invalid-type:prop = 'value']").is_err()); // Invalid type