Enum AnomalyType 

pub enum AnomalyType {
    FingerprintChange,
    SessionSharing,
    VelocitySpike,
    ImpossibleTravel,
    TokenReuse,
    RotationPattern,
    TimingAnomaly,
    Ja4RotationPattern,
    Ja4IpCluster,
    Ja4BrowserSpoofing,
    Ja4hChange,
    OversizedRequest,
    OversizedResponse,
    BandwidthSpike,
    ExfiltrationPattern,
    UploadPattern,
}

Types of anomalies we detect.

Variants

FingerprintChange

Same session, different fingerprint

SessionSharing

Same token across multiple IPs

VelocitySpike

Sudden increase in unique values

ImpossibleTravel

Geolocation anomaly

TokenReuse

Same token, different fingerprints

RotationPattern

Systematic fingerprint rotation

TimingAnomaly

Unusual request timing patterns

Ja4RotationPattern

Systematic JA4 fingerprint rotation (bot farm)

Ja4IpCluster

Same JA4 fingerprint across multiple IPs

Ja4BrowserSpoofing

UA claims browser but JA4 shows bot/script

Ja4hChange

JA4H fingerprint changed (header manipulation)

OversizedRequest

Request size > p99 × threshold

OversizedResponse

Response size > p99 × threshold

BandwidthSpike

Sudden increase in bytes/min

ExfiltrationPattern

Large responses, small requests (data theft)

UploadPattern

Large requests, small responses (malware upload)

Trait Implementations

impl Clone for AnomalyType

fn clone(&self) -> AnomalyType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AnomalyType

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for AnomalyType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for AnomalyType

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AnomalyType

fn eq(&self, other: &AnomalyType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AnomalyType

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for AnomalyType

impl Eq for AnomalyType

impl StructuralPartialEq for AnomalyType