Struct ThreatIntelEngine 

pub struct ThreatIntelEngine { /* private fields */ }

Main threat intelligence engine

Implementations

impl ThreatIntelEngine

pub fn new(config: ThreatIntelConfig) -> Self

Create a new threat intelligence engine with the given configuration

pub async fn initialize(&mut self) -> Result<()>

Initialize the engine by loading all enabled sources

pub async fn sync(&mut self) -> Result<()>

Sync all sources to get latest intelligence

pub async fn query_vulnerabilities( &self, product: &str, version: &str, ) -> Result<Vec<Vulnerability>>

Query for vulnerabilities matching a product and version

pub async fn query_iocs(&self, ioc_type: IOCType) -> Result<Vec<IOC>>

Query for IOCs (Indicators of Compromise)

pub async fn query_threat_actors(&self, query: &str) -> Result<Vec<ThreatActor>>

Get threat actors by name or alias

pub fn assess_risk(&self, vulnerabilities: &[Vulnerability]) -> RiskAssessment

Assess risk for a given context

pub fn get_stats(&self) -> ThreatIntelStats

Get statistics about cached intelligence