pub struct AnalysisConfig {
pub min_suspicious_entropy: f64,
pub max_occurrences_per_string: usize,
pub max_unique_strings: usize,
pub max_input_bytes: usize,
pub max_source_bytes: usize,
pub max_unique_file_identities_per_string: usize,
pub max_categories_per_string: usize,
pub max_indicators_per_string: usize,
}Expand description
Configuration for analysis and bounded in-memory tracking.
Byte limits are measured using str::len, so they refer to UTF-8 encoded
bytes rather than Unicode scalar values. Every limit is enforced before a
tracking mutation is applied.
Fields§
§min_suspicious_entropy: f64Entropy threshold at or above which a sufficiently long value is flagged.
max_occurrences_per_string: usizeMaximum detailed occurrence records retained for one distinct value.
max_unique_strings: usizeMaximum number of distinct values retained by the tracker.
max_input_bytes: usizeMaximum UTF-8 byte length of a value passed to the analyzer.
max_source_bytes: usizeMaximum UTF-8 byte length of each source and context string field.
max_unique_file_identities_per_string: usizeMaximum distinct (file_path, file_hash) pairs retained for one value.
max_categories_per_string: usizeMaximum aggregate category names retained for one value.
max_indicators_per_string: usizeMaximum suspicious indicators retained for one value.
Implementations§
Source§impl AnalysisConfig
impl AnalysisConfig
Sourcepub fn validate(&self) -> AnalysisResult<()>
pub fn validate(&self) -> AnalysisResult<()>
Validate that all thresholds and limits are usable.
Trait Implementations§
Source§impl Clone for AnalysisConfig
impl Clone for AnalysisConfig
Source§fn clone(&self) -> AnalysisConfig
fn clone(&self) -> AnalysisConfig
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more