Struct StringFilter 

pub struct StringFilter {
    pub min_occurrences: Option<u64>,
    pub max_occurrences: Option<u64>,
    pub min_length: Option<usize>,
    pub max_length: Option<usize>,
    pub categories: Option<Vec<String>>,
    pub file_paths: Option<Vec<String>>,
    pub file_hashes: Option<Vec<String>>,
    pub suspicious_only: Option<bool>,
    pub regex_pattern: Option<String>,
    pub min_entropy: Option<f64>,
    pub max_entropy: Option<f64>,
    pub date_range: Option<DateTimeRange>,
}

Filter criteria applied to statistics.

Fields

min_occurrences: Option<u64>

Minimum aggregate observation count.

max_occurrences: Option<u64>

Maximum aggregate observation count.

min_length: Option<usize>

Minimum UTF-8 byte length.

max_length: Option<usize>

Maximum UTF-8 byte length.

categories: Option<Vec<String>>

Match entries containing at least one listed category.

file_paths: Option<Vec<String>>

Match entries observed at least once at a listed file path.

file_hashes: Option<Vec<String>>

Match entries observed at least once with a listed file hash.

suspicious_only: Option<bool>

When Some(true), match only suspicious values; false does not filter.

regex_pattern: Option<String>

Regular expression applied to the full string value.

min_entropy: Option<f64>

Minimum byte entropy.

max_entropy: Option<f64>

Maximum byte entropy.

date_range: Option<DateTimeRange>

Inclusive range applied to first_seen.

Trait Implementations

impl Clone for StringFilter

fn clone(&self) -> StringFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StringFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StringFilter

fn default() -> StringFilter

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for StringFilter

where StringFilter: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for StringFilter

fn eq(&self, other: &StringFilter) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for StringFilter

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StringFilter