Struct Finding 

pub struct Finding {
    pub rule_id: RuleId,
    pub severity: Severity,
    pub title: String,
    pub description: String,
    pub evidence: Vec<Evidence>,
    pub human_view: Option<String>,
    pub agent_view: Option<String>,
    pub mitre_id: Option<String>,
    pub custom_rule_id: Option<String>,
}

A single detection finding.

Fields

rule_id: RuleId

severity: Severity

title: String

description: String

evidence: Vec<Evidence>

human_view: Option<String>

What a human sees (populated by Pro enrichment).

agent_view: Option<String>

What an AI agent processes (populated by Pro enrichment).

mitre_id: Option<String>

MITRE ATT&CK technique ID (populated by Team enrichment).

custom_rule_id: Option<String>

User-defined custom rule ID (populated only for CustomRuleMatch findings).

Trait Implementations

impl Clone for Finding

fn clone(&self) -> Finding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Finding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Finding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Finding

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.