Enum AuditCommand 

pub enum AuditCommand {
    Stats {
        top: usize,
    },
    Misdetections {
        limit: usize,
    },
    Disagreements {
        limit: usize,
    },
}

Audit analysis subcommands

Variants

Stats

Show aggregate statistics from detection logs

Fields

top: usize

Number of top rules to display

Misdetections

Analyze potential misdetections (UserInputDuringProcessing events)

Fields

limit: usize

Maximum number of individual records to display

Disagreements

Analyze IPC/capture-pane disagreements

Fields

limit: usize

Maximum number of individual records to display

Trait Implementations

impl Clone for AuditCommand

fn clone(&self) -> AuditCommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditCommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for AuditCommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for AuditCommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand