Enum usiem::events::intrusion::IntrusionCategory

#[non_exhaustive]
pub enum IntrusionCategory {
    XSS,
    SQL_INJECTION,
    PATH_TRANSVERSAL,
    WEB_ATTACK,
    DOS,
    SURVEILLANCE,
    TROJAN,
    VIRUS,
    SPYWARE,
    RAT_TOOL,
    RANSOMWARE,
    HACKTOOL,
    PROXY_AVOIDANCE,
    REMOTE_EXPLOIT,
    LOCAL_EXPLOIT,
    BOTNET,
    SPAM,
    PHISHING,
    CEO_FRAUD,
    SCAM,
    DATA_THEFT,
    BRUTE_FORCE,
    MISCONFIGURATION,
    AD_ATTACK,
    UNKNOWN,
    INFORMATION_LEAKAGE,
    ANOMALY,
    SESSION_FIXATION,
    PROTOCOL_ATTACK,
    REPUTATION,
}

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

XSS

Cross site scripting

SQL_INJECTION

SQL Injection

PATH_TRANSVERSAL

Path Transversal attack

WEB_ATTACK

Common web attacks

DOS

Denial of service

SURVEILLANCE

Scan or Surveillance

TROJAN

Trojan horse

VIRUS

Simple virus

SPYWARE

Spyware

RAT_TOOL

Remote administration tools

RANSOMWARE

Ransomware attacks

HACKTOOL

Hacktools like mimikatz

PROXY_AVOIDANCE

TOR or Web proxies

REMOTE_EXPLOIT

Remote execution exploit

LOCAL_EXPLOIT

Local execution exploit

BOTNET

Botnet related

SPAM

Spam

PHISHING

Phising

CEO_FRAUD

Email scam

SCAM

Email scam

DATA_THEFT

Exfiltration of information

BRUTE_FORCE

Brute force: Password/users guessing

MISCONFIGURATION

Clear text passwords…

AD_ATTACK

Active Directory attack: kerberoasting, DC Sync, Golden Ticket, Pass the Hash, Pass the ticket…

UNKNOWN

INFORMATION_LEAKAGE

Information Leakage involves the exposure of information that would facilitate attacks on the application or other infrastructure, such as insight into the application design, deployment, or organizational details.

ANOMALY

Anormal behaviour

SESSION_FIXATION

Session Fixation is an attack technique that forces a user’s session ID to an explicit value.

PROTOCOL_ATTACK

Protocol violations: HTTP Response Splitting, HTTP Request Smuggling, HTTP Header Injection

REPUTATION

IP, COUNTRY, DOMAIN in a suspicious or block list

Trait Implementations

impl Clone for IntrusionCategory

fn clone(&self) -> IntrusionCategory

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IntrusionCategory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for IntrusionCategory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<IntrusionCategory> for IntrusionCategory

fn eq(&self, other: &IntrusionCategory) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for IntrusionCategory

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where
    __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for IntrusionCategory