Struct FileBehaviourClient 

pub struct FileBehaviourClient<'a> { /* private fields */ }

Implementations

impl<'a> FileBehaviourClient<'a>

pub fn new(client: &'a Client) -> Self

pub async fn get(&self, sandbox_id: &str) -> Result<FileBehaviour>

Get a file behaviour report by sandbox ID

pub async fn get_relationship<T>( &self, sandbox_id: &str, relationship: &str, ) -> Result<Collection<T>>

where T: for<'de> Deserialize<'de>,

Get objects related to a behaviour report

pub async fn get_relationship_descriptors( &self, sandbox_id: &str, relationship: &str, ) -> Result<Collection<Value>>

Get object descriptors related to a behaviour report

pub fn get_relationship_iterator<T>( &self, sandbox_id: &str, relationship: &str, ) -> CollectionIterator<'_, T>

where T: for<'de> Deserialize<'de> + Clone,

Get relationship iterator for paginated results

pub async fn get_html_report(&self, sandbox_id: &str) -> Result<String>

Get a detailed HTML behaviour report

pub async fn get_evtx(&self, sandbox_id: &str) -> Result<Vec<u8>>

Get the EVTX file generated during a file’s behavior analysis Note: This endpoint requires special privileges

pub async fn get_pcap(&self, sandbox_id: &str) -> Result<Vec<u8>>

Get the PCAP file generated during a file’s behavior analysis Note: This endpoint requires special privileges

pub async fn get_memdump(&self, sandbox_id: &str) -> Result<Vec<u8>>

Get the memdump file generated during a file’s behavior analysis Note: This endpoint requires special privileges

pub async fn get_comments_iterator( &self, sandbox_id: &str, ) -> CommentIterator<'_>

Get comments for a file behaviour report

pub async fn get_contacted_domains( &self, sandbox_id: &str, ) -> Result<Collection<Value>>

pub async fn get_contacted_ips( &self, sandbox_id: &str, ) -> Result<Collection<Value>>

pub async fn get_dropped_files( &self, sandbox_id: &str, ) -> Result<Collection<Value>>

pub async fn get_contacted_urls( &self, sandbox_id: &str, ) -> Result<Collection<Value>>

pub async fn get_attack_techniques( &self, sandbox_id: &str, ) -> Result<Collection<Value>>

pub async fn get_sigma_analysis( &self, sandbox_id: &str, ) -> Result<Collection<Value>>