pub struct FileBehaviorAttributes {Show 39 fields
pub analysis_date: Option<i64>,
pub behash: Option<String>,
pub command_executions: Option<Vec<String>>,
pub dns_lookups: Option<Vec<DnsLookup>>,
pub files_copied: Option<Vec<String>>,
pub files_deleted: Option<Vec<String>>,
pub files_dropped: Option<Vec<FileDrop>>,
pub files_opened: Option<Vec<String>>,
pub files_written: Option<Vec<String>>,
pub has_html_report: Option<bool>,
pub has_pcap: Option<bool>,
pub http_conversations: Option<Vec<HttpConversation>>,
pub ip_traffic: Option<Vec<IpTraffic>>,
pub ja3_digests: Option<Vec<Ja3Digest>>,
pub last_modification_date: Option<i64>,
pub mitre_attack_techniques: Option<Vec<MitreAttackTechnique>>,
pub modules_loaded: Option<Vec<String>>,
pub mutexes_created: Option<Vec<String>>,
pub mutexes_opened: Option<Vec<String>>,
pub processes_created: Option<Vec<String>>,
pub processes_injected: Option<Vec<String>>,
pub processes_killed: Option<Vec<String>>,
pub processes_terminated: Option<Vec<String>>,
pub processes_tree: Option<Vec<ProcessTreeNode>>,
pub registry_keys_deleted: Option<Vec<String>>,
pub registry_keys_opened: Option<Vec<String>>,
pub registry_keys_set: Option<Vec<RegistryKeySet>>,
pub sandbox_name: Option<String>,
pub services_created: Option<Vec<String>>,
pub services_deleted: Option<Vec<String>>,
pub services_opened: Option<Vec<String>>,
pub services_started: Option<Vec<String>>,
pub services_stopped: Option<Vec<String>>,
pub sigma_analysis_results: Option<Vec<SigmaAnalysisResult>>,
pub tags: Option<Vec<String>>,
pub text_decoded: Option<Vec<String>>,
pub text_highlighted: Option<Vec<String>>,
pub verdicts: Option<Vec<String>>,
pub verdicts_labels: Option<Vec<String>>,
}
Fields§
§analysis_date: Option<i64>
§behash: Option<String>
§command_executions: Option<Vec<String>>
§dns_lookups: Option<Vec<DnsLookup>>
§files_copied: Option<Vec<String>>
§files_deleted: Option<Vec<String>>
§files_dropped: Option<Vec<FileDrop>>
§files_opened: Option<Vec<String>>
§files_written: Option<Vec<String>>
§has_html_report: Option<bool>
§has_pcap: Option<bool>
§http_conversations: Option<Vec<HttpConversation>>
§ip_traffic: Option<Vec<IpTraffic>>
§ja3_digests: Option<Vec<Ja3Digest>>
§last_modification_date: Option<i64>
§mitre_attack_techniques: Option<Vec<MitreAttackTechnique>>
§modules_loaded: Option<Vec<String>>
§mutexes_created: Option<Vec<String>>
§mutexes_opened: Option<Vec<String>>
§processes_created: Option<Vec<String>>
§processes_injected: Option<Vec<String>>
§processes_killed: Option<Vec<String>>
§processes_terminated: Option<Vec<String>>
§processes_tree: Option<Vec<ProcessTreeNode>>
§registry_keys_deleted: Option<Vec<String>>
§registry_keys_opened: Option<Vec<String>>
§registry_keys_set: Option<Vec<RegistryKeySet>>
§sandbox_name: Option<String>
§services_created: Option<Vec<String>>
§services_deleted: Option<Vec<String>>
§services_opened: Option<Vec<String>>
§services_started: Option<Vec<String>>
§services_stopped: Option<Vec<String>>
§sigma_analysis_results: Option<Vec<SigmaAnalysisResult>>
§text_decoded: Option<Vec<String>>
§text_highlighted: Option<Vec<String>>
§verdicts: Option<Vec<String>>
§verdicts_labels: Option<Vec<String>>
Trait Implementations§
Source§impl Clone for FileBehaviorAttributes
impl Clone for FileBehaviorAttributes
Source§fn clone(&self) -> FileBehaviorAttributes
fn clone(&self) -> FileBehaviorAttributes
Returns a duplicate of the value. Read more
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source
. Read moreSource§impl Debug for FileBehaviorAttributes
impl Debug for FileBehaviorAttributes
Source§impl<'de> Deserialize<'de> for FileBehaviorAttributes
impl<'de> Deserialize<'de> for FileBehaviorAttributes
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations§
impl Freeze for FileBehaviorAttributes
impl RefUnwindSafe for FileBehaviorAttributes
impl Send for FileBehaviorAttributes
impl Sync for FileBehaviorAttributes
impl Unpin for FileBehaviorAttributes
impl UnwindSafe for FileBehaviorAttributes
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more