Struct Rule 

pub struct Rule {
    pub id: &'static str,
    pub pattern: &'static str,
    pub severity: Severity,
    pub paranoia: u8,
}

A single detection rule: an id (used as rule_id in the emitted decision), a regex pattern compiled into a RegexSet at module init time, a severity class (mapped to points by the pipeline), and the minimum paranoia level at which the rule becomes active.

Fields

id: &'static str

pattern: &'static str

severity: Severity

paranoia: u8

Minimum configured paranoia level (1..=4) for this rule to be compiled.