Struct TtPsObservedDetail

#[non_exhaustive]
pub struct TtPsObservedDetail {
    pub tactic: Option<String>,
    pub technique: Option<String>,
    pub procedure: Option<String>,
    pub ip_address: Option<String>,
    pub api_name: Option<String>,
    pub api_success_count: i64,
    pub api_failure_count: i64,
}

Details tactics, techniques, and procedures (TTPs) used in a potential security event. Tactics are based on MITRE ATT&CK Matrix for Enterprise.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

tactic: Option<String>

The tactic used, identified by the investigation.

technique: Option<String>

The technique used, identified by the investigation.

procedure: Option<String>

The procedure used, identified by the investigation.

ip_address: Option<String>

The IP address where the tactics, techniques, and procedure (TTP) was observed.

api_name: Option<String>

The name of the API where the tactics, techniques, and procedure (TTP) was observed.

api_success_count: i64

The total number of successful API requests.

api_failure_count: i64

The total number of failed API requests.

Implementations

impl TtPsObservedDetail

pub fn tactic(&self) -> Option<&str>

The tactic used, identified by the investigation.

pub fn technique(&self) -> Option<&str>

The technique used, identified by the investigation.

pub fn procedure(&self) -> Option<&str>

The procedure used, identified by the investigation.

pub fn ip_address(&self) -> Option<&str>

The IP address where the tactics, techniques, and procedure (TTP) was observed.

pub fn api_name(&self) -> Option<&str>

The name of the API where the tactics, techniques, and procedure (TTP) was observed.

pub fn api_success_count(&self) -> i64

The total number of successful API requests.

pub fn api_failure_count(&self) -> i64

The total number of failed API requests.

impl TtPsObservedDetail

pub fn builder() -> TtPsObservedDetailBuilder

Creates a new builder-style object to manufacture TtPsObservedDetail.

Trait Implementations

impl Clone for TtPsObservedDetail

fn clone(&self) -> TtPsObservedDetail

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TtPsObservedDetail

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for TtPsObservedDetail

fn eq(&self, other: &TtPsObservedDetail) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TtPsObservedDetail