Struct owlyshield_ransom::connectors::sitincloud::SecurityEvent [−][src]
struct SecurityEvent {Show 22 fields
appName: String,
clientId: String,
hostname: String,
killTime: String,
clientKey: String,
pidsCount: usize,
predScore: f32,
startTime: String,
filesChanged: HashSet<String>,
filesCreated: HashSet<String>,
filesMovedCount: usize,
filesChangedCount: usize,
filesCreatedCount: usize,
filesDeletedCount: usize,
filesRenamedCount: usize,
secondsSinceLaunch: i64,
dirWithFilesChanged: HashSet<String>,
dirWithFilesCreated: HashSet<String>,
extensionsWriteCount: usize,
sumWeightReadEntropy: f64,
sumWeightWriteEntropy: f64,
filesExtensionChangedCount: usize,
}Expand description
Struct expected by the SitinCloud interface.
Fields
appName: StringclientId: Stringhostname: StringkillTime: StringclientKey: StringpidsCount: usizepredScore: f32startTime: StringfilesChanged: HashSet<String>filesCreated: HashSet<String>filesMovedCount: usizefilesChangedCount: usizefilesCreatedCount: usizefilesDeletedCount: usizefilesRenamedCount: usizesecondsSinceLaunch: i64dirWithFilesChanged: HashSet<String>dirWithFilesCreated: HashSet<String>extensionsWriteCount: usizesumWeightReadEntropy: f64sumWeightWriteEntropy: f64filesExtensionChangedCount: usizeImplementations
Creates SecurityEvent from ProcessRecord and prediction.
Converts SecurityEvent to JSON.
