Struct owlyshield_ransom::driver_com::shared_def::RuntimeFeatures

pub struct RuntimeFeatures {
    pub exepath: PathBuf,
    pub exe_still_exists: bool,
}

Stores runtime features that come from owlyshield_predict (and not the minifilter).

• exepath: The path of the gid root process
• exe_exists: Did the root exe file still existed (at the moment of this specific DriverMessage operation)?

Fields

exepath: PathBuf

exe_still_exists: bool

Implementations

impl RuntimeFeatures

pub fn new() -> RuntimeFeatures

Trait Implementations

impl Clone for RuntimeFeatures

fn clone(&self) -> RuntimeFeatures

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeFeatures

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RuntimeFeatures

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Serialize for RuntimeFeatures

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.