Struct google_api_proto::google::cloud::ids::logging::v1::ThreatLog

pub struct ThreatLog {

    pub name: String,
    pub threat_id: String,
    pub alert_time: Option<Timestamp>,
    pub alert_severity: i32,
    pub type: String,
    pub category: String,
    pub source_ip_address: String,
    pub source_port: i32,
    pub destination_ip_address: String,
    pub destination_port: i32,
    pub ip_protocol: String,
    pub direction: i32,
    pub session_id: String,
    pub repeat_count: String,
    pub application: String,
    pub uri_or_filename: String,
    pub cves: Vec<String>,
    pub details: String,
    pub network: String,
}

A threat detected by Cloud IDS.

Fields

name: String

Name of the threat, e,g. “Suspicious HTTP Evasion”

threat_id: String

Unique ID of the threat.

alert_time: Option<Timestamp>

The time of the alert.

alert_severity: i32

Severity of threat.

type: String

The type of the threat, e.g. “Spyware”.

category: String

Category (sub-type) of the threat, e.g. “code-execution”.

source_ip_address: String

The source IP Address of the packet, e.g. “35.191.8.79”

source_port: i32

The source port of the packet, e.g. 8080

destination_ip_address: String

The destination IP Address of the packet, e.g. “192.168.100.2”

destination_port: i32

The destination port of the packet, e.g. 100

ip_protocol: String

The IP protocol of the packet, e.g. “TCP”.

direction: i32

The direction of the packet - an optional field.

session_id: String

ID of the Layer 4 session of the threat.

repeat_count: String

Number of sessions with same source IP, destination IP, application, and type seen within 5 seconds.

application: String

Application associated with the session.

uri_or_filename: String

Variable field. URI or filename of the relevant threat, if applicable.

cves: Vec<String>

CVE IDs of the threat.

details: String

Details of the threat reported by the IDS VM

network: String

The network associated with the IDS Endpoint.

Implementations

impl ThreatLog

pub fn direction(&self) -> Direction

Returns the enum value of direction, or the default if the field is set to an invalid enum value.

pub fn set_direction(&mut self, value: Direction)

Sets direction to the provided enum value.

pub fn alert_severity(&self) -> Severity

Returns the enum value of alert_severity, or the default if the field is set to an invalid enum value.

pub fn set_alert_severity(&mut self, value: Severity)

Sets alert_severity to the provided enum value.

Trait Implementations

impl Clone for ThreatLog

fn clone(&self) -> ThreatLog

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ThreatLog

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ThreatLog

fn default() -> Self

Returns the “default value” for a type.

impl Message for ThreatLog

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ThreatLog

fn eq(&self, other: &ThreatLog) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ThreatLog