Struct Ttp 

pub struct Ttp {
    pub id: String,
    pub name: String,
    pub evidence: Option<String>,
}

A MITRE ATT&CK technique observation. id uses the canonical T#### (or T####.### for sub-techniques) form.

Fields

id: String

Technique ID in T#### or T####.### form.

name: String

Human-readable technique name (e.g. "Process Injection").

evidence: Option<String>

Optional free-text evidence supporting this observation.

Implementations

impl Ttp

pub fn new(id: impl Into<String>, name: impl Into<String>) -> Self

Create a TTP with a MITRE ATT&CK ID and name.

pub fn evidence(self, ev: impl Into<String>) -> Self

Attach free-text evidence supporting this observation.

Trait Implementations

impl Clone for Ttp

fn clone(&self) -> Ttp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Ttp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Ttp

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Ttp

fn eq(&self, other: &Ttp) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Ttp

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Ttp

impl StructuralPartialEq for Ttp