Enum AuditEventType 

#[repr(u8)]
pub enum AuditEventType {
    ProcessCreate = 0,
    ProcessExit = 1,
    FileAccess = 2,
    NetworkConnect = 3,
    AuthAttempt = 4,
    PermissionDenied = 5,
    Syscall = 6,
    CapabilityOp = 7,
    MacDecision = 8,
    PrivilegeEscalation = 9,
    SecurityConfigChange = 10,
}

Audit event type.

Variants

ProcessCreate = 0

Process creation

ProcessExit = 1

Process termination

FileAccess = 2

File access

NetworkConnect = 3

Network connection

AuthAttempt = 4

Authentication attempt

PermissionDenied = 5

Permission denied

Syscall = 6

System call

CapabilityOp = 7

Capability operation

MacDecision = 8

MAC policy decision

PrivilegeEscalation = 9

Privilege escalation attempt

SecurityConfigChange = 10

Security configuration change

Implementations

impl AuditEventType

pub fn to_flag(self) -> u32

Convert to bitmask flag for filtering.

pub fn as_str(self) -> &'static str

Get a human-readable name for this event type.

Trait Implementations

impl Clone for AuditEventType

fn clone(&self) -> AuditEventType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEventType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for AuditEventType

fn eq(&self, other: &AuditEventType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for AuditEventType

impl Eq for AuditEventType

impl StructuralPartialEq for AuditEventType