Expand description
Abstract syntax tree for STIX 2.1 patterns. All nodes are serde-serializable.
Structs§
- Comparison
- A single property test.
- Object
Path - An object path:
object-type:first.step[0].next. - Pattern
- A complete parsed pattern.
Enums§
- Comparison
Expression - Comparison-level expression tree (inside
[ ]). - Comparison
Operand - Right-hand side of a comparison: either a single literal or a set (for
IN). - Comparison
Operator - The operator of a property test.
- Literal
- A primitive literal value.
- Observation
Expression - Observation-level expression tree.
FOLLOWEDBY/AND/ORcombine observations; qualifiers attach to a sub-expression. - Path
Step - One step in an
ObjectPath. - Qualifier
- Postfix qualifier on an observation expression.