Skip to main content

Module advanced_detection

Module advanced_detection 

Source
Expand description

Experimental signal definitions and caller-scored technique catalogs.

§Runtime scope

  • Build: opt-in via detection.
  • Execution: no repository runtime caller.
  • Default termivar scan: no.
  • Support: experimental record/catalog scaffold.

This module validates and stores caller-supplied records. It does not inspect responses, execute transformations, classify vulnerabilities, or emit findings. See docs/internals/runtime-map.md.

Structs§

BehaviorIndicator
Caller-supplied signal indicator.
BehavioralAnalysisData
Caller-supplied observation record. No signal is evaluated from it here.
BehavioralSignature
Caller-supplied behavioral signal definition.
TechniqueCatalog
Deterministic in-memory catalog for validated technique records.
TechniqueRecord
Caller-supplied technique record; the scanner never executes it.
TransformationRule
Caller-supplied transformation-rule record; the scanner never applies it.
TransformationRuleCatalog
Deterministic in-memory catalog for validated transformation-rule records.

Enums§

BehavioralSignatureValidationError
Validation failures for caller-supplied signal records.
CatalogRecordError
Validation failure for a caller-supplied catalog record.
ComparisonOperator
Numeric comparison recorded by a host. This module does not apply it.
IndicatorType
Supported dimensions for a caller-supplied indicator.
TechniqueCategory
Neutral technique category used by caller-supplied records.
TransformationType
Neutral transformation category for a caller-supplied rule record.