Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

parser

package

Go to main page

Versions in this module

v0

v0.0.28

Apr 5, 2025

v0.0.27

Apr 3, 2025

v0.0.26

Apr 3, 2025

v0.0.25

Apr 3, 2025

v0.0.24

Apr 3, 2025

v0.0.23

Apr 3, 2025

v0.0.22

Apr 3, 2025

v0.0.21

Apr 2, 2025

Changes in this version

+ const SeverityCritical

+ const SeverityHigh

+ const SeverityInfo

+ const SeverityLow

+ const SeverityMedium

+ var ErrInvalidSeq = errors.New("invalid sequence")

+ var ErrInvalidSet = errors.New("invalid set")

+ var ErrMissingMatch = errors.New("set missing match")

+ var ErrMissingOrder = errors.New("sequence missing order")

+ var ErrNotSupported = errors.New("not supported")

+ var ErrTermNotFound = errors.New("term not found")

+ func ParseCres(data []byte) (map[string]ParseCreT, error)

+ type EventT struct

+ Origin bool

+ Source string

+ type FieldT struct

+ Count int

+ Field string

+ JqValue string

+ NegateOpts *NegateOptsT

+ RegexValue string

+ StrValue string

+ type MatcherT struct

+ Match TermsT

+ Negate TermsT

+ Window time.Duration

+ type NegateOptsT struct

+ Absolute bool

+ Anchor uint32

+ Slide time.Duration

+ Window time.Duration

+ type NodeMetadataT struct

+ Correlations []string

+ Event *EventT

+ NegateOpts *NegateOptsT

+ RuleHash string

+ RuleId string

+ Type NodeTypeT

+ Window time.Duration

+ type NodeT struct

+ Children []any

+ Metadata NodeMetadataT

+ NegIdx int

+ type NodeTypeT string

+ const NodeTypeSeq

+ const NodeTypeSeqNeg

+ const NodeTypeSeqNegSingle

+ const NodeTypeSet

+ const NodeTypeSetNeg

+ const NodeTypeSetNegSingle

+ type ParseApplicationT struct

+ ContainerName string

+ ImageUrl string

+ Name string

+ ProcessName string

+ ProcessPath string

+ RepoUrl string

+ Version string

+ type ParseCreT struct

+ Applications []ParseApplicationT

+ Author string

+ Category string

+ Cause string

+ Description string

+ Id string

+ Impact string

+ Mitigation string

+ References []string

+ Reports uint

+ Severity uint

+ Tags []string

+ Title string

+ type ParseEventT struct

+ Origin bool

+ Source string

+ type ParseNegateOptsT struct

+ Absolute bool

+ Anchor uint32

+ Slide string

+ Window string

+ type ParseRuleDataT struct

+ Sequence *ParseSequenceT

+ Set *ParseSetT

+ type ParseRuleMetadataT struct

+ Gen uint

+ Hash string

+ Id string

+ Kind string

+ Name string

+ Version string

+ type ParseRuleT struct

+ Cre ParseCreT

+ Metadata ParseRuleMetadataT

+ Rule ParseRuleDataT

+ type ParseSequenceT struct

+ Correlations []string

+ Event *ParseEventT

+ Negate []ParseTermT

+ Order []ParseTermT

+ Origin bool

+ Window string

+ type ParseSetT struct

+ Correlations []string

+ Event *ParseEventT

+ Match []ParseTermT

+ Negate []ParseTermT

+ Window string

+ type ParseTermT struct

+ Count int

+ Field string

+ JqValue string

+ NegateOpts *ParseNegateOptsT

+ RegexValue string

+ Sequence *ParseSequenceT

+ Set *ParseSetT

+ StrValue string

+ func (o *ParseTermT) UnmarshalYAML(unmarshal func(any) error) error

+ type RulesT struct

+ Rules []ParseRuleT

+ Terms map[string]ParseTermT

+ type TermsT struct

+ Fields []FieldT

+ type TreeT struct

+ Nodes []*NodeT

+ func Parse(data []byte) (*TreeT, error)

+ func ParseRules(config *RulesT) (*TreeT, error)