Extracts node IDs from causal paths to generate policy enforcement promotion suggestions based on historical causal impact analysis.
// Source: https://github.com/backbay-labs/clawdstrike | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
use super::*;
pub(crate) fn promotion_suggestions_for_causal_impact(
contexts: &[EdrPolicyEventHistoryCausalContext],
max_depth: usize,
selected_stage: Option<&str>,
cross_window_hashes: Option<(&str, &str)>,
) -> Vec<EdrPolicyEventHistoryPromotionSuggestion> {
let mut suggestions = Vec::new();
let mut seen = BTreeSet::new();
let selected_stage = selected_stage.unwrap_or("audit").to_string();
let cross_window_impact_hash =
cross_window_hashes.map(|(impact_hash, _)| impact_hash.to_string());
let cross_window_recommendation_hash =
... (truncated -- full source via MCP)
See the full source, get the GitHub permalink, and search 40K more like it.
Get a free API key