Method build

crates/openshell-ocsf/src/builders/ssh.rs:64–91

(self)

    #[must_use]
    pub fn build(self) -> OcsfEvent {
        let activity_name = self.activity.network_label().to_string();
        let mut base = BaseEventData::new(
            4007,
            "SSH Activity",
            4,
            "Network Activity",
            self.activity.as_u8(),
            &activity_name,
            self.severity,
            self.ctx
                .metadata(&["security_control", "container", "host"]),
        );
        self.ctx
            .apply_common_fields(&mut base, self.status, self.message);

        OcsfEvent::SshActivity(SshActivityEvent {
            base,
            src_endpoint: self.src_endpoint,
            dst_endpoint: self.dst_endpoint,
            actor: self.actor,
            auth_type: self.auth_type_id,
            auth_type_custom_label: self.auth_type_label,
            protocol_ver: self.protocol_ver,
            action: self.action,
            disposition: self.disposition,
        })
    }
}

impl_activity_setter!(SshActivityBuilder);