zeek/src/file_analysis/analyzer
Dominik Charousset 647fdf7737 Add facade types to avoid using raw Broker types
By avoiding to use `broker::data` directly, we gain a degree of freedom
that allows us to swap out `broker::data` for something else (e.g.,
`broker::variant`) in the future. Furthermore, it also helps us to keep
Broker types "local" to the Broker manager and gives us a nicer
interface.

Also replaces uses of `broker::expected` with `std::optional`. While an
`expected `can carry additional information as to why a value is not
present, nothing in Zeek ever cared about that. Hence, using
`std::optional` removes an unnecessary dependency on a Broker detail
while also being more efficient (no extra heap allocation when no value
is present).
2023-12-04 15:23:28 +01:00
..
data_event Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
entropy Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
extract Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
hash Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
pe Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
x509 Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
CMakeLists.txt Remove unified2 file analyzer 2022-08-19 14:05:00 +02:00