mvt/tests/ios/test_datausage.py
2022-01-07 17:08:46 +01:00

31 lines
968 B
Python

import pytest
import logging
from mvt.common.indicators import Indicators
from mvt.ios.modules.mixed.net_datausage import Datausage
from mvt.common.module import run_module
from ..utils import get_artifact, get_backup_folder, init_setup
class TestDatausageModule:
@pytest.fixture(scope="session", autouse=True)
def set(self):
init_setup()
def test_datausage(self):
m = Datausage(base_folder=get_backup_folder(), log=logging)
run_module(m)
assert len(m.results) == 42
assert len(m.timeline) == 60
assert len(m.detected) == 0
def test_detection(self):
m = Datausage(base_folder=get_backup_folder(), log=logging)
ind = Indicators(log=logging)
ind.parse_stix2(get_artifact("test.stix2"))
# Adds a file that exists in the manifest
ind.ioc_processes[0] = "CumulativeUsageTracker"
m.indicators = ind
run_module(m)
assert len(m.detected) == 4