mirror of https://github.com/mvt-project/mvt.git
33 lines
1010 B
Python
33 lines
1010 B
Python
import pytest
|
|
import logging
|
|
import os
|
|
from ..utils import get_artifact, get_artifact_folder, init_setup
|
|
from mvt.common.indicators import Indicators, IndicatorsFileBadFormat
|
|
from mvt.ios.modules.mixed.net_datausage import Datausage
|
|
from mvt.common.module import run_module
|
|
|
|
|
|
class TestDatausageModule:
|
|
@pytest.fixture(scope="session", autouse=True)
|
|
def set(self):
|
|
init_setup()
|
|
|
|
def test_datausage(self):
|
|
m = Datausage(base_folder=get_artifact_folder(), log=logging)
|
|
run_module(m)
|
|
assert len(m.results) == 42
|
|
assert len(m.timeline) == 60
|
|
assert len(m.detected) == 0
|
|
|
|
def test_detection(self):
|
|
m = Datausage(base_folder=get_artifact_folder(), log=logging)
|
|
ind = Indicators(log=logging)
|
|
ind.parse_stix2(get_artifact("test.stix2"))
|
|
# Adds a file that exists in the manifest
|
|
ind.ioc_processes[0] = "CumulativeUsageTracker"
|
|
m.indicators = ind
|
|
run_module(m)
|
|
assert len(m.detected) == 4
|
|
|
|
|