def test_export_calls_cases_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.export_summary(_TEST_CASE_NUMBER)
mock_cases_service.export_summary.assert_called_once_with(
_TEST_CASE_NUMBER)
def test_get_all_converts_diff_types_to_ranges_and_calls_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get_all(
min_create_time=1609439400,
min_update_time="2021-02-01 00:00:00",
max_create_time=1612117800.0,
max_update_time=datetime.strptime("2021-02-20 00:00:00",
"%Y-%m-%d %H:%M:%S"),
subject="subject",
assignee="a",
name="test",
status="closed",
)
created_at_range = "2020-12-31T18:30:00.000Z/2021-01-31T18:30:00.000Z"
updated_at_range = "2021-02-01T00:00:00.000Z/2021-02-20T00:00:00.000Z"
mock_cases_service.get_all.assert_called_once_with(
name="test",
status="closed",
created_at=created_at_range,
updated_at=updated_at_range,
subject="subject",
assignee="a",
page_size=100,
sort_direction="asc",
sort_key="number",
)
def test_get_all_sets_default_min_when_max_specified(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get_all(max_update_time=datetime.strptime(
"2021-02-20 00:00:00", "%Y-%m-%d %H:%M:%S"))
expected_range = "1970-01-01T00:00:00.000Z/2021-02-20T00:00:00.000Z"
service_args = mock_cases_service.get_all.call_args[1]
assert service_args["updated_at"] == expected_range
def test_get_all_sets_default_max_when_min_specified(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get_all(min_create_time=1609439400)
actual_range = mock_cases_service.get_all.call_args[1]["created_at"]
actual_max_time_string = actual_range.split("/")[1]
actual_max_time_obj = datetime.strptime(actual_max_time_string,
"%Y-%m-%dT%H:%M:%S.%fZ")
assert (datetime.utcnow() - actual_max_time_obj).total_seconds() < 0.03
def test_update_calls_cases_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.update(_TEST_CASE_NUMBER, name="new name")
mock_cases_service.update.assert_called_once_with(
_TEST_CASE_NUMBER,
name="new name",
assignee=None,
subject=None,
status=None,
description=None,
findings=None,
)
def _init_clients(services, connection):
# clients are imported within function to prevent circular imports when a client
# imports anything from py42.sdk.queries
from py42.clients import Clients
from py42.clients._archiveaccess.accessorfactory import ArchiveAccessorFactory
from py42.clients.alertrules import AlertRulesClient
from py42.clients.alerts import AlertsClient
from py42.clients.archive import ArchiveClient
from py42.clients.auditlogs import AuditLogsClient
from py42.clients.authority import AuthorityClient
from py42.clients.cases import CasesClient
from py42.clients.detectionlists import DetectionListsClient
from py42.clients.loginconfig import LoginConfigurationClient
from py42.clients.securitydata import SecurityDataClient
from py42.clients.trustedactivities import TrustedActivitiesClient
from py42.services.storage._service_factory import ConnectionManager
from py42.services.storage._service_factory import StorageServiceFactory
authority = AuthorityClient(
administration=services.administration,
archive=services.archive,
devices=services.devices,
legalhold=services.legalhold,
orgs=services.orgs,
users=services.users,
)
detectionlists = DetectionListsClient(services.userprofile,
services.departingemployee,
services.highriskemployee)
storage_service_factory = StorageServiceFactory(connection,
services.devices,
ConnectionManager())
alertrules = AlertRulesClient(services.alerts, services.alertrules)
securitydata = SecurityDataClient(
services.fileevents,
services.preservationdata,
services.savedsearch,
storage_service_factory,
)
alerts = AlertsClient(services.alerts, alertrules)
archive_accessor_factory = ArchiveAccessorFactory(services.archive,
storage_service_factory)
archive = ArchiveClient(archive_accessor_factory, services.archive)
auditlogs = AuditLogsClient(services.auditlogs)
loginconfig = LoginConfigurationClient(connection)
trustedactivities = TrustedActivitiesClient(services.trustedactivities)
clients = Clients(
authority=authority,
detectionlists=detectionlists,
alerts=alerts,
securitydata=securitydata,
archive=archive,
auditlogs=auditlogs,
cases=CasesClient(services.cases, services.casesfileevents),
loginconfig=loginconfig,
trustedactivities=trustedactivities,
)
return clients
def test_create_calls_cases_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.create(
"name",
subject="subject",
assignee="assignee",
description="description",
findings="observation",
)
mock_cases_service.create.assert_called_once_with(
"name",
subject="subject",
assignee="assignee",
description="description",
findings="observation",
)
def test_get_all_converts_datetime_to_ranges_and_calls_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get_all(
min_create_time="2021-01-01 00:00:00",
max_create_time="2021-02-01 00:00:00",
min_update_time="2021-01-31 00:00:00",
max_update_time="2021-02-20 00:00:00",
)
created_at_range = "2021-01-01T00:00:00.000Z/2021-02-01T00:00:00.000Z"
updated_at_range = "2021-01-31T00:00:00.000Z/2021-02-20T00:00:00.000Z"
mock_cases_service.get_all.assert_called_once_with(
name=None,
status=None,
created_at=created_at_range,
updated_at=updated_at_range,
subject=None,
assignee=None,
page_size=100,
sort_direction="asc",
sort_key="number",
)
def _init_clients(services, connection):
authority = AuthorityClient(
administration=services.administration,
archive=services.archive,
devices=services.devices,
legalhold=services.legalhold,
orgs=services.orgs,
securitydata=services.securitydata,
users=services.users,
)
detectionlists = DetectionListsClient(services.userprofile,
services.departingemployee,
services.highriskemployee)
storage_service_factory = StorageServiceFactory(connection,
services.devices,
ConnectionManager())
alertrules = AlertRulesClient(services.alerts, services.alertrules)
securitydata = SecurityDataClient(
services.securitydata,
services.fileevents,
services.preservationdata,
services.savedsearch,
storage_service_factory,
)
alerts = AlertsClient(services.alerts, alertrules)
archive_accessor_factory = ArchiveAccessorFactory(services.archive,
storage_service_factory)
archive = ArchiveClient(archive_accessor_factory, services.archive)
auditlogs = AuditLogsClient(services.auditlogs)
clients = Clients(
authority=authority,
detectionlists=detectionlists,
alerts=alerts,
securitydata=securitydata,
archive=archive,
auditlogs=auditlogs,
cases=CasesClient(services.cases, services.casesfileevents),
)
return clients
def test_get_all_calls_cases_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get_all()
assert mock_cases_service.get_all.call_count == 1
def test_file_events_returns_cases_file_events_service(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
assert cases_client.file_events is mock_cases_file_event_service
def test_get_page_calls_service_with_expected_params(
self, mock_cases_service, mock_cases_file_event_service):
cases_client = CasesClient(mock_cases_service,
mock_cases_file_event_service)
cases_client.get(1)
mock_cases_service.get.assert_called_once_with(1)
