def _test_getThreatReport_ir_command():
"""
Given:
- an URL
When:
- running ThreatReport command and fetch IA/IR
Then:
- return command results containing UUID, dbotscore
"""
url = 'https://test.com/rest/document/v0/bdc9d16f-6040-4894-8544-9c98986a41fd'
status_code = 200
json_res = RES_JSON_IR
expected_output = expected_output_ir
uuid_to_check = {'uuid': 'bdc9d16f-6040-4894-8544-9c98986a41fd'}
with requests_mock.Mocker() as m:
m.get(url, status_code=status_code, json=json_res)
doc_search_client = Client(API_URL, 'api_token', True, False,
ENDPOINTS['document'])
results = getThreatReport_command(doc_search_client, uuid_to_check,
DBotScoreReliability.B)
output = results.to_context().get('EntryContext', {})
assert output.get('IAIR(val.value && val.value == obj.value)',
[]) == expected_output.get('IR')
assert output.get(DBOT_KEY, []) == expected_output.get('DBot')
def test_getThreatReport_not_found():
url = 'https://test.com/rest/document/v0/a487dfdc-08b4-49a09-82ea-2d934c27d901'
status_code = 200
json_res = None
expected_output = 'No report was found for UUID: a487dfdc-08b4-49a09-82ea-2d934c27d901 !!'
uuid_to_check = {'uuid': 'a487dfdc-08b4-49a09-82ea-2d934c27d901'}
with requests_mock.Mocker() as m:
m.get(url, status_code=status_code, json=json_res)
doc_search_client = Client(API_URL, 'api_token', True, False, ENDPOINTS['document'])
results = getThreatReport_command(doc_search_client, uuid_to_check, DBotScoreReliability.B)
output = results.to_context().get('HumanReadable')
assert expected_output in output