def test_sharing_type_added_is_in_str_gives_correct_json_representation():
items = ["cloud1", "cloud2", "cloud3"]
_filter = SharingTypeAdded.is_in(items)
expected = IS_IN.format("sharingTypeAdded", *items)
assert str(_filter) == expected
def test_window_title_is_in_str_gives_correct_json_representation():
items = ["window1", "window2", "window3"]
_filter = WindowTitle.is_in(items)
expected = IS_IN.format("tabTitles", *items)
assert str(_filter) == expected
def test_sha256_is_in_str_gives_correct_json_representation():
items = ["sha2561", "sha2562", "sha2563"]
_filter = SHA256.is_in(items)
expected = IS_IN.format("sha256Checksum", *items)
assert str(_filter) == expected
def test_file_name_is_in_str_gives_correct_json_representation():
items = ["fileName", "fileName", "fileName"]
_filter = FileName.is_in(items)
expected = IS_IN.format("fileName", *items)
assert str(_filter) == expected
def test_description_is_in_str_gives_correct_json_representation():
items = ["desc1", "desc2", "desc3"]
_filter = Description.is_in(items)
expected = IS_IN.format("description", *sorted(items))
assert str(_filter) == expected
def test_file_path_is_in_str_gives_correct_json_representation():
items = ["filePath1", "filePath2", "filePath3"]
_filter = FilePath.is_in(items)
expected = IS_IN.format("filePath", *items)
assert str(_filter) == expected
def test_email_sender_is_in_str_gives_correct_json_representation():
items = ["email_sender1", "email_sender2", "email_sender3"]
_filter = EmailSender.is_in(items)
expected = IS_IN.format("emailSender", *items)
assert str(_filter) == expected
def test_severity_is_in_str_gives_correct_json_representation():
items = ["HIGH", "MEDIUM", "LOW"]
_filter = Severity.is_in(items)
expected = IS_IN.format("severity", *sorted(items))
assert str(_filter) == expected
def test_email_from_is_in_str_gives_correct_json_representation():
items = ["email_from1", "email_from2", "email_from3"]
_filter = EmailFrom.is_in(items)
expected = IS_IN.format("emailFrom", *items)
assert str(_filter) == expected
def test_email_recipients_is_in_str_gives_correct_json_representation():
items = ["EmailRecipients1", "EmailRecipients2", "EmailRecipients3"]
_filter = EmailRecipients.is_in(items)
expected = IS_IN.format("emailRecipients", *items)
assert str(_filter) == expected
def test_email_policy_name_is_in_str_gives_correct_json_representation():
items = ["test_policy1", "test_policy2", "test_policy3"]
_filter = EmailPolicyName.is_in(items)
expected = IS_IN.format("emailDlpPolicyNames", *items)
assert str(_filter) == expected
def test_directory_id_is_in_str_gives_correct_json_representation():
items = ["directoryId1", "directoryId2", "directoryId3"]
_filter = DirectoryID.is_in(items)
expected = IS_IN.format("directoryId", *items)
assert str(_filter) == expected
def test_actor_is_in_str_gives_correct_json_representation():
items = ["actor1", "actor2", "actor3"]
_filter = Actor.is_in(items)
expected = IS_IN.format("actor", *items)
assert str(_filter) == expected
def test_process_name_is_in_str_gives_correct_json_representation():
items = ["n1", "n2", "n3"]
_filter = ProcessName.is_in(items)
expected = IS_IN.format("processName", *items)
assert str(_filter) == expected
def test_email_subject_is_in_str_gives_correct_json_representation():
items = ["test_subject1", "test_subject2", "test_subject3"]
_filter = EmailSubject.is_in(items)
expected = IS_IN.format("emailSubject", *items)
assert str(_filter) == expected
def test_actor_is_in_str_gives_correct_json_representation():
items = ["test.testerson", "flag.flagerson", "mock.mockerson"]
_filter = Actor.is_in(items)
expected = IS_IN.format("actor", *sorted(items))
assert str(_filter) == expected
def test_process_owner_is_in_str_gives_correct_json_representation():
items = ["owner1", "owner2", "owner3"]
_filter = ProcessOwner.is_in(items)
expected = IS_IN.format("processOwner", *items)
assert str(_filter) == expected
def test_rule_source_is_in_str_gives_correct_json_representation():
items = ["rule1", "rule2", "rule3"]
_filter = RuleSource.is_in(items)
expected = IS_IN.format("ruleSource", *sorted(items))
assert str(_filter) == expected
def test_removable_media_volume_name_is_in_str_gives_correct_json_representation(
):
items = ["name1", "name2", "name3"]
_filter = RemovableMediaVolumeName.is_in(items)
expected = IS_IN.format("removableMediaVolumeName", *items)
assert str(_filter) == expected
def test_alert_state_is_in_str_gives_correct_json_representation():
items = ["OPEN", "DISMISSED", "OTHER"]
_filter = AlertState.is_in(items)
expected = IS_IN.format("state", *sorted(items))
assert str(_filter) == expected
def test_removable_media_partition_id_is_in_str_gives_correct_json_representation(
):
items = ["name1", "name2", "name3"]
_filter = RemovableMediaPartitionID.is_in(items)
expected = IS_IN.format("removableMediaPartitionId", *items)
assert str(_filter) == expected
def test_md5_is_in_str_gives_correct_json_representation():
items = ["md51", "md52", "md53"]
_filter = MD5.is_in(items)
expected = IS_IN.format("md5Checksum", *items)
assert str(_filter) == expected
def test_removable_media_serial_number_is_in_str_gives_correct_json_representation(
):
items = ["name1", "name2", "name3"]
_filter = RemovableMediaSerialNumber.is_in(items)
expected = IS_IN.format("removableMediaSerialNumber", *items)
assert str(_filter) == expected
def test_file_category_is_in_str_gives_correct_json_representation():
items = ["category1", "category2", "category3"]
_filter = FileCategory.is_in(items)
expected = IS_IN.format("fileCategory", *items)
assert str(_filter) == expected
def test_tab_url_is_in_str_gives_correct_json_representation():
items = ["tab1", "tab2", "tab3"]
_filter = TabURL.is_in(items)
expected = IS_IN.format("tabUrls", *items)
assert str(_filter) == expected
def test_file_owner_is_in_str_gives_correct_json_representation():
items = ["fileOwner1", "fileOwner2", "fileOwner3"]
_filter = FileOwner.is_in(items)
expected = IS_IN.format("fileOwner", *sorted(items))
assert str(_filter) == expected
def test_shared_with_is_in_str_gives_correct_json_representation():
items = ["user1", "user2", "user3"]
_filter = SharedWith.is_in(items)
expected = IS_IN.format("sharedWith", *items)
assert str(_filter) == expected