2017-04-25 00:29:56 +02:00
|
|
|
import datetime as dt
|
|
|
|
|
2017-04-19 15:22:08 +02:00
|
|
|
import pytest
|
|
|
|
import pytz
|
2017-05-09 21:10:53 +02:00
|
|
|
|
2017-02-24 18:56:55 +01:00
|
|
|
import stix2
|
|
|
|
|
2019-01-29 16:52:59 +01:00
|
|
|
from .constants import IDENTITY_ID, TOOL_ID
|
2017-04-19 15:22:08 +02:00
|
|
|
|
2017-02-24 18:56:55 +01:00
|
|
|
EXPECTED = """{
|
2017-08-15 19:41:51 +02:00
|
|
|
"type": "tool",
|
2017-02-24 18:56:55 +01:00
|
|
|
"id": "tool--8e2e2d2b-17d4-4cbf-938f-98ee46b3cd3f",
|
2019-01-29 16:52:59 +01:00
|
|
|
"created_by_ref": "identity--311b2d2d-f010-4473-83ec-1edf84858f4c",
|
2017-08-15 19:41:51 +02:00
|
|
|
"created": "2016-04-06T20:03:48.000Z",
|
2017-06-23 00:47:35 +02:00
|
|
|
"modified": "2016-04-06T20:03:48.000Z",
|
2017-02-24 18:56:55 +01:00
|
|
|
"name": "VNC",
|
2017-08-15 19:41:51 +02:00
|
|
|
"labels": [
|
|
|
|
"remote-access"
|
|
|
|
]
|
2017-02-24 18:56:55 +01:00
|
|
|
}"""
|
|
|
|
|
2018-04-16 20:37:07 +02:00
|
|
|
EXPECTED_WITH_REVOKED = """{
|
|
|
|
"type": "tool",
|
|
|
|
"id": "tool--8e2e2d2b-17d4-4cbf-938f-98ee46b3cd3f",
|
2019-01-29 16:52:59 +01:00
|
|
|
"created_by_ref": "identity--311b2d2d-f010-4473-83ec-1edf84858f4c",
|
2018-04-16 20:37:07 +02:00
|
|
|
"created": "2016-04-06T20:03:48.000Z",
|
|
|
|
"modified": "2016-04-06T20:03:48.000Z",
|
|
|
|
"name": "VNC",
|
|
|
|
"revoked": false,
|
|
|
|
"labels": [
|
|
|
|
"remote-access"
|
|
|
|
]
|
|
|
|
}"""
|
|
|
|
|
2017-02-24 18:56:55 +01:00
|
|
|
|
|
|
|
def test_tool_example():
|
2018-07-05 21:23:25 +02:00
|
|
|
tool = stix2.v20.Tool(
|
2019-01-23 05:07:20 +01:00
|
|
|
id=TOOL_ID,
|
2019-01-29 16:52:59 +01:00
|
|
|
created_by_ref=IDENTITY_ID,
|
2017-06-23 00:47:35 +02:00
|
|
|
created="2016-04-06T20:03:48.000Z",
|
|
|
|
modified="2016-04-06T20:03:48.000Z",
|
2017-02-24 18:56:55 +01:00
|
|
|
labels=["remote-access"],
|
2019-01-23 05:07:20 +01:00
|
|
|
name="VNC",
|
2017-02-24 18:56:55 +01:00
|
|
|
)
|
|
|
|
|
|
|
|
assert str(tool) == EXPECTED
|
|
|
|
|
2017-04-19 15:22:08 +02:00
|
|
|
|
2018-07-13 17:10:05 +02:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
"data", [
|
|
|
|
EXPECTED,
|
|
|
|
{
|
|
|
|
"created": "2016-04-06T20:03:48Z",
|
2019-01-29 16:52:59 +01:00
|
|
|
"created_by_ref": IDENTITY_ID,
|
2019-01-23 05:07:20 +01:00
|
|
|
"id": TOOL_ID,
|
2018-07-13 17:10:05 +02:00
|
|
|
"modified": "2016-04-06T20:03:48Z",
|
2019-01-23 05:07:20 +01:00
|
|
|
"labels": ["remote-access"],
|
2018-07-13 17:10:05 +02:00
|
|
|
"name": "VNC",
|
|
|
|
"type": "tool",
|
|
|
|
},
|
|
|
|
],
|
|
|
|
)
|
2017-04-19 15:22:08 +02:00
|
|
|
def test_parse_tool(data):
|
2018-07-05 21:23:25 +02:00
|
|
|
tool = stix2.parse(data, version="2.0")
|
2017-04-19 15:22:08 +02:00
|
|
|
|
|
|
|
assert tool.type == 'tool'
|
|
|
|
assert tool.id == TOOL_ID
|
|
|
|
assert tool.created == dt.datetime(2016, 4, 6, 20, 3, 48, tzinfo=pytz.utc)
|
|
|
|
assert tool.modified == dt.datetime(2016, 4, 6, 20, 3, 48, tzinfo=pytz.utc)
|
2019-01-29 16:52:59 +01:00
|
|
|
assert tool.created_by_ref == IDENTITY_ID
|
2017-04-19 15:22:08 +02:00
|
|
|
assert tool.labels == ["remote-access"]
|
|
|
|
assert tool.name == "VNC"
|
|
|
|
|
2017-11-30 01:25:52 +01:00
|
|
|
|
|
|
|
def test_tool_no_workbench_wrappers():
|
2018-07-05 21:23:25 +02:00
|
|
|
tool = stix2.v20.Tool(name='VNC', labels=['remote-access'])
|
2017-11-30 01:25:52 +01:00
|
|
|
with pytest.raises(AttributeError):
|
|
|
|
tool.created_by()
|
|
|
|
|
2018-04-16 20:37:07 +02:00
|
|
|
|
|
|
|
def test_tool_serialize_with_defaults():
|
2018-07-05 21:23:25 +02:00
|
|
|
tool = stix2.v20.Tool(
|
2019-01-23 05:07:20 +01:00
|
|
|
id=TOOL_ID,
|
2019-01-29 16:52:59 +01:00
|
|
|
created_by_ref=IDENTITY_ID,
|
2018-04-16 20:37:07 +02:00
|
|
|
created="2016-04-06T20:03:48.000Z",
|
|
|
|
modified="2016-04-06T20:03:48.000Z",
|
|
|
|
labels=["remote-access"],
|
2019-01-23 05:07:20 +01:00
|
|
|
name="VNC",
|
2018-04-16 20:37:07 +02:00
|
|
|
)
|
|
|
|
|
|
|
|
assert tool.serialize(pretty=True, include_optional_defaults=True) == EXPECTED_WITH_REVOKED
|
|
|
|
|
|
|
|
|
2017-02-24 18:56:55 +01:00
|
|
|
# TODO: Add other examples
|