59 lines
1.4 KiB
Python
59 lines
1.4 KiB
Python
|
"""Tests for stix.ExternalReference"""
|
||
|
|
|
||
|
|
import pytest
|
||
|
|
|
||
|
|
import stix2
|
||
|
|
|
||
|
|
LMCO_RECON = """{
|
||
|
|
"kill_chain_name": "lockheed-martin-cyber-kill-chain",
|
||
|
|
"phase_name": "reconnaissance"
|
||
|
|
}"""
|
||
|
|
|
||
|
|
|
||
|
|
def test_lockheed_martin_cyber_kill_chain():
|
||
|
|
recon = stix2.KillChainPhase(
|
||
|
|
kill_chain_name="lockheed-martin-cyber-kill-chain",
|
||
|
|
phase_name="reconnaissance",
|
||
|
|
)
|
||
|
|
|
||
|
|
assert str(recon) == LMCO_RECON
|
||
|
|
|
||
|
|
|
||
|
|
FOO_PRE_ATTACK = """{
|
||
|
|
"kill_chain_name": "foo",
|
||
|
|
"phase_name": "pre-attack"
|
||
|
|
}"""
|
||
|
|
|
||
|
|
|
||
|
|
def test_lockheed_martin_cyber_kill_chain():
|
||
|
|
preattack = stix2.KillChainPhase(
|
||
|
|
kill_chain_name="foo",
|
||
|
|
phase_name="pre-attack",
|
||
|
|
)
|
||
|
|
|
||
|
|
assert str(preattack) == FOO_PRE_ATTACK
|
||
|
|
|
||
|
|
|
||
|
|
def test_kill_chain_required_fields():
|
||
|
|
|
||
|
|
with pytest.raises(ValueError) as excinfo:
|
||
|
|
stix2.KillChainPhase()
|
||
|
|
|
||
|
|
assert str(excinfo.value) == "Missing required field(s) for KillChainPhase: (kill_chain_name, phase_name)."
|
||
|
|
|
||
|
|
|
||
|
|
def test_kill_chain_required_field_chain_name():
|
||
|
|
|
||
|
|
with pytest.raises(ValueError) as excinfo:
|
||
|
|
stix2.KillChainPhase(phase_name="weaponization")
|
||
|
|
|
||
|
|
assert str(excinfo.value) == "Missing required field(s) for KillChainPhase: (kill_chain_name)."
|
||
|
|
|
||
|
|
|
||
|
|
def test_kill_chain_required_field_phase_name():
|
||
|
|
|
||
|
|
with pytest.raises(ValueError) as excinfo:
|
||
|
|
stix2.KillChainPhase(kill_chain_name="lockheed-martin-cyber-kill-chain")
|
||
|
|
|
||
|
|
assert str(excinfo.value) == "Missing required field(s) for KillChainPhase: (phase_name)."
|