MISP
/
cti-python-stix2
mirror of https://github.com/MISP/cti-python-stix2
2
0
Fork 0
Code Issues Releases Wiki Activity

Isolate TimestampConstant in test.

stix2.1
Greg Back 2017-10-05 21:54:58 +00:00
parent 0dc3226048
commit 1414035e8d
1 changed files with 2 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
stix2/test/test_pattern_expressions.py
View File

@ -172,16 +172,6 @@ def test_set_op():
assert str(exp) == "[network-traffic:dst_ref.value ISSUBSET '2001:0db8:dead:beef:0000:0000:0000:0000/64']"
# [(file:name = 'pdf.exe' OR file:size = '371712') AND file:created = t'2014-01-13T07:03:17Z']
def test_timestamp():
exp_or = stix2.OrBooleanExpression([stix2.EqualityComparisonExpression("file:name",
"pdf.exe"),
stix2.EqualityComparisonExpression("file:size",
stix2.IntegerConstant('371712'))])
exp_paren = stix2.ParentheticalExpression(exp_or)
exp_and = stix2.AndBooleanExpression([exp_paren,
stix2.EqualityComparisonExpression("file:created",
stix2.TimestampConstant('2014-01-13T07:03:17Z'))])
exp = stix2.ObservationExpression(exp_and)
assert str(exp) == "[(file:name = 'pdf.exe' OR file:size = 371712) AND file:created = t'2014-01-13T07:03:17Z']"
ts = stix2.TimestampConstant('2014-01-13T07:03:17Z')
assert str(ts) == "t'2014-01-13T07:03:17Z'"