test_alienvault.py 文件源码

def test_alienvault_malware():
    rule.feeds['malware']['remote'] = 'test/alienvault/feed.txt'
    x = s.process(rule, feed="malware")
    x = list(x)
    assert len(x) > 0

    ips = set()
    tags = set()

    for xx in x:
        ips.add(xx.indicator)
        tags.add(xx.tags[0])

    assert '93.158.211.210' in ips

    assert 'malware' in tags