test_ransomware_abuse_ch.py 文件源码

def test_abuse_ch_ransomware():
    rule.feeds['ransomware']['remote'] = 'test/ransomware_abuse_ch/feed.txt'
    x = s.process(rule, feed="ransomware")
    x = list(x)
    assert len(x) > 0

    indicators = set()
    tags = set()

    from pprint import pprint
    pprint(x)

    for xx in x:
        indicators.add(xx.indicator)
        tags.add(xx.tags[0])

    assert 'http://grandaareyoucc.asia/85.exe' in indicators
    assert 'botnet' in tags