AlgosecQuery

Performs a batch traffic simulation query using Firewall Analyzer.

Details

ID	`AlgosecQuery`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	Algosec

README

Performs a batch traffic simulation query using Firewall Analyzer.

Script Data

Name	Description
Script Type	python
Tags	Algosec

Dependencies

This script uses the following commands and scripts.

algosec-query

Inputs

Argument Name	Description
source	The source(s) for the query. Multiple values must be comma-separated.
destination	The destination(s) for the query. Multiple values must be comma-separated.
service	The service(s) for the query. Multiple values must be comma-separated.
user	The user for the query.
application	The application for the query.

Outputs

There are no outputs for this script.

Source

AlgosecQuery.py AlgosecQuery_test.py AlgosecQuery.yml

Download History Raw

import demistomock as demisto


def test_algosec_query(mocker):
    """
    Given:
        - response mock.
    When:
        - running AlgosecQuery script.
    Then:
        - Ensure that the results were built correctly.
    """
    from AlgosecQuery import algosec_query

    ticket = [{"Type": 3, "Contents": {"QueryResponse": {"QueryResult": {"some_info": "info: test"}}}}]
    mocker.patch.object(demisto, "executeCommand", return_value=ticket)
    results_mock = mocker.patch.object(demisto, "results")
    algosec_query()
    assert results_mock.call_args[0][0]["Contents"] == [{"some_info": "info: test"}]