DataminrPulseCyberDiscoveredEntities
This dynamic automation update the intel agents cyber discovered entities data to HTML and presents it in the layout in color according to theme.
python · Dataminr Pulse
Details
| ID | DataminrPulseCyberDiscoveredEntities |
|---|---|
| Language | python |
| From Version | 6.10.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | dynamic-section |
README
This dynamic automation update the intel agents cyber discovered entities data to HTML and presents it in the layout in color according to theme.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | dynamic-section |
| Cortex XSOAR Version | 6.10.0 |
Inputs
There are no inputs for this script.
Outputs
There are no outputs for this script.
from CommonServerPython import * # noqa: F401 from DataminrPulseCyberDiscoveredEntities import main, demisto, PANEL_NAME import json import os def util_load_json(path): """Load a JSON file to python dictionary.""" with open(path, encoding="utf-8") as f: return json.loads(f.read()) def util_load_txt(path): """Load a text file to python dictionary.""" with open(path, encoding="utf-8") as f: return f.read() def test_main_with_valid_discovered_entities_data_in_light_mode(mocker): """ Test the main function with valid discovered entities data in light mode. """ discovered_entities_data = util_load_json( os.path.join(os.path.dirname(os.path.realpath(__file__)), "test_data/discovered_entities_data.json") ) incident: dict = {"CustomFields": {"dataminrpulseintelagentsdiscoveredentities": json.dumps(discovered_entities_data)}} theme = {"context": {"User": {"theme": "light"}}} mocker.patch.object(demisto, "incident", return_value=incident) mocker.patch.object(demisto, "callingContext", theme) mock_return = mocker.patch("DataminrPulseCyberDiscoveredEntities.return_results") main() discovered_entities = util_load_txt( os.path.join(os.path.dirname(os.path.realpath(__file__)), "test_data/expected_discovered_entities_data.txt") ) expected_content = ( '<div style="background:#E9FBF9; color:#000000; border:2px solid #016558; border-radius:5px; padding:10px; ' 'margin-top:10px; line-height:1.2; font-size:14px;">' f'<h4 style="color:#016558;">{PANEL_NAME}</h4>' # noqa: E231,E702 f"{discovered_entities}</div>" # type: ignore ) assert mock_return.call_args.args[0]["Type"] == EntryType.NOTE assert mock_return.call_args.args[0]["ContentsFormat"] == EntryFormat.HTML assert mock_return.call_args.args[0]["Contents"] == expected_content def test_main_with_valid_discovered_entities_data_in_dark_mode(mocker): """ Test the main function with valid discovered entities data in dark mode. """ discovered_entities_data = util_load_json( os.path.join(os.path.dirname(os.path.realpath(__file__)), "test_data/discovered_entities_data.json") ) incident: dict = {"CustomFields": {"dataminrpulseintelagentsdiscoveredentities": json.dumps(discovered_entities_data)}} theme = {"context": {"User": {"theme": "dark"}}} mocker.patch.object(demisto, "incident", return_value=incident) mocker.patch.object(demisto, "callingContext", theme) mock_return = mocker.patch("DataminrPulseCyberDiscoveredEntities.return_results") main() discovered_entities = util_load_txt( os.path.join(os.path.dirname(os.path.realpath(__file__)), "test_data/expected_discovered_entities_data.txt") ) expected_content = ( '<div style="background:#082223; color:#FFFFFF; border:2px solid #53DFCD; border-radius:5px; padding:10px; ' 'margin-top:10px; line-height:1.2; font-size:14px;">' f'<h4 style="color:#53DFCD;">{PANEL_NAME}</h4>' # noqa: E231,E702 f"{discovered_entities}</div>" # type: ignore ) assert mock_return.call_args.args[0]["Type"] == EntryType.NOTE assert mock_return.call_args.args[0]["ContentsFormat"] == EntryFormat.HTML assert mock_return.call_args.args[0]["Contents"] == expected_content def test_main_with_no_discovered_entities_data(mocker): """ Test the main function with no discovered entities data. """ incident: dict = {"CustomFields": {}} mocker.patch.object(demisto, "incident", return_value=incident) mock_return = mocker.patch("DataminrPulseCyberDiscoveredEntities.return_results") main() assert mock_return.call_args.args[0]["Type"] == EntryType.NOTE assert mock_return.call_args.args[0]["ContentsFormat"] == EntryFormat.HTML assert mock_return.call_args.args[0]["Contents"] == ( f'<h4 style="margin:10px 0;">{PANEL_NAME}</h4><p>N/A</p>' # noqa: E231,E702 ) def test_main_with_invalid_discovered_entities_data(mocker): """ Test the main function with invalid discovered entities data. """ incident: dict = {"CustomFields": {"dataminrpulseintelagentsdiscoveredentities": "{"}} mocker.patch.object(demisto, "incident", return_value=incident) mock_return = mocker.patch("DataminrPulseCyberDiscoveredEntities.return_error") main() error_message = 'Failed to render data: Failed to parse "Dataminr Pulse Intel Agents Discovered Entities" JSON string.' assert mock_return.call_args.args[0] == error_message