IbmConvertArtifactsToTable

This script is used to format IBM QRadar SOAR Artifacts into a markdown table.

python · IBM Security QRadar SOAR

Details

IDIbmConvertArtifactsToTable
Languagepython
From Version6.10.0
Docker Imagedemisto/python3:3.12.13.10404775
Tagsdynamic-section

README

This script is used to format IBM QRadar SOAR artifacts into a mark-down table.

Script Data

Name Description
Script Type python3
Tags dynamic-section
Cortex XSOAR Version 6.0.0

Inputs

There are no inputs for this script.

Outputs

There are no outputs for this script.

Source

IbmConvertArtifactsToTable.py IbmConvertArtifactsToTable_test.py IbmConvertArtifactsToTable.yml
Download History Raw 
import demistomock as demisto
from IbmConvertArtifactsToTable import convert_to_table


def test_convert_to_table_no_artifacts(mocker):
    mock_incident = {"CustomFields": {"ibmsecurityqradarsoarartifacts": []}}
    mocker.patch.object(demisto, "incident", return_value=mock_incident)
    result = convert_to_table()
    assert result.readable_output == "No artifacts were found for this incident"


def test_convert_to_table_with_artifacts(mocker):
    mock_incident = {
        "CustomFields": {
            "ibmsecurityqradarsoarartifacts": [
                '{"type": "IP", "value": "192.168.1.1"}',
                '{"type": "URL", "value": "https://example.com"}',
            ]
        }
    }
    mocker.patch.object(demisto, "incident", return_value=mock_incident)
    result = convert_to_table()
    assert "| IP | 192.168.1.1 |" in result.readable_output
    assert "| URL | https://example.com |" in result.readable_output