RiskIQPassiveTotalWhoisWidgetScript

Set widgets to custom layout in Domain, Email and RiskIQ Asset type of indicators.

python · PassiveTotal

Details

IDRiskIQPassiveTotalWhoisWidgetScript
Languagepython
From Version6.0.0
Docker Imagedemisto/python3:3.12.13.10116658
Tagsdynamic-indicator-section

README

Set widgets to custom layout in Domain, Email and RiskIQ Asset type of indicators.

Script Data

Name Description
Script Type python3
Tags dynamic-indicator-section
Cortex XSOAR Version 6.0.0

Dependencies

This script uses the following commands and scripts.

  • pt-whois-search

Inputs

There are no inputs for this script.

Outputs

There are no outputs for this script.

Source

RiskIQPassiveTotalWhoisWidgetScript.py RiskIQPassiveTotalWhoisWidgetScript_test.py RiskIQPassiveTotalWhoisWidgetScript.yml
Download History Raw 
from RiskIQPassiveTotalWhoisWidgetScript import set_arguments_for_widget_view


def test_for_whois_widget_set_arguments_for_widget_view_when_indicator_type_riskiqasset_and_riskiqassettype_is_empty():
    # Configure

    # set argument for command
    indicator_data = {"indicator_type": "RiskIQAsset", "value": "dummy domain", "CustomFields": {"riskiqassettype": ""}}
    # set expected output
    expected_output = 'Please provide value in the "RiskIQAsset Type" field to fetch detailed information of the asset.'
    # Execute
    arguments = set_arguments_for_widget_view(indicator_data)
    # Assert
    assert expected_output == arguments


def test_for_whois_widget_set_arguments_for_widget_view_when_indicator_type_riskiqasset_and_riskiqassettype_domain():
    # Configure

    # set argument for command
    indicator_data = {"indicator_type": "RiskIQAsset", "value": "dummy domain", "CustomFields": {"riskiqassettype": "Domain"}}
    # set expected output
    expected_arguments = {"field": "domain", "query": "dummy domain"}
    # Execute
    arguments = set_arguments_for_widget_view(indicator_data)
    # Assert
    assert expected_arguments == arguments


def test_for_whois_widget_set_arguments_for_widget_view_when_indicator_type_riskiqasset_and_riskiqassettype_contact():
    # Configure

    # set argument for command
    indicator_data = {"indicator_type": "RiskIQAsset", "value": "dummy email", "CustomFields": {"riskiqassettype": "Contact"}}
    # set expected output
    expected_arguments = {"field": "email", "query": "dummy email"}
    # Execute
    arguments = set_arguments_for_widget_view(indicator_data)
    # Assert
    assert expected_arguments == arguments


def test_for_whois_widget_set_arguments_for_widget_view_when_indicator_type_riskiqasset():
    # Configure

    # set argument for command
    indicator_data = {"indicator_type": "RiskIQAsset", "value": "dummy email", "CustomFields": {"riskiqassettype": "IP Address"}}
    # set expected output
    expected_output = "No domain information were found for the given argument(s)."
    # Execute
    arguments = set_arguments_for_widget_view(indicator_data)
    # Assert
    assert expected_output == arguments


def test_for_whois_widget_set_arguments_for_widget_view_when_indicator_type_domain():
    # Configure

    # set argument for command
    indicator_data = {"indicator_type": "Domain", "value": "dummy domain"}
    # set expected output
    expected_arguments = {"field": "domain", "query": "dummy domain"}
    # Execute
    arguments = set_arguments_for_widget_view(indicator_data)
    # Assert
    assert expected_arguments == arguments