SEPCheckOutdatedEndpoints

Check if any endpoints are using an AV definition that is not the latest version.

Details

ID	`SEPCheckOutdatedEndpoints`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	sep symantec

README

Checks if any endpoints are using an AV definition that is not the latest version.

Script Data

Name	Description
Script Type	python
Tags	sep, symantec

Dependencies

This script uses the following commands and scripts.

sep-client-content

Inputs

Argument Name	Description
requiredavdefversion	The AV definitions version to check against.

Outputs

There are no outputs for this script.

Source

SEPCheckOutdatedEndpoints.py SEPCheckOutdatedEndpoints_test.py SEPCheckOutdatedEndpoints.yml

Download History Raw

import pytest

import demistomock as demisto


@pytest.mark.parametrize(
    "args, need_update", [({"requiredavdefversion": "1/1/1970 1000"}, "no"), ({"requiredavdefversion": "1/1/1971 1000"}, "yes")]
)
def test_check_outdated_endpoints(mocker, args, need_update):
    """
    Given:
        - response mock.
    When:
        - running SEPCheckOutdatedEndpoints script.
    Then:
        - Ensure that the results were built correctly.
    """
    from SEPCheckOutdatedEndpoints import check_outdated_endpoints

    entry = [{"Type": 3, "Contents": {"clientDefStatusList": [{"version": "1970-1-1 1000", "clientsCount": 1}]}}]
    mocker.patch.object(demisto, "args", return_value=args)
    mocker.patch.object(demisto, "executeCommand", return_value=entry)
    results_mock = mocker.patch.object(demisto, "results")
    check_outdated_endpoints()
    assert results_mock.call_args[0][0][0] == need_update