Skip to content

Commit

Permalink
Severity test fix.
Browse files Browse the repository at this point in the history
Signed-off-by: DerekRushton <[email protected]>
  • Loading branch information
DerekRushton committed Aug 15, 2024
1 parent 4d9148e commit e18d2ff
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,7 @@ def test_event_oca_query(self):
" AND [x-oca-event:host_ref.ip_refs.value = '10.0.0.4']" \
" AND [x-oca-event:host_ref.os_ref.name = 'windows']" \
" AND [x-oca-event:file_ref.parent_directory_ref.path = 'Application']" \
" AND [x-oca-event:severity = 'info']" \
" AND [x-oca-event:severity = 0]" \
" AND [x-oca-event:x_ttp_tagging_refs.technique_id = 'T1204']" \
" START t'2022-07-01T00:00:00.000Z'" \
" STOP t'2024-07-27T00:05:00.000Z'"
Expand All @@ -118,7 +118,7 @@ def test_event_oca_query(self):
def test_ibm_finding(self):
stix_pattern = "([x-ibm-finding:dst_ip_ref.value = '10.0.0.4']" \
" AND [x-ibm-finding:name = 'Outlook Spawned Process Creating DLL Files']" \
" AND [x-ibm-finding:severity = 'info']" \
" AND [x-ibm-finding:severity = 0]" \
" AND [x-ibm-finding:dst_os_ref.name = 'windows']" \
" AND [x-ibm-finding:x_ttp_tagging_refs.technique_id = 'T1204']" \
" AND [x-ibm-finding:x_guid = '00000000-0000-0000-114a-7429237cffc5']" \
Expand Down

0 comments on commit e18d2ff

Please sign in to comment.