mirror of
https://github.com/activecm/rita
synced 2026-06-08 13:02:45 +00:00
906f53b3e5
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
31 lines
772 B
Go
31 lines
772 B
Go
package integration_test
|
|
|
|
import (
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func (it *ValidDatasetTestSuite) TestStrobes() {
|
|
t := it.T()
|
|
|
|
var count uint64
|
|
// check that one strobe made it into the mixtape
|
|
err := it.db.Conn.QueryRow(it.db.GetContext(), `
|
|
SELECT count() FROM threat_mixtape
|
|
WHERE count >= 86400 AND strobe_score > 0 AND beacon_score = 0 AND beacon_threat_score = 0
|
|
`).Scan(&count)
|
|
require.NoError(t, err)
|
|
require.EqualValues(t, 1, count)
|
|
|
|
// verify the number of strobes for uconns
|
|
err = it.db.Conn.QueryRow(it.db.GetContext(), `
|
|
SELECT count() FROM (
|
|
SELECT hash, countMerge(count) AS conn_count FROM uconn
|
|
GROUP BY hash
|
|
HAVING conn_count >= 86400
|
|
)
|
|
`).Scan(&count)
|
|
require.NoError(t, err)
|
|
require.EqualValues(t, 1, count)
|
|
|
|
}
|