admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove data after a single detection

Browse Source 
is tested instead of when all detections
have finished testing.
This commit is contained in:
pyth0n1c
2022-09-19 15:46:00 -07:00
parent c97c6a3180
commit 38f135ee81
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bin/docker_detection_tester/modules/testing_service.py
+1
View File
@@ -354,6 +354,7 @@ def test_detection(splunk_ip:str, splunk_port:int, splunk_password:str, detectio
abs_folder_path = mkdtemp(prefix="DATA_", dir=attack_data_root_folder)
success = execute_tests(splunk_ip, splunk_port, splunk_password, detection.testFile.tests, abs_folder_path, wait_on_failure, wait_on_completion, container)
os.removedirs(abs_folder_path)
detection.get_detection_result()
#Delete the folder and all of the data inside of it
#shutil.rmtree(abs_folder_path)