briandelmsft / STAT-Function

Azure Function for the Microsoft Sentinel Triage AssistanT (STAT)
https://aka.ms/mstat
MIT License
9 stars 1 forks source link

TI Module Completes when all TI Checks are turned off #64

Closed briandelmsft closed 5 months ago

briandelmsft commented 6 months ago

When adding some additional test cases around optional parameters, I found you can effectively run the TI module in a state where it will never do anything, by turning off all the TI checks. I think this should probably result in the module failing. This is a really unlikely corner case but in the event someone did this by accident I think it makes sense to fail the module.

https://github.com/briandelmsft/STAT-Function/blob/48f9183ac44d0415c28813d6279f4f7a281b3276/tests/test_stat.py#L83-L98