search

target / huntlib

A Python library to help with some common threat hunting data analysis operations
MIT License
138 stars 22 forks source link

Improvements & fixes to automated tests #22

Closed DavidJBianco closed 2 years ago

DavidJBianco commented 2 years ago

While preparing to work on the OpenSearch support, I noticed a couple of issues with the automated testing:

  1. DomainTools' risk() test failed because the domain we used to test was too old and aged out of their database. Now always use www.google.com.
  2. The comparison we used to test the risk() call was too specific. Now we just make sure that any risk data is returned, even if the domain evaluates to 0 risk.
  3. Changed the way we invoke Elastic inside Docker, to avoid using mmap and thus failing ES' bootstrap checks