Improve rules-testing

[Lopuiz]

Working branch
https://github.com/wazuh/wazuh-ruleset/compare/3.10...improve-rules-testing-352

Have to improve unit tests. To do this, we have to add new logs in following files:

• [ ] 0015-ossec.ini
  • [x] 0016-wazuh.ini
• [ ] 0020-syslog.ini
• [ ] 0025-sendmail.ini
• [x] 0030-postfix.ini
• [x] 0035-spamd.ini
• [x] 0040-imapd.ini
• [x] 0045-mailscanner.ini
• [x] 0050-ms-exchange.ini
• [x] 0055-courier.ini
• [x] 0060-firewall.ini
• [ ] 0065-pix.ini
• [x] 0070-netscreenfw.ini
• [ ] 0075-cisco-ios.ini
• [ ] 0080-sonicwall.ini
• [ ] 0085-pam.ini
• [ ] 0090-telnetd.ini
• [ ] 0095-sshd.ini
• [ ] 0100-solaris.ini
• [ ] 0105-asterisk.ini
• [ ] 0110-ms_dhcp.ini
• [ ] 0115-arpwatch.ini
• [ ] 0120-symantec_av.ini
• [ ] 0125-sysmantec_ws.ini
• [ ] 0130-trend_osce.ini
• [ ] 0135-hordeimp.ini
• [ ] 0140-roundcube.ini
• [ ] 0145-wordpress.ini
• [ ] 0150-cimserver.ini
• [ ] 0155-dovecot.ini
• [ ] 0160-vmpop3d.ini
• [ ] 0165-vpopmail.ini
• [ ] 0170-ftpd.ini
• [ ] 0175-proftpd.ini
• [ ] 0180-pure-ftpd.ini
• [ ] 0185-vsftpd.ini
• [ ] 0190-ms_ftpd.ini
• [ ] 0195-named.ini
• [ ] 0200-smbd.ini
• [ ] 0205-racoon.ini
• [ ] 0210-vpn.ini
• [ ] 0215-policy.ini
• [ ] 0220msauth.ini
• [ ] 0225-mcafee_av.ini
• [ ] 0230-ms_se.ini
• [ ] 0235-vmware.ini
• [ ] 0240-ids.ini
• [ ] 0245-web.ini
• [ ] 0250-apache.ini
• [ ] 0255-zeus.ini
• [ ] 0260-nginx.ini
• [ ] 0265-php.ini
• [ ] 0270-web_appsec.ini
• [ ] 0275-squid.ini
• [ ] 0280-attack.ini
• [ ] 0285-systemd.ini
• [ ] 0290-firewalld.ini
• [ ] 0295-mysql.ini
• [ ] 0300-postgresql.ini
• [ ] 0305-dropbear.ini
• [ ] 0310-openbsd.ini
• [ ] 0315-apparmor.ini
• [ ] 0320-clam_av.ini
• [ ] 0325-opensmtpd.ini
• [ ] 0330-sysmon.ini
• [ ] 0335-unbound.ini
• [ ] 0340-puppet.ini
• [ ] 0345-netscaler.ini
• [ ] 0350-amazon.ini
• [ ] 0360-serv_u.ini
• [ ] 0365-auditd.ini
• [ ] 0375-usb.ini
• [ ] 0385-oscap.ini
• [ ] 0390-fortigate.ini
• [ ] 0395-hp.ini
• [ ] 0400-openvpn.ini
• [ ] 0450-mongodb.ini
• [ ] 0455-docker.ini
• [ ] 0460-jenkins.ini
• [ ] 0470-vshell.ini
• [ ] 0475-suricata.ini
• [ ] 0480-qualysguard.ini
• [ ] 0485-cylance.ini
• [ ] 0490-virustotal.ini
• [ ] 0495-promox_ve.ini
• [ ] 0505-vuls.ini
• [ ] 0510-ciscat.ini
• [ ] 0515-exim.ini
• [ ] 0520-vulnerability-detector.ini
• [ ] 0525-openvas.ini
• [ ] 0530-mysql.ini
• [ ] 0535-mariadb.ini
• [ ] 0540-pfsense.ini
• [ ] 0545-osquery.ini
• [ ] 0550-kaspersky.ini
• [ ] 0555-azure.ini
• [ ] 0560-docker.ini
• [ ] 0565-ms_ipsec.ini

[Lopuiz]

Done: I generated all test files and I added all logs that I had. To do this I’ve created a Python’s script. Some rules files are not following the standard so it was not possible to execute the script. To do: Now, we have to generate logs for all rules

[Lopuiz]

Summary 13\5\19: I generate logs for all postfix rules.

Summary 14\5\19: It's necessary to improve the script to check rules that have tag frequency. I have researched about subprocess python's module.

[Lopuiz]

Summary 15\5\19:

• 0016-wazuh.ini is finished.
• 0015-ossec.ini and 0030-postfix.ini is finished but I have to improve the script.

[Lopuiz]

Summary 22\5\19:

• 0035-spamd.ini is finished.
• 0040-imapd.ini, 0045-mailscanner, 0055-courier 0050-ms-exchange, 0070-netscreenfw and 0060-firewall.ini is finished but I have to improve the script.