Public/fgAI
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add relationship fields

Browse Source
This commit is contained in:
larssand
2026-07-02 15:07:15 +02:00
parent d48d34f96c
commit 7d0e66c239
13 changed files with 437 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tests/test_stream_profiles.py
View File

@@ -25,3 +25,13 @@ class StreamProfileTests(unittest.TestCase):
self.assertEqual(profiles["dns"].field_weights["qh"], 1.5)
self.assertEqual(profiles["dns"].field_weights["query_domain"]["rare_value"], 2.0)
self.assertNotIn("bad", profiles["dns"].field_weights)
def test_parses_relationship_fields(self):
profiles = parse_profiles([{"stream_id": "windows", "entity_field": "username", "relationship_fields": [{"left": "username", "right": "srcip", "name": "user source IP"}, {"left": "username", "right": "srcip"}]}])
relationships = profiles["windows"].relationship_fields
self.assertEqual(len(relationships), 1)
self.assertEqual(relationships[0].left, "username")
self.assertEqual(relationships[0].right, "srcip")
self.assertEqual(relationships[0].name, "user source IP")