Public/fgAI
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Continued the Detection Quality roadmap.

Browse Source
This commit is contained in:
larssand
2026-06-24 21:32:18 +02:00
parent cdef3e1355
commit ea4aaf57ed
14 changed files with 258 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tests/test_detectors.py Normal file
View File

@@ -0,0 +1,11 @@
import unittest
from fgai.detectors import event_detector_categories
from fgai.logs import parse_log_line
class DetectorCategoryTests(unittest.TestCase):
def test_classifies_windows_auth_failure_dns_and_deny(self):
self.assertEqual(event_detector_categories(parse_log_line("eventid=4625")), ("auth_failure",))
self.assertEqual(event_detector_categories(parse_log_line("qh=example.org")), ("dns_query",))
self.assertEqual(event_detector_categories(parse_log_line("action=deny")), ("deny_action",))