Continued the Detection Quality roadmap.

2026-06-24 21:32:18 +02:00
parent cdef3e1355
commit ea4aaf57ed
14 changed files with 258 additions and 8 deletions
--- a/tests/test_stream_profiles.py
+++ b/tests/test_stream_profiles.py
@@ -9,3 +9,7 @@ class StreamProfileTests(unittest.TestCase):
        self.assertEqual(profiles["dns"].name, "DNS client behavior")
        self.assertEqual(profiles["dns"].entity_field, "IP")
        self.assertEqual(profiles["dns"].numeric_fields, ("Elapsed",))
+
+    def test_parses_detector_thresholds(self):
+        profiles = parse_profiles([{"stream_id": "windows", "entity_field": "username", "detectors": {"auth_failure": {"enabled": False, "minimum": 7, "z_threshold": 4.5}}}])
+        self.assertEqual(profiles["windows"].detectors["auth_failure"], {"enabled": False, "minimum": 7, "z_threshold": 4.5})