Report ransomware sensor coverage in beta
This commit is contained in:
@@ -1,4 +1,5 @@
|
||||
using System.Runtime.Versioning;
|
||||
using System.Text.Json;
|
||||
using Xunit;
|
||||
|
||||
namespace OCSentinelCli.Tests;
|
||||
@@ -13,6 +14,30 @@ public sealed class RansomwareBetaTests
|
||||
Assert.False(new ScannerConfiguration().RansomwareBetaAlertingEnabled);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void DisabledRansomwareBetaDoesNotReportSensorCoverage()
|
||||
{
|
||||
var summary = RansomwareBetaDetector.Scan(new ScannerConfiguration { RansomwareBetaEnabled = false }, []);
|
||||
|
||||
Assert.False(summary.Enabled);
|
||||
Assert.Empty(summary.Sensors);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void SensorCoverageIsIncludedInTheJsonReport()
|
||||
{
|
||||
var summary = new RansomwareBetaSummary
|
||||
{
|
||||
Enabled = true,
|
||||
Sensors = [new RansomwareSensorStatus { Name = "security-process-4688", Enabled = true, Available = true, State = "available", EventCount = 4 }]
|
||||
};
|
||||
|
||||
string json = JsonSerializer.Serialize(summary, JsonOptions.Default);
|
||||
|
||||
Assert.Contains("\"Sensors\"", json);
|
||||
Assert.Contains("security-process-4688", json);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void FileChurnBelowBothThresholdsDoesNotCreateSignal()
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user