Skip to content

Commit

Permalink
adjusting tests
Browse files Browse the repository at this point in the history
  • Loading branch information
Brent Kimmel committed May 5, 2020
1 parent f886b71 commit 91be628
Showing 1 changed file with 29 additions and 6 deletions.
35 changes: 29 additions & 6 deletions x-pack/plugins/endpoint/common/generate_data.test.ts
Original file line number Diff line number Diff line change
Expand Up @@ -90,20 +90,43 @@ describe('data generator', () => {
});

it('with n-1 process events', () => {
for (let i = 1; i < events.length - 1; i++) {
expect(events[i].process.parent?.entity_id).toEqual(events[i - 1].process.entity_id);
expect(events[i].event.kind).toEqual('event');
expect(events[i].event.category).toEqual('process');
// for (let i = 1; i < events.length - 1; i++) {
// expect(events[i].process.parent?.entity_id).toEqual(events[i - 1].process.entity_id);
// expect(events[i].event.kind).toEqual('event');
// expect(events[i].event.category).toEqual('process');
// }
for (let i = events.length - 1; i > 0; ) {
const parentEntityIdOfChild = events[i].process.parent?.entity_id;
for (
;
--i >= -1 && (events[i].event.kind !== 'event' || events[i].event.category !== 'process');

) {
// related event - skip it
}
expect(i).toBeGreaterThanOrEqual(0);
expect(parentEntityIdOfChild).toEqual(events[i].process.entity_id);
}
});

it('with a corresponding alert at the end', () => {
let previousProcessEventIndex = events.length - 2;
for (
;
previousProcessEventIndex >= -1 &&
(events[previousProcessEventIndex].event.kind !== 'event' ||
events[previousProcessEventIndex].event.category !== 'process');
previousProcessEventIndex--
) {
// related event - skip it
}
expect(previousProcessEventIndex).toBeGreaterThanOrEqual(0);
// The alert should be last and have the same entity_id as the previous process event
expect(events[events.length - 1].process.entity_id).toEqual(
events[events.length - 2].process.entity_id
events[previousProcessEventIndex].process.entity_id
);
expect(events[events.length - 1].process.parent?.entity_id).toEqual(
events[events.length - 2].process.parent?.entity_id
events[previousProcessEventIndex].process.parent?.entity_id
);
expect(events[events.length - 1].event.kind).toEqual('alert');
expect(events[events.length - 1].event.category).toEqual('malware');
Expand Down

0 comments on commit 91be628

Please sign in to comment.