-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathtest_memory_sim.py
More file actions
48 lines (40 loc) · 1.74 KB
/
Copy pathtest_memory_sim.py
File metadata and controls
48 lines (40 loc) · 1.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
"""Tests for memory simulation module."""
import pytest
from volatility.memory_sim import simulate_volatility_dump, get_artifact_risk_level
def test_simulate_volatility_dump_detected():
"""Test memory dump simulation with detection."""
result = {"detected": True, "score": 0.85, "confidence": "high"}
artifacts = simulate_volatility_dump(result)
assert isinstance(artifacts, str)
assert len(artifacts) > 0
def test_simulate_volatility_dump_not_detected():
"""Test memory dump simulation without detection."""
result = {"detected": False, "score": 0.2, "confidence": "low"}
artifacts = simulate_volatility_dump(result)
assert isinstance(artifacts, str)
def test_simulate_volatility_dump_critical():
"""Test memory dump with critical detection."""
result = {"detected": True, "score": 0.95, "confidence": "critical"}
artifacts = simulate_volatility_dump(result)
assert isinstance(artifacts, str)
def test_get_artifact_risk_level_high():
"""Test risk level for high score."""
level = get_artifact_risk_level(0.85)
assert isinstance(level, str)
assert len(level) > 0
def test_get_artifact_risk_level_medium():
"""Test risk level for medium score."""
level = get_artifact_risk_level(0.6)
assert isinstance(level, str)
def test_get_artifact_risk_level_low():
"""Test risk level for low score."""
level = get_artifact_risk_level(0.2)
assert isinstance(level, str)
def test_get_artifact_risk_level_zero():
"""Test risk level for zero score."""
level = get_artifact_risk_level(0.0)
assert isinstance(level, str)
def test_get_artifact_risk_level_extreme():
"""Test risk level for extreme score."""
level = get_artifact_risk_level(0.99)
assert isinstance(level, str)