Mark Stemm f4bb49f1f5 Add test for truncated outputs. ...

Add a test that specifically tests truncated outputs. A rule contains an
output field %fd.cport which has no value for an open event. Ensure that
the rule's output has <NA> for the cport and the remainder of the rule's
output is filled in.

2017-01-03 12:58:01 -08:00

..

double_rule.yaml

Add tests for multiple files, disabled rules.

2016-10-24 15:56:45 -07:00

empty_rules.yaml

Add tests for multiple files, disabled rules.

2016-10-24 15:56:45 -07:00

falco_rules_warnings.yaml

Add tests for multiple files, disabled rules.

2016-10-24 15:56:45 -07:00

invalid_rule_output.yaml

Add unit test for rule with invalid output.

2016-12-22 12:55:36 -08:00

null_output_field.yaml

Add test for truncated outputs.

2017-01-03 12:58:01 -08:00

override_list.yaml

tests for overriding rules/macros/lists

2016-12-29 13:32:55 -08:00

override_macro.yaml

tests for overriding rules/macros/lists

2016-12-29 13:32:55 -08:00

override_nested_list.yaml

tests for overriding rules/macros/lists

2016-12-29 13:32:55 -08:00

override_rule.yaml

tests for overriding rules/macros/lists

2016-12-29 13:32:55 -08:00

rule_names_with_spaces.yaml

Verifying rule names can have spaces.

2016-10-24 15:56:45 -07:00

single_rule_enabled_flag.yaml

Add test for enabled flag.

2016-10-24 15:56:45 -07:00

single_rule.yaml

tests for overriding rules/macros/lists

2016-12-29 13:32:55 -08:00