public void ParseEvent4625()
{
// setup
var fs = new FileStream(Path.Combine(Environment.CurrentDirectory, "..\\..\\Test Data\\Event4625.xml"), FileMode.Open);
string xml;
using (var sr = new StreamReader(fs))
{
xml = sr.ReadToEnd();
}
var er = new Mock <EventRecord>();
er.Setup(evtr => evtr.ToXml()).Returns(xml);
er.SetupGet(evtr => evtr.Id).Returns(4625);
er.SetupGet(evtr => evtr.TimeCreated).Returns(DateTime.Parse("2018-09-28T16:50:56.694245200Z"));
// process
var res = AdaptiveFirewall.ParseEvent(er.Object);
// assert
Assert.AreEqual(4625, res.EventId);
Assert.AreEqual("192.168.0.106", res.IP);
Assert.AreEqual(DateTime.Parse("2018-09-28T16:50:56.694245200Z"), res.Date);
Assert.AreEqual("sdf", res.Domain);
Assert.AreEqual("dsflk", res.UserName);
}
public void LoadWithhLocalSubnetsSetting(string setting, int expectedCount)
{
ConfigurationManager.AppSettings.Set("LocalSubnets", setting);
AdaptiveFirewall.ReloadLocalSubnets();
var subs = AdaptiveFirewall.LocalSubnets;
Assert.AreEqual(subs.Count, expectedCount);
}
public void DetermineIfIpIsLocal(string ip, string setting, bool expected)
{
ConfigurationManager.AppSettings.Set("LocalSubnets", setting);
AdaptiveFirewall.ReloadLocalSubnets();
var ipobj = IPAddress.Parse(ip);
var res = AdaptiveFirewall.IsLocalAddress(ipobj);
Assert.AreEqual(res, expected);
}
public void ParseEvent140()
{
// setup
var fs = new FileStream(Path.Combine(Environment.CurrentDirectory, "..\\..\\Test Data\\Event140.xml"), FileMode.Open);
string xml;
using (var sr = new StreamReader(fs))
{
xml = sr.ReadToEnd();
}
var er = new Mock <EventRecord>();
er.Setup(evtr => evtr.ToXml()).Returns(xml);
er.SetupGet(evtr => evtr.Id).Returns(140);
er.SetupGet(evtr => evtr.TimeCreated).Returns(DateTime.Parse("2018-09-27T18:53:35.888226600Z"));
// process
var res = AdaptiveFirewall.ParseEvent(er.Object);
// assert
Assert.AreEqual(140, res.EventId);
Assert.AreEqual("185.143.223.77", res.IP);
Assert.AreEqual(DateTime.Parse("2018-09-27T18:53:35.888226600Z"), res.Date);
}
