public void customPattern()
{
EventLogRecordFacade record = A.Fake <EventLogRecordFacade>();
A.CallTo(() => record.Properties)
.Returns(new List <EventPropertyFacade> {
new("sshd: PID 29722: Failed password for invalid user root from 71.194.180.25 port 48316 ssh2")
});
public void builtInPattern()
{
EventLogRecordFacade record = A.Fake <EventLogRecordFacade>();
A.CallTo(() => record.GetPropertyValues(A <EventLogPropertySelectorFacade> ._)).Returns(new object[] { "141.98.9.20" });
IPAddress?actualAddress = null;
listener.failure += (_, address) => actualAddress = address;
watcherFacades[0].EventRecordWritten += Raise.With(null, new EventRecordWrittenEventArgsFacade(record));
A.CallTo(() => record.GetPropertyValues(A <EventLogPropertySelectorFacade> .That.Matches(selector =>
selector.propertyQueries.SequenceEqual(new[] { "Event/EventData/Data[@Name=\"IpAddress\"]" })))).MustHaveHappened();
A.CallTo(() => record.Properties).MustNotHaveHappened();
Assert.Equal(IPAddress.Parse("141.98.9.20"), actualAddress);
}
