Added test for lowercasing hash value.

elastic · Nov 23, 2020 · b2d9ffc · b2d9ffc
1 parent 3c62c54
commit b2d9ffc
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/x-pack/plugins/security_solution/server/endpoint/routes/trusted_apps/mapping.test.ts b/x-pack/plugins/security_solution/server/endpoint/routes/trusted_apps/mapping.test.ts
@@ -206,6 +206,25 @@ describe('mapping', () => {
         })
       );
     });
+
+    it('should lowercase hash condition value', function () {
+      testMapping(
+        {
+          name: 'MD5 trusted app',
+          description: 'MD5 Trusted App',
+          os: 'linux',
+          entries: [
+            createConditionEntry(ConditionEntryField.HASH, '1234234659Af249ddf3e40864E9FB241'),
+          ],
+        },
+        createExceptionListItemOptions({
+          name: 'MD5 trusted app',
+          description: 'MD5 Trusted App',
+          osTypes: ['linux'],
+          entries: [createEntryMatch('process.hash.md5', '1234234659af249ddf3e40864e9fb241')],
+        })
+      );
+    });
   });
 
   describe('exceptionListItemToTrustedApp', () => {