#!/usr/bin/env python
# -*- coding: utf-8 -*-

from ioc_finder import find_iocs


def test_issue_64():
    results = find_iocs("CRASHOVERRIDE crashoverride")
    assert results['malware_names'] == ['crashoverride']

    results = find_iocs('kido')
    assert results['malware_names'] == ['kido']

    results = find_iocs('kido foo bar coreshell')
    assert 'kido' in results['malware_names']
    assert 'coreshell' in results['malware_names']

    results = find_iocs('kido foo bar coreshell', parse_malware_names=False)
    assert not results.get('malware_names')
