class_docstr: Simple class to encapsulate the mocked threat intel results
docstr: Add test fixtures for Threat Intel to use with rule testing
  
  Threat Intel fixture configs should be in the following JSON format:
      [
        {
          "ioc_value": "1.1.1.2",
          "ioc_type": "ip",
          "sub_type": "mal_ip"
        }
      ]
docstr_tok: ["Add","test","fixtures","for","Threat","Intel","to","use","with","rule","testing","Threat","Intel","fixture","configs","should","be","in","the","following","JSON","format",":","[","{","``","ioc_value","''",":","``","1.1.1.2","''",",","``","ioc_type","''",":","``","ip","''",",","``","sub_type","''",":","``","mal_ip","''","}","]"]
code: def add_fixtures(cls, fixtures):
      """Add test fixtures for Threat Intel to use with rule testing
  
      Threat Intel fixture configs should be in the following JSON format:
          [
            {
              "ioc_value": "1.1.1.2",
              "ioc_type": "ip",
              "sub_type": "mal_ip"
            }
          ]
      """
      # Clear out any old fixtures
      cls._MOCKS.clear()
  
      LOGGER.debug("Setting up threat intel fixture: %s", fixtures)
      cls._MOCKS = {value["ioc_value"]: value for value in fixtures}
  
file_path: streamalert/streamalert_cli/test/mocks.py
imports: from streamalert.shared.logger import get_logger
  from streamalert.shared.lookup_tables.drivers import EphemeralDriver
  from streamalert.shared.lookup_tables.table import LookupTable
label_desc: Use image node_id 1 for calling the ThreatIntelMocks obj's underlying member method code with example usage: obj.add_fixtures(cls, fixtures) without return types