class_docstr: Tests for ThreatIntel
class_docstr_tok: ["Tests","for","ThreatIntel"]
docstr: ThreatIntel - Extract IOC Values
docstr_tok: ["ThreatIntel","-","Extract","IOC","Values"]
code: def test_extract_ioc_values(self):
      """ThreatIntel - Extract IOC Values"""
      payloads = [self._sample_payload]
      expected_result = {"1.1.1.2": [("ip", payloads[0]["record"])]}
      result = self._threat_intel._extract_ioc_values(payloads)
      assert_equal(result, expected_result)
  
imports: from botocore.exceptions import ClientError, ParamValidationError
  from mock import Mock, patch
  from netaddr import IPNetwork
  from nose.tools import assert_equal
  from streamalert.rules_engine.threat_intel import ThreatIntel
label_desc: Use image node_id 20 for calling the TestThreatIntel obj's underlying member method code with example usage: obj.test_extract_ioc_values() without return types