class_docstr: Tests for ThreatIntel
class_docstr_tok: ["Tests","for","ThreatIntel"]
docstr: ThreatIntel - Deserialize
docstr_tok: ["ThreatIntel","-","Deserialize"]
code: def test_deserialize(self):
      """ThreatIntel - Deserialize"""
      data = [
          {
              "ioc_value": {"S": "09bb8985ca0a702907dbcfad511d138e"},
              "sub_type": {"S": "mal_md5"},
          }
      ]
  
      expected_result = [
          {
              "ioc_value": "09bb8985ca0a702907dbcfad511d138e",
              "sub_type": "mal_md5",
          }
      ]
  
      result = list(ThreatIntel._deserialize(data))
      assert_equal(result, expected_result)
  
imports: from botocore.exceptions import ClientError, ParamValidationError
  from mock import Mock, patch
  from netaddr import IPNetwork
  from nose.tools import assert_equal
  from streamalert.rules_engine.threat_intel import ThreatIntel
label_desc: Use image node_id 17 for calling the TestThreatIntel obj's underlying member method code with example usage: obj.test_deserialize() without return types