class_docstr: Test class to test ThreatStream functionalities
class_docstr_tok: ["Test","class","to","test","ThreatStream","functionalities"]
docstr: ThreatStream - Runner
docstr_tok: ["ThreatStream","-","Runner"]
code: def test_runner(self, connect_mock, _):
      """ThreatStream - Runner"""
      expected_url = (
          "/api/v2/intelligence/?username=user&api_key=key&limit=1000&q="
          '(status="active")+AND+(type="domain"+OR+type="ip"+OR+type="md5")+'
          'AND+NOT+(itype="bot_ip"+OR+itype="brute_ip"+OR+itype="scan_ip"+'
          'OR+itype="spam_ip"+OR+itype="tor_ip")'
      )
      self.threatstream.api_key = "key"
      self.threatstream.api_user = "user"
      self.threatstream.runner({"none": "test"})
      connect_mock.assert_called_with(expected_url)
  
imports: from datetime import datetime
  import os
  import boto3
  from botocore.exceptions import ClientError
  from mock import Mock, patch
  from moto import mock_ssm
  from nose.tools import assert_equal, raises
  from streamalert.shared.config import load_config
  from streamalert.threat_intel_downloader.exceptions import ThreatStreamCredsError, ThreatStreamLambdaInvokeError, ThreatStreamRequestsError
  from streamalert.threat_intel_downloader.main import ThreatStream
  from tests.unit.streamalert.apps.test_helpers import MockLambdaClient
  from tests.unit.streamalert.shared.test_config import get_mock_lambda_context
  from tests.unit.streamalert.threat_intel_downloader.test_helpers import put_mock_params
label_desc: Use image node_id 25 for calling the TestThreatStream obj's underlying member method code with example usage: obj.test_runner(connect_mock, _) without return types