When trying to test a rule with mocked functions the following error occurs:
|
|
To resolve this issue, check your mock function names to ensure they match the ones called in your rule.
If this fails, and you're using panther_analysis_tool to test/upload your detections, ensure that the environment the rules are based in is cloned from our panther-analysis GitHub.
This issue occurs when a function called in the rule cannot be found.