Ensure suggested profiles are extracted from plugin output.

Test successful initialization.

Test initialization with custom config.

Test initialization with nonexistent dump file.

Test initialization when Volatility is not found.

Test YARA scanner initialization.

Test Malfind scanner initialization.

Test Network scanner initialization.

Test Network scanner with custom IP checker.

Test Malfind scanner handles exceptions gracefully.

Fallback to netstat when netscan is unsupported.

Test Network scanner handles exceptions gracefully.

Test non-excluded rule passes.

Simulate downloading a non-zip or corrupted file.

Simulate HTTP error during download.

Test that other rules are preserved.

Test removal of duplicate is__elf definitions.

Test string representation.

Test successful command execution.

Test timeout exceeds retry limit.

Test timeout with retry.

Test command caching.

Sanitizer should drop rule blocks containing imphash references.

Sanitizer should drop rules using unsupported pe.number_of_signatures field.

Test YARA scan output parsing.

Test Malfind scan output parsing.

Test network scan output parsing.

Compile-time parser should drop orphan malformed fragments.

Compile-time parser should remove rules using unavailable hash module symbols.

Test with optional profile.

Test YARA scanner handles exceptions gracefully.