1 files changed, 58 insertions, 0 deletions
diff --git a/tests/analysis/scan/functions.py b/tests/analysis/scan/functions.py
index 8553018..96f029f 100644
--- a/tests/analysis/scan/functions.py
+++ b/tests/analysis/scan/functions.py
@@ -76,6 +76,64 @@ rule test {
             self.check_rule_success(rule, cnt)
 
 
+    def testMathOperations(self):
+        """Perform math operations with core functions."""
+
+        rule = '''
+rule test {
+
+   condition:
+      math.to_string(123) == "123"
+         and math.to_string(291, 16) == "0x123"
+         and math.to_string(-83, 8) == "-0123"
+         and math.to_string(123, 2) == "0b1111011"
+
+}
+'''
+
+        self.check_rule_success(rule)
+
+
+    def testStringOperations(self):
+        """Perform string operations with core functions."""
+
+        rule = '''
+rule test {
+
+   condition:
+      string.lower("ABCd") == "abcd" and string.lower("123abc") == "123abc"
+
+}
+'''
+
+        self.check_rule_success(rule)
+
+        rule = '''
+rule test {
+
+   condition:
+      string.upper("abcD") == "ABCD" and string.upper("123ABC") == "123ABC"
+
+}
+'''
+
+        self.check_rule_success(rule)
+
+        rule = '''
+rule test {
+
+   condition:
+      string.to_int("123") == 123
+         and string.to_int("123", 16) == 291
+         and string.to_int("0x123") == 291
+         and string.to_int("-0123") == -83
+
+}
+'''
+
+        self.check_rule_success(rule)
+
+
     def testTime(self):
         """Check current time."""