adding unitests

Signed-off-by: rcohen <rcohen@armosec.io>