diff --git a/salt/sensoroni/files/analyzers/malwarebazaar/malwarebazaar_test.py b/salt/sensoroni/files/analyzers/malwarebazaar/malwarebazaar_test.py
index edaff01254..79903142dd 100644
--- a/salt/sensoroni/files/analyzers/malwarebazaar/malwarebazaar_test.py
+++ b/salt/sensoroni/files/analyzers/malwarebazaar/malwarebazaar_test.py
@@ -21,6 +21,36 @@ def test_main_success(self):
                 expected = '{"test": "val"}\n'
                 self.assertEqual(mock_cmd.getvalue(), expected)
                 mock.assert_called_once()
+    
+    def isInJson_string_found_in_dict(self):
+        test_string = "helo"
+        input_json = {
+                         "value":"test",
+                         "test":"value",
+                         "arr":["Foo", "Bar", "Hello"],
+                         "dict1":{"helo":"val", "key":"val"}
+                     }
+        self.assertEqual(malwarebazaar.isInJson(test_string), True)
+        
+    def isInJson_string_found_in_arr(self):
+        test_string = "helo"
+        input_json = {
+                         "value":"test",
+                         "test":"value",
+                         "arr":["Foo", "Bar", "helo"],
+                         "dict1":{"Hello":"val", "key":"val"}
+                     }
+        self.assertEqual(malwarebazaar.isInJson(test_string), True)
+            
+    def isInJson_string_not_found(self):
+        test_string = "ValNotInJSON"
+        input_json = {
+                         "value":"test",
+                         "test":"value",
+                         "arr":["Foo", "Bar", "helo"],
+                         "dict1":{"Hello":"val", "key":"val"}
+                     }
+        self.assertEqual(malwarebazaar.isInJson(test_string), False)
 
     def test_analyze(self):
         """simulated sendReq and prepareResults with 2 mock objects and variables sendReqOutput and prepareResultOutput,