Toni de la Fuente
5b0c6f8689
Merge pull request #290 from tomcrawf90/master
...
Added check for integer in response from AWS
2019-02-04 22:55:24 +00:00
tomcrawf90
17f00f167f
Merge pull request #1 from tomcrawf90/check111fix
...
Added check for integer in response from AWS
2019-02-04 17:08:49 +00:00
Tom Crawford
34b6c4446d
Added check for integer in response from AWS
2019-02-04 17:01:37 +00:00
Toni de la Fuente
8f89a01541
Merge pull request #284 from toniblyx/devel
...
Devel
2019-01-07 22:15:28 -05:00
Toni de la Fuente
b59d5db16b
Added new opton exclude to README
2019-01-07 22:12:01 -05:00
Toni de la Fuente
2e754a5370
Fixed check120
2019-01-07 22:06:34 -05:00
Toni de la Fuente
2f9886efe2
Merge pull request #283 from SDugo/master
...
New option "-E" supports exclusion of one or multiple checks
2018-12-21 09:06:58 -05:00
Samuel Dugo
71355b0c4c
New option "-E" supports exclusion of one or multiple checks
...
Added new option "-E" which will execute all tests except a list of specified checks separated by comma (i.e. check21,check31). Any invalid check name will be discarded. And if just one argument is passed and this is invalid, then Prowler will execute all checks.
To save space, the option will return a list of total checks excluding the list provided. Then, the functionality will overwrite CHECK_ID with the final list and the program will continue as if the user entered "-c" option and the final list of checks.
2018-12-21 12:14:10 +01:00
Toni de la Fuente
1203700d34
Merge pull request #282 from toniblyx/devel
...
Devel
2018-12-19 23:57:26 -05:00
Toni de la Fuente
97a59cf5e4
Merge pull request #276 from affanhmalik/check29
...
Check for flowlogs only in active VPCs, avoid false flag if a region …
2018-12-19 23:53:42 -05:00
Toni de la Fuente
8a3893cd33
Merge pull request #281 from SDugo/master
...
Option "-c" supports one or multiple checks
2018-12-19 23:50:57 -05:00
Toni de la Fuente
1fc2b77bfb
Merge pull request #278 from SatanicMechanic/patch-1
...
Update check_extra739
2018-12-19 23:49:53 -05:00
Samuel Dugo
00e5e65176
Option "-c" supports one or multiple checks
...
Added support for option "-c" to specify one or multiple specific checks to be performed. To specify multiple tests include them using a comma delimiter (i.e. check21,check22).
2018-12-19 17:05:13 +01:00
Morey Straus
8935233a05
Update check_extra739
...
typo correction
2018-12-14 14:32:38 -08:00
Toni de la Fuente
c9c4620988
format fix
2018-12-13 18:14:31 +01:00
Toni de la Fuente
2700365101
Improved README and change rules ID
2018-12-13 18:13:18 +01:00
Affan Malik
bacdf6ed22
Check for flowlogs only in active VPCs, avoid false flag if a region has no VPCs
2018-12-12 15:09:31 -05:00
Toni de la Fuente
30cac002fa
Wazuh integration guide DRAFT
2018-12-05 14:41:07 +00:00
Toni de la Fuente
d818381bcf
Wazuh integration guide DRAFT
2018-12-05 14:38:39 +00:00
Toni de la Fuente
d78424b346
gdpr fix
2018-12-05 12:00:38 +00:00
Toni de la Fuente
1727758479
enhanced gdpr and first wazuh integration bits
2018-12-05 11:58:43 +00:00
Toni de la Fuente
9e0923407e
Merge branch 'devel' of https://github.com/toniblyx/prowler into devel
2018-12-05 11:55:51 +00:00
Toni de la Fuente
79e02ce074
Merge pull request #271 from toniblyx/devel
...
Fixed bug in check extra730: certs expiration
2018-12-05 11:52:19 +00:00
Toni de la Fuente
b4cb323de4
Merge pull request #270 from SDugo/master
...
Fixed AccessDeniedException on extra730
2018-12-05 11:49:41 +00:00
Samuel Dugo
573fa46aac
Fixed AccessDeniedException on extra730
...
When executing Prowler using a specific profile (in my case to assume a role) , check_extra730 returns:
"An error occurred (AccessDeniedException) when calling the DescribeCertificate operation: User: [ASSUMED_ROLE_ARN] is not authorized to perform: acm:DescribeCertificate on resource: [RESOURCE_ARN]"
This is because line 28 did not contain the following parameters: "$PROFILE_OPT --region $regx" .
2018-12-05 11:35:44 +01:00
Toni de la Fuente
31a0de167c
Adding extra340 to GDPR group
2018-11-27 00:07:19 -05:00
Toni de la Fuente
6c2d4d6b01
Adding newer checks to GDPR and extras group
2018-11-27 00:03:40 -05:00
Toni de la Fuente
0ca1a8f28c
version and extras last addition
2018-11-26 23:23:16 -05:00
Toni de la Fuente
be29f2f0d9
version and extras last addition
2018-11-26 23:22:05 -05:00
Toni de la Fuente
c567781bcd
Merge pull request #269 from toniblyx/devel
...
New checks, documentation and fixes:
Added extra739 ELB logging and typos
Added extra740 EBS snapshots are encrypted and HIPAA
Added info about GDPR and HIPAA
Improved Prowler description
fixed issue #268
2018-11-26 22:50:27 -05:00
Toni de la Fuente
84c9b97c48
Merge branch 'master' into devel
2018-11-26 22:48:30 -05:00
Toni de la Fuente
2015a50733
fixed issue #268
2018-11-26 12:26:35 -05:00
Toni de la Fuente
d839b2fba1
Improved Prowler description
2018-11-19 23:54:42 -05:00
Toni de la Fuente
3f70c86736
Added info about GDPR and HIPAA
2018-11-19 23:39:17 -05:00
Toni de la Fuente
aeaf533585
Added extra740 EBS snapshots are encrypted and HIPAA
2018-11-19 23:22:18 -05:00
Toni de la Fuente
5757a88227
Added extra739 ELB logging and typos
2018-11-19 22:55:29 -05:00
Toni de la Fuente
83de86ca2c
fixed HIPAA typo
2018-11-15 14:38:05 -05:00
Toni de la Fuente
e2861614c2
Generate creds report only if group1 related
2018-11-14 22:30:22 -05:00
Toni de la Fuente
d14bdcc6c3
added option -L to list check groups
2018-11-14 20:38:02 -05:00
Toni de la Fuente
013a435784
added extra738 to group extras
2018-11-14 20:09:20 -05:00
Toni de la Fuente
cd9bedb526
Merge pull request #266 from onkymykiss1/update-check29
...
Updated check29 to validate against FlowLogId which is valid for both…
2018-11-14 19:57:47 -05:00
Jason Turner
cafd203406
Updated check29 to validate against FlowLogId which is valid for both CloudWatch and s3 destinations
2018-11-14 14:19:44 -08:00
Toni de la Fuente
2437f8fb16
Added extra738 CloudFront HTTPS
2018-11-08 20:21:46 -05:00
Toni de la Fuente
fa5b81b28e
Added extra737 KMS keys rotation
2018-11-07 23:37:06 -05:00
Toni de la Fuente
9bdbf6f51c
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
Toni de la Fuente
b6a30df808
Added extra735 check encrypted RDS
2018-11-07 22:00:28 -05:00
Toni de la Fuente
0dc2b9a081
Improved extra734 checking enforce policy
2018-11-06 00:17:00 -05:00
Toni de la Fuente
29e142361b
Improved extra734 checking enforce policy
2018-11-06 00:15:20 -05:00
Toni de la Fuente
883afa4959
Added extra734 check S3 bucket encryption
2018-11-05 23:30:00 -05:00
Toni de la Fuente
b4ea16b6f7
Changed label to beta3
2018-10-31 23:16:23 -04:00
