Toni de la Fuente
c6203bf9e3
Clean up redentials report output
2021-08-10 14:02:21 +02:00
Toni de la Fuente
62050e2e34
Added PROWLER_START_TIME to CSV for reports
2021-08-10 14:01:40 +02:00
danielperez660
9c24ae59cf
Merge branch '2.5' into master
2021-08-02 14:10:14 +01:00
Toni de la Fuente
98f0755a0f
Fix grammar issue in scoring @w0rmr1d3r
...
Fix grammar issue in scoring @w0rmr1d3r
2021-08-02 15:01:50 +02:00
daniel
3a66ca336a
changes made so there is enough colour contrast for WCAG 2.1 accessibility standards
2021-08-02 13:23:16 +02:00
Toni de la Fuente
52e04406dc
Added servicename to the title for ASFF
2021-07-29 17:03:04 +02:00
Ramon
9ddb31f9c3
fix grammar issue
2021-07-16 12:26:46 +02:00
Toni de la Fuente
5670e4a972
Removed CSV header stdout and add bucket-owner-full-control
2021-07-07 16:00:09 +02:00
Toni de la Fuente
c09385976a
Consolidated titles and outputs including resource ID in ASFF
2021-07-05 20:17:27 +02:00
Toni de la Fuente
3936a7b17a
Changed how color codes are shown in text mode
2021-07-05 20:11:35 +02:00
Geoff
b14ac340bb
Update: Add data to the ASFF
...
Added in the ASFF ProductFields ProwlerResourceName. The resource name is passed into the fining from the third parameter in the Prowler checks
2021-06-16 09:12:17 -05:00
Toni de la Fuente
7dec9f3d52
Merge branch '2.5' into nicer-html
2021-06-14 14:30:04 +02:00
Nick Malcolm
da45af78bc
Disable ordering so that it sticks with the order the HTML was generated
2021-06-14 21:13:19 +12:00
Nick Malcolm
01663e4e0d
Page width improvements. Use the 'link' icon for the link to docs, to cut down on page width. Remove the status column to save width, and also remove redundancy (colour coding and Result column serve the same purpose). Remove the column widths that added to over 100%.
2021-06-14 21:00:40 +12:00
Nick Malcolm
34e27131fd
Refactor the HTML outputs so that they reuse code and are easier to change
2021-06-14 20:46:14 +12:00
Nick Malcolm
89af81ed22
Use DataTable's SearchPanes extension to allow easy filtering by result, severity, region, service, or check.
2021-06-14 20:33:38 +12:00
Nick Malcolm
f5a4e357b9
Consolidate javascript at the bottom of the template. Remove duplicate bootstrap includes - you only need bundle to get Popper (see https://getbootstrap.com/docs/4.0/getting-started/contents/#js-files ) and you don't need both plain bootstrap and bundled bootstrap. Remove dupe jQuery too.
2021-06-14 20:27:16 +12:00
Toni de la Fuente
3f07afd7d4
Added custom file option @yangsec888
...
Added custom file option @yangsec888
2021-06-08 15:46:47 +02:00
Toni de la Fuente
5f1fa558c9
Changes in text output with severity and service name
2021-06-01 09:09:25 +02:00
Sam (Yang) Li
a711b482df
Fix #795 custom file option
2021-05-20 14:49:53 -04:00
Toni de la Fuente
1655bdb902
Added resource id to RDS checks and in json,csv,html outputs
2021-05-18 16:57:37 +02:00
Toni de la Fuente
cf4034c3b4
Improved error handling sts get-caller-identity @pablopagani
...
Improved error handling sts get-caller-identity @pablopagani
2021-05-04 15:43:29 +02:00
Toni de la Fuente
7c65430508
Improved error handling when listing regions @pablopagani
...
Improved error handling when listing regions @pablopagani
2021-05-04 15:39:25 +02:00
Pablo Pagani
5385c4e546
Improved error handling sts get-caller-identity
...
Instead of looking for a fixed error string, it uses error codes from aws cli
Previos condition was not catching this error message:
An error occurred (ExpiredToken) when calling the GetCallerIdentity operation: The security token included in the request is expired
Also forced the output of the command to json. In some tests I was doing was failing becuase it was sending output as text
2021-05-01 17:54:11 -03:00
Toni de la Fuente
49533de21b
Added support for custom output folder and S3 bucket
2021-04-15 23:51:21 +02:00
Toni de la Fuente
721b15d105
Fixed issue #776
2021-04-15 09:30:31 +02:00
Toni de la Fuente
53117819fc
Fixed credentials renew issue #775
2021-04-14 11:47:38 +02:00
Toni de la Fuente
2552f2977d
Fixed issue #775
2021-04-12 21:23:28 +02:00
Toni de la Fuente
e4edc2fa2c
Improved feature to refresh assume role credentials before it expires
2021-04-09 15:13:13 +02:00
Toni de la Fuente
3dfca9c9dd
Improved html output with scoring information
2021-04-08 00:14:24 +02:00
Toni de la Fuente
dacfea6b32
Included Risk, Remediation and Link support for CSV and HTML outputs
2021-04-07 18:42:44 +02:00
Toni de la Fuente
574a9c94b0
Added Risk, Remediation and Link to html report
2021-04-07 18:40:50 +02:00
Toni de la Fuente
c0f3265754
Better handle permissions and errors
2021-03-24 15:41:51 +01:00
C.J
7e6291c51d
Cloudtrail metrics pass if found on any, not every, cloudtrail log
2021-02-09 12:29:43 -05:00
Toni de la Fuente
e6d175d62e
Check for errors generating credential report, limit loop iterations @zfLQ2qx2
...
Check for errors generating credential report, limit loop iterations @zfLQ2qx2
2021-02-02 15:28:32 +01:00
Toni de la Fuente
f9c2e0cf26
Revert PR #718
2021-01-22 16:17:26 +01:00
Toni de la Fuente
6f371744dc
Added AWS service name to json, csv and html outputs
2021-01-22 10:56:59 +01:00
Toni de la Fuente
73cac580f3
Added severity field to CSV and HTML output reports
2021-01-21 22:42:40 +01:00
C.J
be3e771454
Check for errors generating credential report, limit loop iterations
2021-01-14 04:41:16 -05:00
Toni de la Fuente
6cbee3b16c
Fix log metric filter check3x with multiple trails @bridgecrewio
...
Fix log metric filter check3x with multiple trails @bridgecrewio
2021-01-13 23:08:17 +01:00
Toni de la Fuente
a53aeff0e8
Catch errors assuming role and describing regions @zfLQ2qx2
...
Catch errors assuming role and describing regions @zfLQ2qx2
2021-01-13 22:50:11 +01:00
Toni de la Fuente
0d4988b874
Additional check for location of awscli @zfLQ2qx2
...
Additional check for location of awscli @zfLQ2qx2
2021-01-13 21:25:04 +01:00
C.J
1d9c1eaece
Catch errors assuming role and describing regions
2021-01-13 09:44:15 -05:00
C.J
f53a32ae26
Additional check for location of awscli
2021-01-12 11:03:30 -05:00
C.J
bf1bd505c5
Fix for busybox date command
2021-01-12 09:11:52 -05:00
Toni de la Fuente
953bdf3034
Merge branch 'master' into master
2020-12-18 10:24:25 +01:00
Toni de la Fuente
e298158bcd
Enhanced error handling without credentials
2020-12-17 17:15:17 +01:00
Toni de la Fuente
91ce905a5a
Fix issue assuming role in regions with STS disabled
2020-12-17 16:34:10 +01:00
Toni de la Fuente
347872a6de
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
...
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
2020-12-17 15:24:06 +01:00
Toni de la Fuente
5c620949f0
Update os_detector
...
Change above is because epoch time generator in BSD is 1h less than in Linux
2020-12-17 15:20:20 +01:00
