Toni de la Fuente
d33c82cd00
Merge branch 'master' into patch-1
2021-02-03 14:54:22 +01:00
Toni de la Fuente
0e3e4a9227
Updated
...
added CHECK_SERVICENAME_extra73="s3"
2021-02-03 14:51:11 +01:00
Toni de la Fuente
bea84ad6d3
Fix title grammar in check_extra73 @CenturionGamer
...
Fix title grammar in check_extra73 @CenturionGamer
2021-02-03 14:49:35 +01:00
CenturionGamer
880523880d
Update check_extra73
...
Fixed the grammar by removing "the" in the description.
2021-01-28 13:06:44 -05:00
Toni de la Fuente
f85845c26b
Added service name to all checks
2021-01-22 00:19:45 +01:00
C.J
6a9a47e549
Fix for issue 713
2021-01-13 19:16:48 -05:00
C.J
733c99c1e0
Add check for AccessDenied when calling GetBucetLocation
2021-01-12 15:38:47 -05:00
Joaquin Rinaudo
ecbe997084
severity+security_hub
2020-09-03 08:04:13 +02:00
Marc Jay
0f49468601
Limit CHECK_ID to a single value, handing the left-pad formatting in one place
...
Remove the second entry in any comma-separated check IDs from each check, formatting
the check ID with leading zeros in `include/outputs` if the `-n` flag is active
2020-04-14 02:02:48 +01:00
Marc Jay
5bab65c56d
- Remove securityhub output mode and replace with '-S' flag to send findings to Security Hub
...
- Move Security Hub related code to a dedicated include/securityhub_integration file
- Check that Security Hub is enabled in the target region before beginning checks when -S is specified
- Add error handling to the batch-import-findings call
- Add CHECK_ASFF_TYPE variables to all CIS checks to override the default
- Add support for CHECK_ASFF_RESOURCE_TYPE variables which override the default 'AwsAccount' value for the resource a finding relates to.
- Add CHECK_ASFF_RESOURCE_TYPE variables to all checks where there is a suitable value in the schema
- Remove json-asff output for info messages as they are not appropriate for possible submission to Security Hub
- Update the README to cover Security Hub integration
- Add an IAM policy JSON document that provides the necessary BatchImportFindings permission for Security Hub
- Remove trailing whitespace and periods in pass/fail messages to be consistent with the majority of messages, to prevent future tidy-up from changing the finding IDs
2020-04-11 03:04:03 +01:00
C.J
f735de8836
Rewrite of check extra73
2020-01-26 03:00:45 -05:00
root
4cc5cd1ab1
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
zfLQ2qx2
3a893889b6
Misc prowler fixes
2019-11-13 22:49:32 -05:00
gabrielsoltz
6a52ebe492
reduce_api_calls
2019-10-24 23:54:04 +02:00
gabrielsoltz
9b81fc0ac7
fix jq array
2019-10-24 23:30:34 +02:00
gabrielsoltz
529fc6421d
better_output
2019-10-23 15:04:22 +02:00
gabrielsoltz
7aa1573275
comments
2019-10-23 14:06:29 +02:00
gabrielsoltz
bb69f51456
comment
2019-10-23 14:03:49 +02:00
gabrielsoltz
5cadd0c2f2
remove_unused_variable
2019-10-23 14:03:08 +02:00
gabrielsoltz
df5def48d9
comments_and_fix
2019-10-23 13:45:20 +02:00
gabrielsoltz
5252518d97
extra73
2019-10-23 13:38:36 +02:00
gabrielsoltz
cea45f43c8
remove REGION from Bucket Listing
2019-06-20 17:36:15 +02:00
gabrielsoltz
c8622bc347
better check denied
2019-06-13 14:32:19 +02:00
gabrielsoltz
de8336092b
fix locations
2019-06-13 12:05:39 +02:00
gabrielsoltz
d50c3afebd
add check for explicit deny
2019-06-13 12:04:52 +02:00
Toni de la Fuente
5757a88227
Added extra739 ELB logging and typos
2018-11-19 22:55:29 -05:00
Toni de la Fuente
a97069e1ed
Fix extra73 issue #219
2018-06-04 21:39:27 -04:00
Toni de la Fuente
62bfb28d21
Fix extra73 issue #219
2018-06-04 21:38:17 -04:00
Toni de la Fuente
11d3a17e14
Fix extra73 issue #219
2018-06-04 21:34:52 -04:00
Ben Hecht
ac7d51b6f3
Support graceful failing of buckets with corrupt/unintended permissions
2018-05-29 17:19:23 -04:00
MrSecure
bd9e49d3e3
mark Extra checks as such
2018-04-24 21:19:42 -07:00
Toni de la Fuente
168ccffaf4
disable concurrency queries due API limits
2018-04-09 15:55:07 -04:00
Toni de la Fuente
7d510b11b2
disable concurrency checks due API limits
2018-04-09 15:41:55 -04:00
Toni de la Fuente
e3e038127f
license changes for checks
2018-04-09 15:09:30 -04:00
Toni de la Fuente
cd41766e22
added checkid to every check and group title
2018-03-29 10:36:46 -04:00
Toni de la Fuente
07b166baa9
changed outputs to the new ones
2018-03-28 11:07:46 -04:00
Toni de la Fuente
70483ba81b
updated README and usage
2018-03-27 18:07:03 -04:00
Toni de la Fuente
6647702d90
added support of -g groups
2018-03-26 21:32:15 -04:00
Toni de la Fuente
da0f266944
first semi functional v2
2018-03-23 19:26:10 -04:00
Toni de la Fuente
a2806ad86b
populated checks
2018-03-23 10:05:20 -04:00
Toni de la Fuente
a21bff31a5
create check files
2018-03-20 22:59:34 -04:00