ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 23:05:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
031b68adde01e73a3385feb9e4ae9b93e0d17cc2
prowler/checks
History
Toni de la Fuente d737193b98 Merge pull request #407 from zfLQ2qx2/prowler_misc_fixes 
Misc prowler fixes


    Add GetEbsEncryptionByDefault wherever Prowler policies are mentioned
    Update Extra718 check to be aware of access denied responses
    Update Extra726 check to be more verbose for non-failure items
    Update Extra73 check to be aware of access denied responses
    Update Extra734 check to be aware of access denied responses and parse policies with jq for better accuracy
    Update Extra742 check for verbiage
    Update Extra756 check for verbiage and parameter order
    Update Extra761 check for failure scenarios (requires most recent awscli and addition to Prowler IAM policy)
    Added Extra763 check to verify that object versioning is enabled on S3 buckets
    Added Extra764 check to verify that S3 buckets enforce a secure transport policy
2019-11-20 22:03:02 +00:00
..
check11
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check12
Improved username filtering for check12
2018-09-05 11:09:03 +01:00
check13
fix(check13): should not pass if user never logged in
2018-10-17 10:16:49 +02:00
check14
Take age of access key 2 from correct column
2018-09-20 16:18:19 +02:00
check15
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check16
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check17
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check18
fix mismatched check_type
2018-04-24 21:12:25 -07:00
check19
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check21
Iterate over all regions
2019-04-17 13:36:00 +02:00
check22
Iterate over all regions
2019-04-17 13:38:12 +02:00
check23
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check24
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check25
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check26
CURRENT_ACCOUNT_ID is not needed
2019-09-17 14:52:30 -04:00
check27
fixed and improved check27
2018-07-26 21:44:59 -04:00
check28
fixed check28 issue #209
2018-04-30 12:24:10 -04:00
check29
Check for flowlogs only in active VPCs, avoid false flag if a region has no VPCs
2018-12-12 15:09:31 -05:00
check31
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check32
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check33
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check34
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check35
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check36
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check37
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check38
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check39
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check41
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check42
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check43
iterate across all default sg, so fail more for each one and also add output sg
2019-05-23 17:19:56 +02:00
check44
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check110
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check111
New POC scoring and extra741 key finder userdata
2019-02-08 16:39:05 +00:00
check112
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check113
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check114
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check115
Issue #230
2018-08-14 10:11:44 -04:00
check116
Added managed to output
2018-09-11 23:06:00 -05:00
check117
Fixed issue #317
2019-04-23 23:20:11 -04:00
check118
Fixed issue #317
2019-04-23 23:20:11 -04:00
check119
Modified checks and documentation to reflect changes in CIS_Benchmark_v1.2.0(05-23-2018)
2018-08-15 09:16:27 -06:00
check120
remove filter by roles so that groups are included as well
2019-08-15 13:09:36 +01:00
check121
review outputs
2019-06-06 19:42:55 +01:00
check122
[FIX] remove duplicated filter condition | kf/aa/if
2019-08-07 16:13:36 +02:00
check310
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check311
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check312
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check313
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check314
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check_extra71
Fix issue #303
2019-03-11 22:12:54 -04:00
check_extra72
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra73
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra74
Fix typo
2019-07-11 18:04:45 -07:00
check_extra75
Update extra75 to aware of default security groups
2019-11-20 00:09:35 -05:00
check_extra76
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check_extra77
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra78
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra79
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra710
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra711
Spelling fix "reshift" means "redshift"
2019-02-20 12:30:04 -07:00
check_extra712
Fixed issue #315
2019-04-23 11:32:56 -04:00
check_extra713
Fix issue #323
2019-08-17 20:13:34 +08:00
check_extra714
List CloudFront distributions only once
2019-08-23 09:13:33 +02:00
check_extra715
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra716
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra717
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra718
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra719
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra720
adding regex for wildcard option in cloudtrail
2019-06-25 13:45:52 -04:00
check_extra721
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra722
Fixed accuracy for check_extra722
2019-05-13 17:00:56 -04:00
check_extra723
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra724
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra725
Fixed test for no S3 buckets and moved code. Changed method to run through the trails list file.
2018-08-28 16:52:31 +01:00
check_extra726
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra727
reduce_api_calls
2019-10-25 16:42:59 +02:00
check_extra728
Fix extra727 and extra728 #221
2018-06-13 14:18:22 -07:00
check_extra729
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra730
Fixed AccessDeniedException on extra730
2018-12-05 11:35:44 +01:00
check_extra731
jq_improvements
2019-10-25 16:46:36 +02:00
check_extra732
Added check extra732 Cloudfront CDN Geo restrictions
2018-10-31 22:45:59 -04:00
check_extra733
Fix issue #309
2019-03-27 22:42:13 +00:00
check_extra734
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra735
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra736
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra737
Added extra737 KMS keys rotation
2018-11-07 23:37:06 -05:00
check_extra738
Added extra738 CloudFront HTTPS
2018-11-08 20:21:46 -05:00
check_extra739
Added extra739 RDS backup and RDS group of checks
2019-05-15 23:12:06 -04:00
check_extra740
Added extra740 EBS snapshots are encrypted and HIPAA
2018-11-19 23:22:18 -05:00
check_extra741
Revert "ignore None when user data is empty (gunzip: invalid magic)"
2019-08-17 11:32:12 +08:00
check_extra742
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra743
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra744
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra745
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra746
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra747
Added exttra747 RDS CloudWatch Log integration
2019-05-15 23:31:25 -04:00
check_extra748
Added check extra748 SG open to any port
2019-05-16 14:48:00 -04:00
check_extra749
Added check extra749 SG open Oracle ports
2019-05-16 14:57:48 -04:00
check_extra750
Added check extra750 SG open MySQL ports
2019-05-16 15:38:00 -04:00
check_extra751
Added check extra751 SG open Postgres port
2019-05-16 15:38:41 -04:00
check_extra752
Added check extra752 open Redis prt
2019-05-16 15:39:30 -04:00
check_extra753
Added check extra753 open MongoDB port
2019-05-16 15:40:00 -04:00
check_extra754
Added check extra754 open Cassandra port
2019-05-16 15:40:23 -04:00
check_extra755
Added check extra755 open Memcached port
2019-05-16 15:40:48 -04:00
check_extra756
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra757
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra758
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra759
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra760
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra761
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra762
extra 7.62 - output cleanup
2019-10-22 10:35:48 -05:00
check_extra763
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra764
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_sample
add EXTRA level marker to sample check
2018-04-24 21:10:10 -07:00