ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-11 07:15:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
263926a53b5698e53d69321c1d2d6939801840cc
prowler/checks
History
Ngọ Anh Đức 263926a53b Improve check21 
- Add ISLOGGING_STATUS, INCLUDEMANAGEMENTEVENTS_STATUS, READWRITETYPE_STATUS to check
- Remove ` --no-include-shadow-trails ` from CLI
2.1 Ensure CloudTrail is enabled in all regions (Scored):
Via CLI
1. ` aws cloudtrail describe-trails `
Ensure `IsMultiRegionTrail` is set to true
2. `aws cloudtrail get-trail-status --name <trailname shown in describe-trails>`
Ensure `IsLogging` is set to true
3. `aws cloudtrail get-event-selectors --trail-name <trailname shown in describetrails>`
Ensure there is at least one Event Selector for a Trail with `IncludeManagementEvents` set to
`true` and `ReadWriteType` set to `All`
2020-03-09 12:44:23 +07:00
..
check11
Check 1.1 - check password access and access key usage
2020-02-18 11:36:57 +02:00
check12
Improved username filtering for check12
2018-09-05 11:09:03 +01:00
check13
fix(check13): should not pass if user never logged in
2018-10-17 10:16:49 +02:00
check14
Take age of access key 2 from correct column
2018-09-20 16:18:19 +02:00
check15
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check16
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check17
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check18
fix mismatched check_type
2018-04-24 21:12:25 -07:00
check19
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check21
Improve check21
2020-03-09 12:44:23 +07:00
check22
Iterate over all regions
2019-04-17 13:38:12 +02:00
check23
Add additional error checking to address issue 459
2020-01-25 15:22:39 -05:00
check24
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check25
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check26
Add additional error checking to address issue 459
2020-01-25 15:22:39 -05:00
check27
fixed and improved check27
2018-07-26 21:44:59 -04:00
check28
fixed check28 issue #209
2018-04-30 12:24:10 -04:00
check29
Associate VPCFlowLog with VPC
2020-02-11 20:55:30 -08:00
check31
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check32
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check33
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check34
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check35
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check36
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check37
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check38
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check39
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check41
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check42
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check43
iterate across all default sg, so fail more for each one and also add output sg
2019-05-23 17:19:56 +02:00
check44
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check110
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check111
New POC scoring and extra741 key finder userdata
2019-02-08 16:39:05 +00:00
check112
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check113
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check114
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check115
Issue #230
2018-08-14 10:11:44 -04:00
check116
Added managed to output
2018-09-11 23:06:00 -05:00
check117
Fixed issue #317
2019-04-23 23:20:11 -04:00
check118
Fixed issue #317
2019-04-23 23:20:11 -04:00
check119
fix: check119 needs to ignore terminated instances
2020-02-25 09:23:55 +01:00
check120
remove filter by roles so that groups are included as well
2019-08-15 13:09:36 +01:00
check121
review outputs
2019-06-06 19:42:55 +01:00
check122
[FIX] remove duplicated filter condition | kf/aa/if
2019-08-07 16:13:36 +02:00
check310
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check311
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check312
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check313
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check314
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check_extra71
Fix issue #303
2019-03-11 22:12:54 -04:00
check_extra72
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra73
Rewrite of check extra73
2020-01-26 03:00:45 -05:00
check_extra74
Fix typo
2019-07-11 18:04:45 -07:00
check_extra75
Update extra75 to aware of default security groups
2019-11-20 00:09:35 -05:00
check_extra76
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check_extra77
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
check_extra78
Remove unnecessary print
2020-02-18 11:58:05 +02:00
check_extra79
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra710
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra711
Spelling fix "reshift" means "redshift"
2019-02-20 12:30:04 -07:00
check_extra712
Fixed issue #315
2019-04-23 11:32:56 -04:00
check_extra713
Fix issue #323
2019-08-17 20:13:34 +08:00
check_extra714
List CloudFront distributions only once
2019-08-23 09:13:33 +02:00
check_extra715
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra716
Add conditions check for extra716
2020-02-18 10:48:25 +02:00
check_extra717
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra718
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra719
Filter out private zones in check extra719
2019-11-21 15:36:38 -05:00
check_extra720
adding regex for wildcard option in cloudtrail
2019-06-25 13:45:52 -04:00
check_extra721
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra722
Fixed accuracy for check_extra722
2019-05-13 17:00:56 -04:00
check_extra723
Enhanced title for check extra723
2019-12-27 12:09:35 +01:00
check_extra724
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra725
Fixed test for no S3 buckets and moved code. Changed method to run through the trails list file.
2018-08-28 16:52:31 +01:00
check_extra726
Resolve issue with not_available state in results
2019-12-30 14:43:51 -05:00
check_extra727
reduce_api_calls
2019-10-25 16:42:59 +02:00
check_extra728
Fix extra727 and extra728 #221
2018-06-13 14:18:22 -07:00
check_extra729
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra730
Fixed AccessDeniedException on extra730
2018-12-05 11:35:44 +01:00
check_extra731
Small check fixes
2019-12-18 13:24:31 +02:00
check_extra732
Added check extra732 Cloudfront CDN Geo restrictions
2018-10-31 22:45:59 -04:00
check_extra733
Fix issue #309
2019-03-27 22:42:13 +00:00
check_extra734
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
check_extra735
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra736
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra737
Added extra737 KMS keys rotation
2018-11-07 23:37:06 -05:00
check_extra738
Added extra738 CloudFront HTTPS
2018-11-08 20:21:46 -05:00
check_extra739
Added extra739 RDS backup and RDS group of checks
2019-05-15 23:12:06 -04:00
check_extra740
Added extra740 EBS snapshots are encrypted and HIPAA
2018-11-19 23:22:18 -05:00
check_extra741
Revert "ignore None when user data is empty (gunzip: invalid magic)"
2019-08-17 11:32:12 +08:00
check_extra742
Improve performance of check_extra742 by limiting to one AWS CLI call
2020-03-04 16:46:28 +02:00
check_extra743
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra744
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra745
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra746
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra747
Added exttra747 RDS CloudWatch Log integration
2019-05-15 23:31:25 -04:00
check_extra748
Check extra748 should fail in case of all ports (0-65535) open
2020-02-18 10:26:44 +02:00
check_extra749
Added check extra749 SG open Oracle ports
2019-05-16 14:57:48 -04:00
check_extra750
Added check extra750 SG open MySQL ports
2019-05-16 15:38:00 -04:00
check_extra751
Added check extra751 SG open Postgres port
2019-05-16 15:38:41 -04:00
check_extra752
Added check extra752 open Redis prt
2019-05-16 15:39:30 -04:00
check_extra753
Added check extra753 open MongoDB port
2019-05-16 15:40:00 -04:00
check_extra754
Added check extra754 open Cassandra port
2019-05-16 15:40:23 -04:00
check_extra755
Added check extra755 open Memcached port
2019-05-16 15:40:48 -04:00
check_extra756
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra757
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra758
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra759
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra760
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra761
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra762
extra 7.62 - output cleanup
2019-10-22 10:35:48 -05:00
check_extra763
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra764
extra764 should also check for principal being AWS = "*"
2020-02-18 10:20:13 +02:00
check_extra765
docs: Fix typo
2020-02-28 17:58:10 +01:00
check_extra767
Added extra767 for CloudFront field level encryption issue #425
2019-11-21 17:48:34 +01:00
check_extra768
Update check_extra768
2019-11-24 14:37:09 +02:00
check_extra769
Add additional error checkings to check extra769
2019-12-30 11:33:12 -05:00
check_extra770
Added check_extra770, which checks for internet facing instances with an Instance Profile attached.
2019-12-12 11:07:14 -05:00
check_extra771
Add conditions check for extra771
2020-02-18 10:28:36 +02:00
check_extra772
Update and rename check_extra772 to check_extra773
2020-01-27 17:57:06 -05:00
check_extra773
Update and rename check_extra772 to check_extra773
2020-01-27 17:57:06 -05:00
check_extra774
fixed check numbers for 774,775
2020-02-22 22:16:59 -08:00
check_extra775
fixed check numbers for 774,775
2020-02-22 22:16:59 -08:00
check_extra776
Updated check_extra776 title
2020-03-03 23:04:09 +01:00
check_sample
clean up documentation and added info to check_sample
2019-11-22 11:59:03 +01:00