ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 23:05:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
92e1f17a8049f7d21b8f0d8ff8542c7d2ebf3ab3
prowler/checks
History
Marc Jay 92e1f17a80 Adds 'json-asff' and 'securityhub' output modes 
json-asff mode outputs JSON, similar to the standard 'json' mode with one check per line, but in AWS Security Finding Format - used by AWS Security Hub
Currently uses a generic Type, Resources and ProductArn value, but sets the Id to a unique value that includes the details of the message, in order to separate out checks that run against multiple resources and output one result per resource per check. This ensures that findings can be updated, should the resource move in or out of compliance

securityhub mode generates the ASFF JSON and then passes it to an 'aws securityhub batch-import-findings' call, once per resource per check. Output to the screen is similar to the standard mode, but prints whether or not the finding was submitted successfully

Fixes #524
2020-04-07 16:08:07 +01:00
..
check11
Check 1.1 - check password access and access key usage
2020-02-18 11:36:57 +02:00
check12
Improved username filtering for check12
2018-09-05 11:09:03 +01:00
check13
Adds 'json-asff' and 'securityhub' output modes
2020-04-07 16:08:07 +01:00
check14
Take age of access key 2 from correct column
2018-09-20 16:18:19 +02:00
check15
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check16
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check17
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check18
fix mismatched check_type
2018-04-24 21:12:25 -07:00
check19
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check21
Update check21
2020-03-09 13:00:43 +07:00
check22
Iterate over all regions
2019-04-17 13:38:12 +02:00
check23
Add additional error checking to address issue 459
2020-01-25 15:22:39 -05:00
check24
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check25
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check26
Add additional error checking to address issue 459
2020-01-25 15:22:39 -05:00
check27
fixed and improved check27
2018-07-26 21:44:59 -04:00
check28
fixed check28 issue #209
2018-04-30 12:24:10 -04:00
check29
Associate VPCFlowLog with VPC
2020-02-11 20:55:30 -08:00
check31
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check32
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check33
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check34
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check35
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check36
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check37
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check38
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check39
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check41
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check42
Added IPv6 support to networking checks
2019-05-16 14:38:11 -04:00
check43
iterate across all default sg, so fail more for each one and also add output sg
2019-05-23 17:19:56 +02:00
check44
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check110
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check111
New POC scoring and extra741 key finder userdata
2019-02-08 16:39:05 +00:00
check112
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check113
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check114
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check115
Issue #230
2018-08-14 10:11:44 -04:00
check116
Added managed to output
2018-09-11 23:06:00 -05:00
check117
Fixed issue #317
2019-04-23 23:20:11 -04:00
check118
Fixed issue #317
2019-04-23 23:20:11 -04:00
check119
fix: check119 needs to ignore terminated instances
2020-02-25 09:23:55 +01:00
check120
remove filter by roles so that groups are included as well
2019-08-15 13:09:36 +01:00
check121
review outputs
2019-06-06 19:42:55 +01:00
check122
[FIX] remove duplicated filter condition | kf/aa/if
2019-08-07 16:13:36 +02:00
check310
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check311
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check312
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check313
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check314
Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate
2019-11-19 01:37:42 -05:00
check_extra71
Fix issue #303
2019-03-11 22:12:54 -04:00
check_extra72
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra73
Rewrite of check extra73
2020-01-26 03:00:45 -05:00
check_extra74
Fix typo
2019-07-11 18:04:45 -07:00
check_extra75
Update extra75 to aware of default security groups
2019-11-20 00:09:35 -05:00
check_extra76
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check_extra77
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
check_extra78
Remove unnecessary print
2020-02-18 11:58:05 +02:00
check_extra79
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra710
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra711
Spelling fix "reshift" means "redshift"
2019-02-20 12:30:04 -07:00
check_extra712
Fixed issue #315
2019-04-23 11:32:56 -04:00
check_extra713
Fix issue #323
2019-08-17 20:13:34 +08:00
check_extra714
List CloudFront distributions only once
2019-08-23 09:13:33 +02:00
check_extra715
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra716
Improved policy handling on extra716
2020-04-03 17:54:55 +02:00
check_extra717
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra718
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra719
Filter out private zones in check extra719
2019-11-21 15:36:38 -05:00
check_extra720
adding regex for wildcard option in cloudtrail
2019-06-25 13:45:52 -04:00
check_extra721
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra722
Fixed accuracy for check_extra722
2019-05-13 17:00:56 -04:00
check_extra723
Enhanced title for check extra723
2019-12-27 12:09:35 +01:00
check_extra724
Ignore imported ACM Certificate in check_extra724
2020-03-27 14:49:52 +08:00
check_extra725
Fixed test for no S3 buckets and moved code. Changed method to run through the trails list file.
2018-08-28 16:52:31 +01:00
check_extra726
Resolve issue with not_available state in results
2019-12-30 14:43:51 -05:00
check_extra727
reduce_api_calls
2019-10-25 16:42:59 +02:00
check_extra728
Fix extra727 and extra728 #221
2018-06-13 14:18:22 -07:00
check_extra729
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra730
Fixed AccessDeniedException on extra730
2018-12-05 11:35:44 +01:00
check_extra731
Small check fixes
2019-12-18 13:24:31 +02:00
check_extra732
Added check extra732 Cloudfront CDN Geo restrictions
2018-10-31 22:45:59 -04:00
check_extra733
Fix issue #309
2019-03-27 22:42:13 +00:00
check_extra734
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
check_extra735
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra736
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra737
Added extra737 KMS keys rotation
2018-11-07 23:37:06 -05:00
check_extra738
Added extra738 CloudFront HTTPS
2018-11-08 20:21:46 -05:00
check_extra739
Added extra739 RDS backup and RDS group of checks
2019-05-15 23:12:06 -04:00
check_extra740
Added extra740 EBS snapshots are encrypted and HIPAA
2018-11-19 23:22:18 -05:00
check_extra741
Revert "ignore None when user data is empty (gunzip: invalid magic)"
2019-08-17 11:32:12 +08:00
check_extra742
Improve performance of check_extra742 by limiting to one AWS CLI call
2020-03-04 16:46:28 +02:00
check_extra743
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra744
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra745
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra746
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
check_extra747
Added exttra747 RDS CloudWatch Log integration
2019-05-15 23:31:25 -04:00
check_extra748
Check extra748 should fail in case of all ports (0-65535) open
2020-02-18 10:26:44 +02:00
check_extra749
Added check extra749 SG open Oracle ports
2019-05-16 14:57:48 -04:00
check_extra750
Added check extra750 SG open MySQL ports
2019-05-16 15:38:00 -04:00
check_extra751
Added check extra751 SG open Postgres port
2019-05-16 15:38:41 -04:00
check_extra752
Added check extra752 open Redis prt
2019-05-16 15:39:30 -04:00
check_extra753
Added check extra753 open MongoDB port
2019-05-16 15:40:00 -04:00
check_extra754
Added check extra754 open Cassandra port
2019-05-16 15:40:23 -04:00
check_extra755
Added check extra755 open Memcached port
2019-05-16 15:40:48 -04:00
check_extra756
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra757
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra758
fixed region for extra757 and extra758
2019-10-13 19:05:57 +02:00
check_extra759
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra760
Integration with Yelp detect-secrets
2019-06-25 08:28:50 -04:00
check_extra761
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra762
extra 7.62 - output cleanup
2019-10-22 10:35:48 -05:00
check_extra763
Misc prowler fixes
2019-11-13 22:49:32 -05:00
check_extra764
extra764 should also check for principal being AWS = "*"
2020-02-18 10:20:13 +02:00
check_extra765
docs: Fix typo
2020-02-28 17:58:10 +01:00
check_extra767
Added extra767 for CloudFront field level encryption issue #425
2019-11-21 17:48:34 +01:00
check_extra768
Update check_extra768
2019-11-24 14:37:09 +02:00
check_extra769
Add additional error checkings to check extra769
2019-12-30 11:33:12 -05:00
check_extra770
Added check_extra770, which checks for internet facing instances with an Instance Profile attached.
2019-12-12 11:07:14 -05:00
check_extra771
Add conditions check for extra771
2020-02-18 10:28:36 +02:00
check_extra772
Update and rename check_extra772 to check_extra773
2020-01-27 17:57:06 -05:00
check_extra773
Update and rename check_extra772 to check_extra773
2020-01-27 17:57:06 -05:00
check_extra774
fixed check numbers for 774,775
2020-02-22 22:16:59 -08:00
check_extra775
fixed check numbers for 774,775
2020-02-22 22:16:59 -08:00
check_extra776
Updated check_extra776 title
2020-03-03 23:04:09 +01:00
check_extra777
Add Elasticsearch checks issue #521
2020-03-24 23:46:11 +01:00
check_extra778
Add Elasticsearch checks issue #521
2020-03-24 23:46:11 +01:00
check_extra779
v2.2.1 with new function and Improved extra779 and extra716
2020-04-02 15:31:43 +02:00
check_extra780
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra781
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra782
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra783
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra784
Updated ES check titles and results
2020-03-25 17:25:38 +01:00
check_extra785
Improved policy handling on extra716
2020-04-03 17:54:25 +02:00
check_sample
clean up documentation and added info to check_sample
2019-11-22 11:59:03 +01:00