ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-29 06:44:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(compliance): update CIS 4.0 for M365 (#7716)

Browse Source 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
This commit is contained in:
Prowler BotHugo Pereira BritoSergio Garcia
 authored and GitHub committed 2025-05-12 13:10:07 +02:00
1 parent b3d5f7b848
commit d6b5d8a919
3 files changed
+2610 -70
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

prowler/CHANGELOG.md
+12
View File
@@ -2,6 +2,18 @@
All notable changes to the **Prowler SDK** are documented in this file.
## [v5.7.0] (Prowler v5.7.0)
### Added
- Update the compliance list supported for each provider from docs. [(#7694)](https://github.com/prowler-cloud/prowler/pull/7694)
- Allow setting cluster name in in-cluster mode in Kubernetes. [(#7695)](https://github.com/prowler-cloud/prowler/pull/7695)
- Add Prowler ThreatScore for M365 provider. [(#7692)](https://github.com/prowler-cloud/prowler/pull/7692)
### Fixed
- Update CIS 4.0 for M365 provider. [(#7699)](https://github.com/prowler-cloud/prowler/pull/7699)
---
## [v5.6.0] (Prowler v5.6.0)
### Added
prowler/compliance/m365/cis_4.0_m365.json
+2593 -67
View File
File diff suppressed because it is too large. Load diff
util/generate_compliance_json_from_csv_for_cis40_microsoft365.py
+5 -3
View File
@@ -4,7 +4,7 @@ import sys
# Convert a CSV file following the CIS 4.0 M365 Benchmark into a Prowler v3.0 Compliance JSON file
# CSV fields:
# Section #,Recommendation #,Profile,Title,Assessment Status,Description,Rationale Statement,Impact Statement,Remediation Procedure,Audit Procedure,Additional Information,CIS Controls,CIS Safeguards 1 (v8),CIS Safeguards 2 (v8),CIS Safeguards 3 (v8),v8 IG1,v8 IG2,v8 IG3,CIS Safeguards 1 (v7),CIS Safeguards 2 (v7),CIS Safeguards 3 (v7),v7 IG1,v7 IG2,v7 IG3,References,Default Value
# Section #;Recommendation #;Profile;Title;Assessment Status;Description;Rationale Statement;Impact Statement;Remediation Procedure;Audit Procedure;Additional Information;CIS Controls;CIS Safeguards 1 (v8);CIS Safeguards 2 (v8);CIS Safeguards 3 (v8);v8 IG1;v8 IG2;v8 IG3;CIS Safeguards 1 (v7);CIS Safeguards 2 (v7);CIS Safeguards 3 (v7);v7 IG1;v7 IG2;v7 IG3;References;Default Value
# Get the CSV filename to convert from
file_name = sys.argv[1]
@@ -15,7 +15,7 @@ output = {"Framework": "CIS", "Version": "4.0", "Requirements": []}
# Open the CSV file and read the rows
try:
with open(file_name, newline="", encoding="utf-8") as f:
reader = csv.reader(f, delimiter=",")
reader = csv.reader(f, delimiter=";")
next(reader) # Skip the header row
for row in reader:
attribute = {
@@ -29,6 +29,7 @@ try:
"AuditProcedure": row[9],
"AdditionalInformation": row[10],
"References": row[24],
"DefaultValue": row[25],
}
if row[4] != "":
output["Requirements"].append(
@@ -42,7 +43,7 @@ try:
except UnicodeDecodeError:
# If there is an error reading the file with the default encoding, try with ISO-8859-1
with open(file_name, newline="", encoding="ISO-8859-1") as f:
reader = csv.reader(f, delimiter=",")
reader = csv.reader(f, delimiter=";")
next(reader) # Skip the header row
for row in reader:
attribute = {
@@ -56,6 +57,7 @@ except UnicodeDecodeError:
"AuditProcedure": row[9],
"AdditionalInformation": row[10],
"References": row[24],
"DefaultValue": row[25],
}
if row[4] != "":
output["Requirements"].append(