From db58399aefd3d277b7e67104a89f16dbaaf1161e Mon Sep 17 00:00:00 2001 From: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com> Date: Fri, 16 May 2025 21:22:54 +0530 Subject: [PATCH] Update checks and frameworks --- ui/app/(prowler)/lighthouse/config/page.tsx | 4 +- ui/lib/lighthouse/helpers/checks.ts | 40 +++++++++++++++++++ .../helpers/complianceframeworks.ts | 5 ++- 3 files changed, 46 insertions(+), 3 deletions(-) diff --git a/ui/app/(prowler)/lighthouse/config/page.tsx b/ui/app/(prowler)/lighthouse/config/page.tsx index 68ed260f22..88e71120cf 100644 --- a/ui/app/(prowler)/lighthouse/config/page.tsx +++ b/ui/app/(prowler)/lighthouse/config/page.tsx @@ -87,7 +87,6 @@ export default function ChatbotConfig() { apiKey: attrs.api_key || "", businessContext: attrs.business_context || "", }); - } } catch (error) { if (isMounted) { @@ -150,7 +149,8 @@ export default function ChatbotConfig() { } catch (error) { toast({ title: "Error", - description: "Failed to save lighthouse configuration: " + String(error), + description: + "Failed to save lighthouse configuration: " + String(error), variant: "destructive", }); console.error(error); diff --git a/ui/lib/lighthouse/helpers/checks.ts b/ui/lib/lighthouse/helpers/checks.ts index d9e547ab9c..d11870b046 100644 --- a/ui/lib/lighthouse/helpers/checks.ts +++ b/ui/lib/lighthouse/helpers/checks.ts @@ -642,6 +642,7 @@ const checksByProvider = async (provider_type: string) => { "iam_sa_no_user_managed_keys", "iam_sa_user_managed_key_rotate_90_days", "iam_sa_user_managed_key_unused", + "iam_service_account_unused", "kms_key_not_publicly_accessible", "kms_key_rotation_enabled", "logging_log_metric_filter_and_alert_for_audit_configuration_changes_enabled", @@ -888,6 +889,17 @@ const checksByProvider = async (provider_type: string) => { "admincenter_settings_password_never_expire", "admincenter_users_admins_reduced_license_footprint", "admincenter_users_between_two_and_four_global_admins", + "defender_antiphishing_policy_configured", + "defender_antispam_connection_filter_policy_empty_ip_allowlist", + "defender_antispam_connection_filter_policy_safe_list_off", + "defender_antispam_outbound_policy_configured", + "defender_antispam_outbound_policy_forwarding_disabled", + "defender_antispam_policy_inbound_no_allowed_domains", + "defender_chat_report_policy_configured", + "defender_domain_dkim_enabled", + "defender_malware_policy_common_attachments_filter_enabled", + "defender_malware_policy_comprehensive_attachments_filter_applied", + "defender_malware_policy_notifications_internal_users_malware_enabled", "entra_admin_consent_workflow_enabled", "entra_admin_portals_access_restriction", "entra_admin_users_cloud_only", @@ -907,10 +919,38 @@ const checksByProvider = async (provider_type: string) => { "entra_policy_restricts_user_consent_for_apps", "entra_thirdparty_integrated_apps_not_allowed", "entra_users_mfa_enabled", + "exchange_external_email_tagging_enabled", + "exchange_mailbox_audit_bypass_disabled", + "exchange_mailbox_policy_additional_storage_restricted", + "exchange_organization_mailbox_auditing_enabled", + "exchange_organization_mailtips_enabled", + "exchange_organization_modern_authentication_enabled", + "exchange_roles_assignment_policy_addins_disabled", + "exchange_transport_config_smtp_auth_disabled", + "exchange_transport_rules_mail_forwarding_disabled", + "exchange_transport_rules_whitelist_disabled", + "exchange_user_mailbox_auditing_enabled", + "purview_audit_log_search_enabled", "sharepoint_external_sharing_managed", "sharepoint_external_sharing_restricted", "sharepoint_guest_sharing_restricted", "sharepoint_modern_authentication_required", + "sharepoint_onedrive_sync_restricted_unmanaged_devices", + "teams_email_sending_to_channel_disabled", + "teams_external_domains_restricted", + "teams_external_file_sharing_restricted", + "teams_external_users_cannot_start_conversations", + "teams_meeting_anonymous_user_join_disabled", + "teams_meeting_anonymous_user_start_disabled", + "teams_meeting_chat_anonymous_users_disabled", + "teams_meeting_dial_in_lobby_bypass_disabled", + "teams_meeting_external_chat_disabled", + "teams_meeting_external_control_disabled", + "teams_meeting_external_lobby_bypass_disabled", + "teams_meeting_presenters_restricted", + "teams_meeting_recording_disabled", + "teams_security_reporting_enabled", + "teams_unmanaged_communication_disabled", ], }; diff --git a/ui/lib/lighthouse/helpers/complianceframeworks.ts b/ui/lib/lighthouse/helpers/complianceframeworks.ts index 65f91ec611..22b54ac27b 100644 --- a/ui/lib/lighthouse/helpers/complianceframeworks.ts +++ b/ui/lib/lighthouse/helpers/complianceframeworks.ts @@ -34,6 +34,7 @@ export const complianceFrameworksByProvider = async (provider_type: string) => { "nist_csf_1.1_aws", "pci_3.2.1_aws", "pci_4.0_aws", + "prowler_threatscore_aws", "rbi_cyber_security_framework_aws", "soc2_aws", ], @@ -45,6 +46,7 @@ export const complianceFrameworksByProvider = async (provider_type: string) => { "iso27001_2022_azure", "mitre_attack_azure", "pci_4.0_azure", + "prowler_threatscore_azure", "soc2_azure", ], gcp: [ @@ -54,6 +56,7 @@ export const complianceFrameworksByProvider = async (provider_type: string) => { "iso27001_2022_gcp", "mitre_attack_gcp", "pci_4.0_gcp", + "prowler_threatscore_gcp", "soc2_gcp", ], kubernetes: [ @@ -62,7 +65,7 @@ export const complianceFrameworksByProvider = async (provider_type: string) => { "iso27001_2022_kubernetes", "pci_4.0_kubernetes", ], - m365: ["cis_4.0_microsoft365"], + m365: ["cis_4.0_m365", "prowler_threatscore_m365"], }; return complianceFrameworks[provider_type as ProviderType] || []; };