Commit Graph

7046 Commits

Author SHA1 Message Date
Toni de la Fuente acfb61fe42 Merge pull request #83 from toniblyx/master
Improved extra73 (added s3 policy review)
2017-07-21 00:15:25 -04:00
Toni de la Fuente 955cde08fd Improved extra73 (s3 bucket permissions)
Now extra73 checks for S3 policies that have Allow for Principal as *.
2017-07-21 00:13:11 -04:00
Toni de la Fuente 65e10c27c2 Merge pull request #82 from toniblyx/master
Fixed bug in extra73 for buckets in EU (eu-west-1)
2017-07-19 13:33:22 -04:00
Toni de la Fuente ed2448dbe0 Fixed bug in extra73 for buckets in EU (eu-west-1) 2017-07-19 13:33:03 -04:00
Toni de la Fuente 644b04c1ac Merge pull request #81 from toniblyx/master
Improved extra73 - S3 bucket permissions
2017-07-19 11:00:09 -04:00
Toni de la Fuente 9f8941b76f updated check 7.3 2017-07-19 10:58:39 -04:00
Toni de la Fuente 7eeee0e777 Improved extra73 to check also Authenticated users
Ensure there are no S3 buckets open to the Everyone or Any AWS user (Not Scored) (Not part of CIS benchmark)
2017-07-19 10:57:05 -04:00
Toni de la Fuente 0ea9de8f64 Merge pull request #80 from toniblyx/master
Update README.md
1.3
2017-07-18 13:01:54 -04:00
Toni de la Fuente 5723bcb1a4 Update README.md 2017-07-18 13:00:46 -04:00
Toni de la Fuente 222ab4d8d6 Merge pull request #79 from toniblyx/master
Add TOC and section about Extras
2017-07-18 12:33:10 -04:00
Toni de la Fuente f949d2f588 Add TOC and section about extras 2017-07-18 12:32:16 -04:00
Toni de la Fuente 918f74d6c5 Merge pull request #78 from toniblyx/master
Added check73 to find S3 buckets open to AllUsers
2017-07-18 11:49:01 -04:00
Toni de la Fuente 2faa50c4de fixed typo in TITTLE73 2017-07-18 11:47:56 -04:00
Toni de la Fuente ae274b2fc9 Added check73 S3 buckets open to the AllUsers 2017-07-18 11:45:52 -04:00
Toni de la Fuente 6f5b28a99c Merge pull request #77 from Alfresco/revert-76-revert-75-master
Revert "Revert "added check72 about EBS snapshots set as public""
2017-07-18 09:32:45 -04:00
Toni de la Fuente ce9a2b8162 Revert "Revert "added check72 about EBS snapshots set as public"" 2017-07-18 09:32:23 -04:00
Toni de la Fuente 92598d54f5 Merge pull request #76 from Alfresco/revert-75-master
Revert "added check72 about EBS snapshots set as public"
2017-07-18 09:30:44 -04:00
Toni de la Fuente 1697d6c92a Revert "added check72 about EBS snapshots set as public" 2017-07-18 09:30:31 -04:00
Toni de la Fuente f64607d925 Merge pull request #75 from toniblyx/master
added check72 about EBS snapshots set as public
2017-07-18 09:16:24 -04:00
Toni de la Fuente 255b6f4ccb Added extra check72
7.2  Ensure there are no EBS Snapshots set as Public (Not Scored) (Not part of CIS benchmark)
2017-07-18 09:15:31 -04:00
Toni de la Fuente 7e3b1bd3ca Merge pull request #7 from Alfresco/master
get changes
2017-07-17 23:10:35 -04:00
Toni de la Fuente 93d5d7295f Merge pull request #73 from MrSecure/extra71-admins
add extra check - look for admins w/o MFA
2017-07-17 23:08:45 -04:00
Toni de la Fuente 435d2ed6fc Merge pull request #72 from MrSecure/check315-fixes
update check315
2017-07-17 22:55:01 -04:00
Ben Allen bb1cb1e081 add extra71 check 2017-07-17 21:43:43 -05:00
Ben Allen 1527e438a1 update check315 to provide more consistent display of topics & subscriptiongs 2017-07-17 21:42:18 -05:00
Toni de la Fuente c2b5ed17c2 Merge pull request #71 from toniblyx/master
fixed issue with check 3.15 issue #70
2017-07-17 22:28:02 -04:00
Toni de la Fuente c2540b2828 fixed issue with check 3.15 2017-07-17 22:27:12 -04:00
Toni de la Fuente fe4dfdb368 Merge pull request #68 from toniblyx/master
Added checks based on CIS profile definitions, issue #64
2017-07-17 21:21:54 -04:00
Toni de la Fuente 39f1411f30 added info about profile definitions 2017-07-17 21:20:05 -04:00
Toni de la Fuente ebf80a6455 Added CIS profile definitions checks
level1 and level2 profile definition checks enabled see https://github.com/Alfresco/prowler/issues/64
2017-07-17 21:14:46 -04:00
Toni de la Fuente ebeb747686 Merge pull request #67 from toniblyx/master
issue #65
2017-07-17 20:50:40 -04:00
Toni de la Fuente e3400b05ba fixed issue #65
added --output json to those places needed to override different default configuration
2017-07-17 20:49:19 -04:00
Toni de la Fuente 90b24ef734 Merge pull request #6 from Alfresco/master
get latest updates
2017-07-13 09:58:07 -04:00
Toni de la Fuente 2de0b5e6b0 Merge pull request #62 from MrSecure/keep-cred-report
Keep cred report
1.2
2017-07-12 11:57:21 -04:00
Ben Allen 2ddf31ca22 Merge in tweaks to keep the credential report, when requested, and fix a notice 2017-07-12 10:34:55 -05:00
Ben Allen b8d2d1cd4b Merge branch 'policy_requirements' into all-updates 2017-07-12 10:32:06 -05:00
Toni de la Fuente fb420d13cc Merge pull request #61 from MrSecure/policy_requirements
Policy requirements
2017-07-12 11:24:18 -04:00
Toni de la Fuente 55ed1273d9 Merge pull request #60 from MrSecure/fail-early
Fail early
2017-07-12 11:15:35 -04:00
Ben Allen edceb17b71 Merge branch 'fail-early' into all-updates 2017-07-12 10:13:07 -05:00
Ben Allen a1e3c09fad Merge branch 'fail-early' into all-updates 2017-07-12 10:06:39 -05:00
Ben Allen 118da69eb5 add headings for incremental policy and bootstrap script 2017-07-11 16:34:25 -05:00
Ben Allen 02a4ab665f fix policy document syntax error in README 2017-07-11 16:34:25 -05:00
Ben Allen c8a2e16a1c add note about saving the key material 2017-07-11 16:34:25 -05:00
Ben Allen ca012ebf76 fix policy document syntax error 2017-07-11 16:34:25 -05:00
Ben Allen 1cbedb1eb6 add incremental policy file; update readme to show use case 2017-07-11 16:34:25 -05:00
Ben Allen 30c3a8aa76 correct typo in permission name 2017-07-11 16:34:25 -05:00
Ben Allen 68f8e08506 add option (-k) to keep the credential report after execution. 2017-07-11 16:24:42 -05:00
Ben Allen 866fe11610 fix typo in function name 2017-07-11 16:23:50 -05:00
Ben Allen f787c57636 improve trap handling 2017-07-11 16:04:27 -05:00
Ben Allen 93b815ecf2 gather count of topics per region, even when unable to list subscribers. 2017-07-11 15:58:50 -05:00