531ba5c31b
feat(azure): new check for Entra ID authentication for Azure PostgreSQL Flexible Server ( #8764 )
...
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-11-14 13:54:57 +01:00
d1380fc19d
fix(azure): validation and other errors in cosmosdb, defender, storage and vm ( #8915 )
2025-11-13 09:17:44 -05:00
c7d7ec9a3b
fix: add pagination for m365 and azure users retrieval ( #8858 )
2025-10-08 09:07:18 +02:00
f484b83f15
feat(azure): Add APIM threat detection for LLM jacking attacks ( #8571 )
...
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-08-28 11:42:07 +02:00
b0c386fc60
fix(app): fix false positives in app_http_logs_enabled ( #8507 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-08-12 14:47:17 +02:00
72b06261df
fix(storage): fall positives in storage_geo_redundant_enabled ( #8504 )
2025-08-12 12:30:43 +02:00
5842f2df37
feat(azure/vm): add new check vm_jit_access_enabled ( #8202 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-08-11 13:12:36 +02:00
d238050065
feat(azure/vm): add new check vm_sufficient_daily_backup_retention_period ( #8200 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-08-11 11:44:45 +02:00
1cfe610d47
feat(azure/vm): add new check vm_scaleset_not_empty ( #8192 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-07-25 18:42:03 +08:00
d9a9236ab7
feat(azure/vm): add new check vm_desired_sku_size ( #8191 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-07-25 17:51:01 +08:00
1211fe706e
feat(azure/defender): add new check defender_attack_path_notifications_properly_configured ( #8245 )
2025-07-17 12:40:26 +02:00
74940e1fc4
fix(check_metadata): add service name validator ( #8289 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
Co-authored-by: Pedro Martín <pedromarting3@gmail.com >
2025-07-17 13:10:30 +05:45
c32ce7eb97
fix(azure): use Subscription ID for mutelist ( #8290 )
2025-07-16 18:34:38 +08:00
a09be4c0ba
chore(azure/defender): get security contacts from API REST ( #8241 )
2025-07-15 16:37:43 +02:00
a319f80701
feat(storage): add new check storage_smb_protocol_version_is_latest ( #8128 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-07-09 17:28:00 +08:00
d34e709d91
fix(azure/storage): use BaseModel for all Storage models ( #8222 )
2025-07-09 15:49:17 +08:00
4c50f4d811
feat(azure/vm): add new check vm_backup_enabled ( #8182 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-07-08 17:01:22 +08:00
3ceb86c4d9
feat(azure/vm): add new check vm_scaleset_associated_load_balancer ( #8181 )
2025-07-08 16:40:43 +08:00
3628e7b3e8
feat(azure/vm): add new check vm_ensure_using_approved_images ( #8168 )
2025-07-08 16:40:33 +08:00
ab96e0aac0
feat(azure/vm): add new check vm_linux_enforce_ssh_authentication ( #8149 )
2025-07-07 22:01:11 +08:00
6f3112f754
feat(storage): add new check storage_smb_channel_encryption_with_secure_algorithm ( #8123 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-07-04 15:26:33 +08:00
f78a29206c
fix(azure): use Pydantic models in VM service and fix managed disk logic ( #8151 )
2025-07-02 16:23:51 +08:00
7b58d1dd56
fix: checks with no resource name ( #8120 )
2025-06-27 17:40:43 +08:00
cbf2a28bac
feat(azure): add new check keyvault_access_only_through_private_endpoints ( #8072 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-24 22:04:02 +08:00
df1abb2152
feat(azure): add new check monitor_alert_service_health_exists ( #8067 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-24 18:04:20 +08:00
e0465f2aa2
fix(azure): consolidate file share properties to the storage account level ( #8087 )
2025-06-24 17:37:05 +08:00
b572575c8d
feat(azure): add new check iam_role_user_access_admin_restricted ( #8040 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-18 21:24:23 +08:00
22343faa1e
feat(storage): add new check storage_default_to_entra_authorization_enabled ( #7981 )
2025-06-18 21:16:07 +08:00
f9aed36d0b
feat(azure): add new check databricks_workspace_cmk_encryption_enabled ( #8017 )
2025-06-18 18:36:37 +08:00
facc0627d7
feat(azure): add new check storage_geo_redundant_enabled ( #7980 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 18:10:02 +08:00
76f0d890e9
feat(azure): add Databricks service and check for workspace VNet injection ( #8008 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-06-18 17:38:09 +08:00
1b73ab2fe4
feat(storage): add new check storage_cross_tenant_replication_disabled ( #7977 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 15:54:13 +08:00
cc8f6131e6
feat(azure): add new check storage_blob_versioning_is_enabled ( #7927 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-18 15:46:38 +08:00
c4bd9122d4
feat(IaC): PoC for IaC Security Scanner ( #7852 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-06-17 23:23:25 +08:00
6954ef880e
fix(azure): add new way to auth against App Insight ( #7763 )
2025-06-16 16:46:36 +08:00
e34e59ff2d
fix(network): allow 0 as compliant value ( #7926 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-06-13 19:50:19 +08:00
7f80d2db46
fix(app): change api call for ftps_state ( #7923 )
2025-06-13 19:28:55 +08:00
1bd0d774e5
feat(mutelist): make validate_mutelist method static ( #7811 )
2025-06-11 11:33:49 +05:45
c589c95727
feat(storage): add new check storage_account_key_access_disabled ( #7974 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-06-10 08:23:09 +02:00
7e4f1a73bf
feat(storage): add new check storage_ensure_file_shares_soft_delete_is_enabled ( #7966 )
2025-06-10 08:09:11 +02:00
41f6637497
fix(defender): update defender_ensure_notify_alerts_severity_is_high logic ( #7862 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
2025-05-28 10:32:44 +02:00
2dd6be59b9
fix(m365): add compliantDevice grant control support ( #7844 )
2025-05-28 09:05:00 +02:00
02ca82004f
fix(typo): minor language updates ( #7843 )
2025-05-27 09:26:51 +02:00
e4d234fe03
fix(azure): remove resource_name inside the Check_Report ( #7420 )
2025-04-03 11:35:02 -04:00
5a59bb335c
fix(resources): add the correct id and names for resources ( #7410 )
2025-04-01 20:30:37 +02:00
97db38aa25
chore(deps): bump azure-mgmt-containerregistry from 10.3.0 to 12.0.0 ( #7025 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com >
2025-04-01 10:29:31 +02:00
5d6ed640f0
fix(vm): handle Nonetype is not iterable for extensions ( #7360 )
...
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com >
2025-03-25 12:25:15 +01:00
d989425490
fix(vm): handle NoneType accessing security_profile ( #7221 )
2025-03-25 09:33:00 +01:00
1e324b7ed2
fix(network): handle Nonetype is not iterable for security groups ( #7208 )
2025-03-25 09:28:37 +01:00
332b98a1ab
fix(iam): handle UnboundLocalError cannot access local variable 'report' ( #7361 )
2025-03-25 09:22:35 +01:00
johannes-engler-mw