ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,834 Commits 496 Branches 214 Tags
fix/cloud-e2e-stability-master
Commit Graph

132 Commits

Author SHA1 Message Date
Hugo Pereira Brito c6dae3a711 chore: remove __init__.py from test directories (#10582) 2026-07-13 15:09:42 +01:00
Maringanti Vasist Acharya b6f74c7284 feat(m365): add exchange application access policy check (#11247) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-02 10:16:07 +01:00
Samyak Choudhary 883ffa1fdb feat(m365): add Entra Conditional Access group management restriction (#11342) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-01 11:38:54 +02:00
Utkarsh Batham d62abeb407 feat(m365): add entra_conditional_access_policy_no_exclusion_gaps check (#11577) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Ariel Eli <207917221+arieleli01212@users.noreply.github.com>
 2026-06-24 17:03:15 +02:00
Yixuan Xu 93dd696a4f feat(m365): add Azure DevOps Conditional Access check (#11182) 
Co-authored-by: Atlas-BountyHunter <atlas-bounty@hermes-agent.local>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-24 13:33:51 +02:00
Zeus Almightee e8ffe59ce2 feat(m365/entra): add entra_conditional_access_policy_no_deleted_object_references check (#11236) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-17 16:16:49 +02:00
PrettyFox0 8d4ec561c2 feat(m365): add check for directory sync object takeover protection (#11098) 
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: omobolaji adeyan <omobolaji.adeyan@gmail.com>
 2026-06-17 12:15:14 +02:00
Jasmine e710ebff1c feat(m365): add exchange_mailbox_primary_smtp_custom_domain check (#11215) 
Co-authored-by: Jasmine Sullivan <20147180@tafe.wa.edu.au>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-09 16:24:25 +02:00
Hugo Pereira Brito b3caee88e4 fix(m365): skip future hires in MFA capable check (#11511) 2026-06-09 15:42:06 +02:00
Hugo Pereira Brito d9f90e50b8 fix(m365): paginate admincenter group enumeration (#11510) 2026-06-09 15:23:35 +02:00
Ashishraymajhi 7e60e8f8da feat(m365): add entra_service_prinicipal_privileged_role_no_owners_check (#11189) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-09 11:29:03 +02:00
Johannes Engler a2824f7166 feat(stackit): add new provider with 4 checks (#9237) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-05-28 13:16:38 +02:00
Pedro Martín 723d161c63 fix(az-m365): asyncio.run() in Azure/M365 Celery worker event (#11360) 2026-05-26 11:26:39 +02:00
Sandiyo Christan 0fd952ae2b chore(m365): use PowerShell best practices for quoting credential variables (#9997) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-05-21 15:17:23 +01:00
Hugo Pereira Brito 7a7c828fc7 feat(m365/entra): add entra_app_registration_client_secret_unused check (consolidates #11097 and #11212) (#11232) 
Co-authored-by: shadyfox <git@twink.energy>
Co-authored-by: Oleksandr Yizchak Sanin <alexaaander.sanin@gmail.com>
 2026-05-19 15:14:32 +01:00
abdou 7f3dcdf02f fix(m365): surface AuditLog.Read.All permission errors instead of false positives (#10907) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-05-12 18:22:19 +01:00
Hugo Pereira Brito 1b99550572 feat(m365): add entra_service_principal_no_secrets_for_permanent_tier0_roles security check (#10788) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-05-12 10:45:32 +01:00
Hugo Pereira Brito 80482da1cb refactor(m365): scope entra_emergency_access_exclusion to Block-grant policies (#10849) 2026-05-12 10:40:46 +01:00
Hugo Pereira Brito 1b0e12ec51 fix(m365): exclude disabled guest users from entra_users_mfa_capable (#11002) 2026-05-12 08:35:24 +01:00
Hugo Pereira Brito e252058af4 fix(m365): exclude guest users from entra_users_mfa_capable (#10785) 2026-04-28 08:58:16 +01:00
Daniel Barranquero 368d9c1519 fix(admincenter): restrict admincenter group visibility check to Unified groups (#10899) 2026-04-27 13:23:03 +02:00
Hugo Pereira Brito a82eaa885d refactor(m365): normalize CA platforms at model level (#10635) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 15:00:23 +02:00
Hugo Pereira Brito 90a619a8b4 feat(m365): add entra_conditional_access_policy_block_unknown_device_platforms security check (#10615) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 14:32:37 +02:00
Hugo Pereira Brito 638bf62d76 feat(entra): directory sync account exclusion (#10620) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 14:16:32 +02:00
Hugo Pereira Brito 5610f5ad90 feat(m365): add entra_conditional_access_policy_corporate_device_sign_in_frequency_enforced security check (#10618) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 14:10:00 +02:00
Hugo Pereira Brito 92b838866a feat(m365): add entra_conditional_access_policy_mfa_enforced_for_guest_users security check (#10616) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 13:45:12 +02:00
Hugo Pereira Brito e24e1ab771 feat(m365): add exchange_organization_delicensing_resiliency_enabled security check (#10608) 2026-04-14 13:30:45 +02:00
Hugo Pereira Brito bc3fd79457 feat(intune): add device compliance policy marks noncompliant check (#10599) 2026-04-14 13:01:47 +02:00
Hugo Pereira Brito 4941ed5797 feat(entra): add new check entra_conditional_access_policy_all_apps_all_users (#10619) 
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
 2026-04-14 12:47:57 +02:00
Hugo Pereira Brito ab00c2dce1 feat(m365): add entra_conditional_access_policy_block_elevated_insider_risk security check (#10234) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 17:27:00 +02:00
Hugo Pereira Brito 3b875484b0 feat(m365): add device registration MFA and harden Intune enrollment CA check (#10222) 
Co-authored-by: Hugo Brito <hugopbrito@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 13:36:05 +02:00
Hugo Pereira Brito 7148086410 feat(m365): add entra_conditional_access_policy_block_o365_elevated_insider_risk security check (#10232) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-30 11:49:29 +02:00
Hugo Pereira Brito c651f60e3a feat(m365): add entra_conditional_access_policy_mdm_compliant_device_required check (#10220) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-26 11:36:30 +01:00
Hugo Pereira Brito 534ad3d04f feat(m365): add entra_device_code_flow_blocked security check (#10218) 2026-03-13 11:31:47 +01:00
Hugo Pereira Brito 9cf63a2a68 feat(m365): add custom entra_conditional_access_policy_compliant_device_hybrid_joined_device_mfa_required check (#10197) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-05 18:11:20 +01:00
Hugo Pereira Brito 726b5665d0 feat(m365): add entra_conditional_access_policy_approved_client_app_required_for_mobile security check (#10216) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-03-05 10:58:18 +01:00
Hugo Pereira Brito e96ea54f3b feat(m365): add entra_break_glass_users_fido2_security_key_registered security check (#10213) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2026-03-03 13:58:44 +01:00
Hugo Pereira Brito 548a137046 feat(m365): add entra_authentication_method_sms_voice_disabled security check (#10212) 2026-03-03 13:08:02 +01:00
Andoni Alonso efcbbf63c2 docs: review and fix documentation coverage for provider CLI flags (#10040) 2026-03-03 09:57:05 +01:00
Hugo Pereira Brito 07dea4f402 refactor(m365): rename conditional access policy checks to include policy prefix (#10217) 2026-03-02 13:41:24 +01:00
Andoni Alonso c8ce590039 feat(m365): add entra_default_app_management_policy_enabled security check (#9898) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-26 16:14:29 +01:00
Andoni Alonso df09b14c75 feat(m365): add entra_all_apps_conditional_access_coverage security check (#9902) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-26 11:37:09 +01:00
Hugo Pereira Brito db1db7d366 feat(m365): add entra_require_mfa_for_management_api security check (#10150) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-02-25 12:29:23 +01:00
Hugo Pereira Brito 6935c4eb1b feat(m365): add entra_app_enforced_restrictions security check (#10058) 2026-02-25 11:53:35 +01:00
Andoni Alonso 75d01efc0d feat(m365): add entra_conditional_access_policy_emergency_access_exclusion security check (#9903) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-24 11:35:31 +01:00
Andoni Alonso ea60f2d082 feat(m365): add defenderxdr_critical_asset_management_pending_approvals security check (#10085) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-02-19 18:49:41 +01:00
Andoni Alonso e8c0a37d50 feat(m365): add entra_seamless_sso_disabled security check (#10086) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-02-19 18:19:07 +01:00
Hugo Pereira Brito 48b94b2a9f feat(m365): add defenderxdr_endpoint_privileged_user_exposed_credentials security check (#10084) 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2026-02-19 17:52:16 +01:00
Hugo Pereira Brito 20b26bc7d0 feat(m365): add entra_app_registration_no_unused_privileged_permissions security check (#10080) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-02-19 17:12:50 +01:00
Hugo Pereira Brito 23e51158e0 feat(m365): add defenderidentity_health_issues_no_open security check (#10087) 2026-02-19 16:58:08 +01:00