ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-04 02:04:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,353 Commits 566 Branches 224 Tags
32f3787e18d4f49a31400ad2a062eb23bb6ee87b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Hugo Pereira BritoalejandrobailoAdrián Jesús Peña RodríguezDaniel BarranqueroMrCloudSec
 		32f3787e18 feat(m365powershell): add pwsh authentication via service principal (#7992) 
Co-authored-by: alejandrobailo <alejandrobailo94@gmail.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-06-30 18:42:18 +08:00
Hugo Pereira Brito 22343faa1e feat(storage): add new check storage_default_to_entra_authorization_enabled (#7981) 2025-06-18 21:16:07 +08:00
Hugo Pereira Brito c5b37887ef chore: add pr to changelog (#8054) 2025-06-18 14:32:21 +02:00
Hugo Pereira BritoandSergio Garcia facc0627d7 feat(azure): add new check storage_geo_redundant_enabled (#7980) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 18:10:02 +08:00
Hugo Pereira Brito 7de7122c3b fix(m365): avoid user requests in setup_identity app context and user auth log enhancement (#8043) 2025-06-18 11:27:11 +02:00
Hugo Pereira BritoandSergio Garcia 1b73ab2fe4 feat(storage): add new check storage_cross_tenant_replication_disabled (#7977) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-18 15:54:13 +08:00
Hugo Pereira BritoandSergio Garcia e34e59ff2d fix(network): allow 0 as compliant value (#7926) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-06-13 19:50:19 +08:00
Hugo Pereira BritoandAndoni Alonso c589c95727 feat(storage): add new check storage_account_key_access_disabled (#7974) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-06-10 08:23:09 +02:00
Hugo Pereira Brito 7e4f1a73bf feat(storage): add new check storage_ensure_file_shares_soft_delete_is_enabled (#7966) 2025-06-10 08:09:11 +02:00
Hugo Pereira Brito 49aaf011aa fix(parser): add GitHub provider to prowler -h usage section (#7906) 2025-06-09 17:47:29 +02:00
Hugo Pereira Brito 359059dee6 fix(docs): add Organization.Read.All to M365 provider requirements (#7961) 2025-06-09 12:11:14 +02:00
Hugo Pereira BritoandVíctor Fernández Poyatos 845a0aa0d5 fix(changelog): add entries for password encryption in v5.7.3 (#7939) 
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2025-06-05 14:23:12 +02:00
Hugo Pereira Brito 75a11be9e6 fix(docs): add final permission assignments example (#7943) 2025-06-05 18:07:43 +05:45
Hugo Pereira BritoandPepe Fagoaga a778d005b6 fix(docs): add mfa warning for users (#7924) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2025-06-05 17:55:27 +05:45
Hugo Pereira Brito aa11ed70bd chore(docs): replace old permission images (#7900) 2025-06-02 11:47:11 +02:00
Hugo Pereira Brito b256c10622 chore: replace Directory.Read.All permission to Domain.Read.All for Azure (#7888) 2025-05-30 10:24:49 +02:00
Hugo Pereira Brito 6c3653c483 fix(docs): remove warning of encrypted password for cloud (#7886) 2025-05-30 12:01:32 +04:00
Hugo Pereira Brito 12987ec9f9 fix(admincenter): service and group visibility (#7870) 2025-05-28 16:48:49 +02:00
Hugo Pereira Brito 40b90ed063 fix(tests): typo in m365 domain test (#7866) 2025-05-28 16:43:58 +02:00
Hugo Pereira BritoSergio GarciaDaniel Barranquero
 		9e8e3eb0e6 fix(m365): update documentation (#7823) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-05-28 08:52:03 +02:00
Hugo Pereira Brito 1b42dda817 fix(formSchemas): encrypted password typo (#7828) 2025-05-23 12:52:17 +02:00
Hugo Pereira Brito f726d964a8 fix(m365): remove last encrypted password appearances (#7825) 2025-05-23 12:27:57 +02:00
Hugo Pereira BritoandDaniel Barranquero 36aaec8a55 chore(m365powershell): manage encryption from plaintext password (#7784) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2025-05-22 17:36:58 +02:00
Hugo Pereira Brito dddec4c688 fix(m365): add powershell.close() to msgraph services (#7816) 2025-05-21 15:13:03 +02:00
Hugo Pereira BritoandAndoni A. 6e184dae93 fix(admincenter): admincenter_users_admins_reduced_license_footprint logic (#7779) 
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-05-21 12:46:35 +02:00
Hugo Pereira BritoandAndoni Alonso 4e84507130 feat(entra): add new check entra_users_mfa_capable (#7734) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-05-21 10:31:56 +02:00
Hugo Pereira BritoandAndoni Alonso 1a89d65516 fix(m365powershell): add sanitize to test_credentials (#7761) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2025-05-21 08:49:04 +02:00
Hugo Pereira Brito a18dd76a5a chore(m365): accept all tenant domains in authentication (#7746) 2025-05-19 13:53:54 +05:45
Hugo Pereira BritoandMrCloudSec 637ebdc3db feat(repository): add new check repository_branch_delete_on_merge_enabled (#6209) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-16 15:03:37 +02:00
Hugo Pereira BritoandMrCloudSec 451b36093f feat(repository): add new check repository_default_branch_requires_conversation_resolution (#6208) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-16 14:57:15 +02:00
Hugo Pereira BritoandMrCloudSec cdc4b362a4 feat(repository): add new check repository_default_branch_protection_applies_to_admins (#6205) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-16 08:29:45 +02:00
Hugo Pereira BritoandMrCloudSec 977c788fff feat(repository): add new check repository_default_branch_status_checks_required (#6204) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-15 15:33:49 +02:00
Hugo Pereira Brito 21f8b5dbad fix(check): add missing __init__.py files (#7748) 2025-05-15 11:22:58 +02:00
Hugo Pereira BritoMrCloudSecAndoni A.
 		1c874d1283 feat(repository): add new check repository_default_branch_deletion_disabled (#6200) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-05-15 08:33:36 +02:00
Hugo Pereira BritoandMrCloudSec 8f9bdae2b7 feat(repository): add new check repository_default_branch_disallows_force_push (#6197) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-14 16:48:47 +02:00
Hugo Pereira BritoandMrCloudSec 5a9ccd60a0 feat(repository): add new check repository_default_branch_requires_linear_history (#6162) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-14 14:37:27 +02:00
Hugo Pereira BritoMrCloudSecAndoni A.
 		beb7a53efe feat(repository): add new check repository_default_branch_protection_enabled (#6161) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-05-14 13:42:59 +02:00
Hugo Pereira BritoandMrCloudSec 8431ce42a1 feat(organization): add new check organization_members_mfa_required (#6304) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-14 13:29:08 +02:00
Hugo Pereira BritoMrCloudSecAndoni A.
 		a765c1543e feat: add GitHub provider documentation and CIS v1.0.0 compliance (#6116) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
 2025-05-14 10:47:33 +02:00
Hugo Pereira BritoandMrCloudSec 484a773f5b feat(github): add new service Organization (#6300) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-14 10:40:26 +02:00
Hugo Pereira BritoandMrCloudSec 9ecf570790 feat(github): add new check repository_code_changes_multi_approval_requirement (#6160) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-14 10:06:52 +02:00
Hugo Pereira BritoandMrCloudSec 413b948ca0 feat(github): add GitHub provider (#5787) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-13 15:28:01 +02:00
Hugo Pereira BritoDaniel BarranqueroMrCloudSec
 		1a8df3bf18 fix(defender): enhance policies checks logic (#7666) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-12 17:02:30 +02:00
Hugo Pereira Brito b78f53a722 chore(findings): enhance m365 authentication method information (#7681) 2025-05-12 18:31:32 +05:45
Hugo Pereira BritoandMrCloudSec 7c3a53908b chore(compliance): update CIS 4.0 for M365 (#7699) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-12 12:59:50 +02:00
Hugo Pereira Brito f63e9e5e77 fix(m365): invalid user credentials exception (#7677) 2025-05-12 13:22:13 +05:45
Hugo Pereira Brito 3cab52772c feat(m365): add categories for tenant type e3 and e5 (#7691) 2025-05-09 08:11:44 +02:00
Hugo Pereira Brito 4c874b68f5 fix(metadata): typo in defender_chat_report_policy_configured (#7678) 2025-05-07 09:30:49 -04:00
Hugo Pereira Brito 83aefc42c1 fix(powershell): remove platform-specific execution (#7675) 2025-05-07 11:44:13 +02:00
Hugo Pereira BritoandMrCloudSec 7eec60f4d9 feat(m365): ensure all forms of mail forwarding are blocked or disabled (#7658) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-05-05 11:21:14 -04:00
Hugo Pereira BritoAndoni AAdrián Jesús Peña Rodríguez
 		3fd9c51086 feat(m365): automate PowerShell modules installation (#7618) 
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Adrián Jesús Peña Rodríguez <adrianjpr@gmail.com>
 2025-04-30 16:41:59 +02:00
Hugo Pereira BritoandMrCloudSec a51a185f49 fix(powershell): handle m365 provider execution and logging (#7602) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-25 10:44:25 -04:00
Hugo Pereira BritoAndoni AMrCloudSec
 		90453fd07e feat(teams): add new check teams_meeting_chat_anonymous_users_disabled (#7579) 
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-25 09:29:24 -04:00
Hugo Pereira BritoAndoni ASergio Garcia
 		d071dea7f7 feat(teams): add new check teams_meeting_dial_in_lobby_bypass_disabled (#7571) 
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-24 13:05:52 -04:00
Hugo Pereira BritoAndoni ASergio Garcia
 		d9782c7b8a feat(teams): add new check teams_meeting_external_lobby_bypass_disabled (#7568) 
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-24 12:13:42 -04:00
Hugo Pereira BritoandMrCloudSec eaf0d06b63 chore(m365): add test_connection function (#7541) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-24 10:20:58 -04:00
Hugo Pereira Brito 808e8297b0 feat(teams): add new check teams_meeting_anonymous_user_start_disabled (#7567) 2025-04-23 10:31:17 -04:00
Hugo Pereira Brito 738ce56955 fix(docs): overview m365 auth (#7588) 2025-04-23 09:58:32 -04:00
Hugo Pereira BritoAndoni AMrCloudSec
 		0234957907 feat(teams): add new check teams_meeting_anonymous_user_join_disabled (#7565) 
Co-authored-by: Andoni A <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-22 16:02:16 -04:00
Hugo Pereira BritoandMrCloudSec 8713b74204 feat(teams): add new check teams_external_users_cannot_start_conversations (#7562) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-22 14:36:54 -04:00
Hugo Pereira BritoandMrCloudSec cbaddad358 feat(teams): add new check teams_unmanaged_communication_disabled (#7561) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-22 13:25:30 -04:00
Hugo Pereira BritoandSergio Garcia 2379544425 feat(teams): add new check teams_external_domains_restricted (#7557) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-22 13:04:51 -04:00
Hugo Pereira Brito 29fefba62e fix(teams): teams_email_sending_to_channel_disabled docstrings (#7559) 2025-04-22 12:57:18 -04:00
Hugo Pereira BritoandSergio Garcia 23b65c7728 feat(teams): add new check teams_email_sending_to_channel_disabled (#7533) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-04-16 11:13:55 -04:00
Hugo Pereira BritoandMrCloudSec 52bd48168f feat: adapt Microsoft365 provider to use PowerShell (#7331) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-04-15 13:24:09 -04:00
Hugo Pereira Brito 024f1425df feat(entra): add new check entra_legacy_authentication_blocked (#7240) 2025-03-31 18:12:26 +02:00
Hugo Pereira Brito a7ed610da9 feat(entra): add new check entra_users_mfa_enabled (#7228) 2025-03-31 17:54:52 +02:00
Hugo Pereira BritoandSergio Garcia 7ba99f22cd feat(entra): add new check entra_admin_users_phishing_resistant_mfa_enabled (#7211) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-03-31 17:52:28 +02:00
Hugo Pereira Brito b8ce09ec34 fix(entra): check name and logic of entra_admin_users_have_mfa_enabled (#7230) 2025-03-31 17:50:51 +02:00
Hugo Pereira BritoandMrCloudSec e06a33de84 feat(entra): add new check entra_managed_device_required_for_mfa_registration (#7203) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-31 12:24:47 +02:00
Hugo Pereira Brito 1e324b7ed2 fix(network): handle Nonetype is not iterable for security groups (#7208) 2025-03-25 09:28:37 +01:00
Hugo Pereira Brito bb149a30a7 fix(microsoft365): typo Microsoft365NotTenantIdButClientIdAndClienSecretError (#7244) 2025-03-17 21:16:47 +05:45
Hugo Pereira BritoandMrCloudSec 6221650c5f feat(entra): add new check entra_identity_protection_sign_in_risk_enabled (#7171) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-12 13:53:47 +01:00
Hugo Pereira Brito e617ff0460 feat(docs): add microsoft365 configurable checks (#7200) 2025-03-12 12:52:35 +01:00
Hugo Pereira BritoandMrCloudSec 4b1ed607a7 feat(entra): add new check entra_identity_protection_user_risk_enabled (#7126) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-12 12:44:31 +01:00
Hugo Pereira BritoandMrCloudSec 1891a1b24f feat(entra): add new check entra_managed_device_required_for_authentication (#7115) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-12 11:34:14 +01:00
Hugo Pereira BritoandMrCloudSec c88ae32b7f feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled (#7020) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-03-11 19:18:33 +01:00
Hugo Pereira Brito eaa0df16bb refactor(microsoft365): resource metadata assertions (#7169) 2025-03-11 11:30:37 +01:00
Hugo Pereira BritoandMrCloudSec 0f414e451e feat(microsoft365): add new check entra_policy_ensure_default_user_cannot_create_tenants (#6918) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-27 10:31:02 +01:00
Hugo Pereira Brito 7f74b67f1f chore(iam): enhance iam_role_cross_service_confused_deputy_prevention recommendation (#7023) 2025-02-26 07:37:57 +01:00
Hugo Pereira Brito 7f8d623283 refactor(microsoft365): CheckReportMicrosoft365 and resource metadata (#6952) 2025-02-26 07:24:54 +01:00
Hugo Pereira Brito fe25e7938e docs(tutorials): update all deprecated poetry shell references (#7002) 2025-02-20 17:04:19 +05:45
Hugo Pereira Brito 2d9e95d812 docs(installation): add warning for poetry shell deprecation in README (#6983) 2025-02-20 14:19:35 +05:45
Hugo Pereira Brito bc1b2ad9ab test(cloudfront): add name retrieval test for cloudfront bucket domains (#6969) 2025-02-19 08:08:55 +05:30
Hugo Pereira Brito ed5a0ae45a fix(cloudfront): Incorrect bucket name retrievement (#6947) 2025-02-17 17:08:28 +01:00
Hugo Pereira BritoandMrCloudSec 2934752eeb fix(elasticache): InvalidReplicationGroupStateFault error (#6815) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-02-04 14:28:31 -05:00
Hugo Pereira Brito 1256c040e9 fix: microsoft365 mutelist (#6724) 2025-01-31 12:32:39 +01:00
Hugo Pereira Brito 998c551cf3 fix(cloudwatch): NoneType object is not iterable (#6671) 2025-01-23 12:27:07 -05:00
Hugo Pereira Brito 9a332dcba1 chore(services): delete all comment headers (#6585) 2025-01-17 08:21:28 -05:00
Hugo Pereira Brito 166d9f8823 fix(apigatewayv2): managed exception NotFoundException (#6576) 2025-01-17 08:17:51 -05:00
Hugo Pereira BritoandMrCloudSec b1f02098ff feat(aws): include resource metadata in services from r* to s* (#6536) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2025-01-15 18:10:53 -05:00
Hugo Pereira BritoandSergio Garcia c5d23503bf feat(aws): include resource metadata in services from a* to b* (#6504) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-15 18:03:37 -05:00
Hugo Pereira Brito 20b8b0b24e feat: add resource metadata to emr_cluster_account_public_block_enabled (#6539) 2025-01-15 11:44:51 -05:00
Hugo Pereira BritoandSergio Garcia ee87f2676d feat(aws): include resource metadata in services from d* to e* (#6532) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2025-01-15 10:05:04 -05:00
Hugo Pereira Brito 8d4b0914a8 fix(aws): get firewall manager managed rule groups (#6119) 2024-12-10 15:34:22 -04:00
Hugo Pereira Brito 1ae3f89aab fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6108) 2024-12-10 13:42:13 -04:00
Hugo Pereira Brito bb34a932ff feat(docs): added link from app guide to app installation (#5987) 2024-12-02 12:22:24 -04:00
Hugo Pereira Brito 572d5a1f2e fix(wafv2): only list resources for regional Web ACLs (#5811) 2024-11-18 12:09:23 -04:00
Hugo Pereira BritoandSergio Garcia 7a711095cd feat(kinesis): add new check kinesis_stream_data_retention_period (#5547) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-14 12:01:01 -05:00
Hugo Pereira BritoandSergio Garcia c1b050b8b9 feat(firehose): add new check firehose_stream_encrypted_at_rest (#5635) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-14 10:27:17 -05:00