ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-13 15:04:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
955 Commits 580 Branches 224 Tags
53ee538e0fbf3c470bdb7b5963e8da4dec4ce680
Commit Graph
955 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ngọ Anh Đức 53ee538e0f add $PROFILE_OPT to the CLI 2020-03-09 12:57:00 +07:00
Ngọ Anh Đức 3116adf86e Update check21 2020-03-09 12:46:16 +07:00
Ngọ Anh Đức 263926a53b Improve check21 
- Add ISLOGGING_STATUS, INCLUDEMANAGEMENTEVENTS_STATUS, READWRITETYPE_STATUS to check
- Remove ` --no-include-shadow-trails ` from CLI
2.1 Ensure CloudTrail is enabled in all regions (Scored):
Via CLI
1. ` aws cloudtrail describe-trails `
Ensure `IsMultiRegionTrail` is set to true
2. `aws cloudtrail get-trail-status --name <trailname shown in describe-trails>`
Ensure `IsLogging` is set to true
3. `aws cloudtrail get-event-selectors --trail-name <trailname shown in describetrails>`
Ensure there is at least one Event Selector for a Trail with `IncludeManagementEvents` set to
`true` and `ReadWriteType` set to `All`
 2020-03-09 12:44:23 +07:00
Toni de la Fuente 530bacac5b Merge pull request #510 from jonjozwiak/master 
Improve performance of check_extra742 by limiting to one AWS CLI call per region
 2020-03-05 21:33:26 +01:00
Toni de la Fuente 0b2c3c9f4f Merge pull request #509 from nexeck/new_check_ecr_findings 
fix: Enable check extra776 in extra group
 2020-03-05 21:26:34 +01:00
jonjozwiak 8173c20941 Improve performance of check_extra742 by limiting to one AWS CLI call 2020-03-04 16:46:28 +02:00
Marcel Beck 95cb26fb2b fix: Enable check extra776 in extra group 2020-03-04 07:27:40 +01:00
Toni de la Fuente c0d8258283 [new check] Check if ECR image scan found vulnerabilities in the newest image version 
[new check] Check if ECR image scan found vulnerabilities in the newest image version
 2020-03-03 23:06:44 +01:00
Toni de la Fuente 4646dbcd0b Updated check_extra776 title 2020-03-03 23:04:09 +01:00
Marcel Beck db260da8b0 feat: New check for ecr image scan findings 
This will check if there is any ecr image with findings.
 2020-03-03 22:53:26 +01:00
Toni de la Fuente 655aae7014 Merge pull request #499 from nexeck/check119_ignore_terminated 
fix: check119 needs to ignore terminated instances
 2020-02-28 18:51:52 +01:00
Marcel Beck 5257ce6c0b docs: Fix typo 2020-02-28 17:58:10 +01:00
Marcel Beck c9508c28b3 fix: check119 needs to ignore terminated instances 
Terminated does not seem to have an instance profile. And its not
possible to start a terminated instance again.
 2020-02-25 09:23:55 +01:00
Toni de la Fuente 50b10c4018 Minor fixes for checks 774 and 775 
Faraz minor fixes
 2020-02-24 18:53:20 +01:00
Faraz Angabini 2321655503 fixed check numbers for 774,775 2020-02-22 22:16:59 -08:00
Faraz Angabini 7358e9cd75 added .gitignore for .DS_Store 2020-02-22 22:12:44 -08:00
Faraz Angabini 020374b6f9 deleted .DS_Store 2020-02-22 22:10:52 -08:00
Toni de la Fuente 24cccf64d6 Merge branch 'fredski-github-master' 2.2.0 2020-02-21 15:32:47 +01:00
Toni de la Fuente 77f07cccf8 Merge branch 'master' of https://github.com/fredski-github/prowler into fredski-github-master 2020-02-21 15:31:23 +01:00
Kasprzykowski 40985212ab check_extra775 added | group7_extras and group11_secrets updated 2020-02-21 09:24:13 -05:00
Toni de la Fuente e461714226 Merge branch 'master' of https://github.com/toniblyx/prowler 2020-02-21 15:06:24 +01:00
Toni de la Fuente 11e5d44d9b version 2.2.0 2020-02-21 15:06:13 +01:00
Kasprzykowski a1d26b44c3 check_extra999 added and group7_extras updated 2020-02-21 09:05:33 -05:00
Toni de la Fuente 42af217524 Merge pull request #489 from TopherIsSwell/master 
Extra 774 - Fixed bug - Erroneously checking account creation date
 2020-02-21 14:44:21 +01:00
Christopher Morrow 4a1d4060ec Check Extra 774 - Fixed bug - was checking account creation time instead of last logon date. 2020-02-20 15:11:13 -08:00
Toni de la Fuente 0210c43b60 Merge branch 'bridgecrewio-bugfix/check_11_check_access_keys_usage' 
t push origin master:wq
 2020-02-19 18:19:37 +01:00
Toni de la Fuente ca34590da0 Merge branch 'bugfix/check_11_check_access_keys_usage' of https://github.com/bridgecrewio/prowler into bridgecrewio-bugfix/check_11_check_access_keys_usage 2020-02-19 18:14:37 +01:00
Toni de la Fuente 44716cfab2 Merge pull request #486 from bridgecrewio/bugfix/mark_only_available_rds_instances_as_violating 
Filter for only available rds instances
 2020-02-19 18:11:43 +01:00
Toni de la Fuente 1f3aaa8c7b Merge pull request #485 from bridgecrewio/bugfix/es_public_domains_filter_condition 
Add conditions check for extra716
 2020-02-19 18:09:37 +01:00
Toni de la Fuente 6213a7418c Merge pull request #484 from bridgecrewio/bugfix/public_bucket_policy_check_for_conditions 
Add conditions check for extra771
 2020-02-19 18:08:02 +01:00
Toni de la Fuente bf9ffc0485 Merge pull request #483 from bridgecrewio/bugfix/extra748_check_for_all_ports 
Check extra748 should fail in case of all ports (0-65535) open
 2020-02-19 17:58:17 +01:00
Toni de la Fuente fff605b356 Merge pull request #482 from bridgecrewio/bugfix/fix_extra_764_handle_all_aws 
Check extra764 should also check for principal being AWS = "*"
 2020-02-19 17:50:54 +01:00
Nimrod Kor e41e77ed78 Remove unnecessary print 
(cherry picked from commit 72bb29f13c)
 2020-02-18 11:58:05 +02:00
Nimrod Kor a6516e4af8 Check 1.1 - check password access and access key usage 
(cherry picked from commit f62cde1bf1)
 2020-02-18 11:36:57 +02:00
Nimrod Kor 4fe575030b Filter for only available rds instances 
(cherry picked from commit 5a7356be3c)
 2020-02-18 10:48:58 +02:00
Nimrod Kor 178a34e40d Add conditions check for extra716 
(cherry picked from commit 2ec6696897)
 2020-02-18 10:48:25 +02:00
Nimrod Kor 5f3293af1e Add conditions check for extra771 
(cherry picked from commit 805b276578)
 2020-02-18 10:28:36 +02:00
Nimrod Kor 28a8ae7572 Check extra748 should fail in case of all ports (0-65535) open 2020-02-18 10:26:44 +02:00
Nimrod Kor daa26ed14c extra764 should also check for principal being AWS = "*" 2020-02-18 10:20:13 +02:00
Toni de la Fuente 9bd54ca30e Fixed issue #378 2020-02-12 23:46:42 +01:00
Toni de la Fuente d832b11047 Merge branch 'alphad05-patch-1' 2020-02-12 23:22:44 +01:00
Toni de la Fuente f99d35888a Merge branch 'patch-1' of https://github.com/alphad05/prowler into alphad05-patch-1 2020-02-12 23:20:32 +01:00
Toni de la Fuente 4d683a7566 Merge branch 'bridgecrewio-fix-check11' 2020-02-12 23:15:30 +01:00
Toni de la Fuente 35fc8cd0bf Merge branch 'fix-check11' of https://github.com/bridgecrewio/prowler into bridgecrewio-fix-check11 2020-02-12 23:13:49 +01:00
jonnyCodev 447657140d check if last_login_date is a valid date 2020-02-12 10:16:18 +02:00
alphad05 5069fd29f9 Associate VPCFlowLog with VPC 
Associate VPCFlowLow with the VPC it is for to ensure accurate check. If there are multiple VPCs in a region and only some have VPC flow logs, current check will pass all VPCs even those without VPC flow logs.
 2020-02-11 20:55:30 -08:00
Toni de la Fuente b9a4f2c4e8 Merge pull request #479 from nickmalcolm/patch-1 
Remove `ses:sendemails`
 2020-02-11 23:46:46 +01:00
Nick Malcolm 0d1807bd33 Remove ses:sendemails 
Prowler doesn't need to send emails via SES. https://github.com/toniblyx/prowler/issues/124
 2020-02-12 11:38:23 +13:00
Toni de la Fuente a77d3b0361 Merge pull request #477 from toniblyx/revert-474-feature/handle_get_bucket_policy_error 
Revert "Feature/handle get bucket policy error"
 2020-02-10 23:31:23 +01:00
Toni de la Fuente 274d02576f Revert "Feature/handle get bucket policy error" 2020-02-10 23:31:02 +01:00