ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-10 05:24:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,237 Commits 579 Branches 224 Tags
7f03ef0e7eb17e2c7ec53ef9f9e0aece7cec852d
Commit Graph
97 Commits
Author SHA1 Message Date
Toni de la Fuente 0b9d3e39d4 Merge branch 'master' into master 2020-08-27 16:28:35 +02:00
Toni de la Fuente 1d4563f60d Added extra799 and extra7100 to group extras 
Added extra799 and extra7100 to group extras
 2020-08-27 16:23:08 +02:00
Toni de la Fuente 553faf72ec Added [extra736] Check exposed KMS keys to group internet-exposed 2020-08-26 16:57:20 +02:00
Toni de la Fuente 33a53663db Added [extra799] Check if Security Hub is enabled and its standard subscriptions 2020-08-25 19:54:57 +02:00
Toni de la Fuente ca471700c2 Added [extra798] Check if Lambda functions have resource-based policy set as Public 2020-08-25 19:06:06 +02:00
Nick Malcolm ba87f437d5 This check will identify IAM Policies which allow an IAM Principal (a Role or User) to escalate their privileges due to insecure STS permissions. It is AWS best practice to only use explicitly defined Resources (Role ARNs) for an sts:AssumeRole action. 
See more: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.html#roles-usingrole-createpolicy
 2020-08-20 21:08:00 +12:00
Jon Jozwiak 022df45ae1 Adding EKS checks to eks-cis and extras group 2020-08-03 08:02:21 -05:00
gchib 04fae53da5 Add additional GDPR checks 
Added checks:
check11,check110,check111,check112,check116,check120,check122,check13,check14,check15,check16,check17,check18,check19,check28,check29,check31,check310,check311,check312,check313,check314,check32,check33,check34,check36,check37,check38,check41,check42,extra711,extra72,extra723,extra730,extra739,extra76,extra763,extra778,extra78,extra792
 2020-07-24 22:26:09 +05:30
Toni de la Fuente 19c68980fe fix typo on title group18 2020-07-24 15:18:46 +02:00
Toni de la Fuente 19bd281c78 Added group18 for ISO27001 thanks to @gchib297 issue #637 2020-07-24 15:16:35 +02:00
gchib a8026ba3c3 Add additional HIPAA checks 
Added checks:
check112,check13,check15,check16,check17,check18,check19,check21,check24,check28,check31,check310,check311,check312,check313,check314,check32,check33,check34,check35,check36,check37,check39,extra792.
 2020-07-23 19:10:17 +05:30
jonjozwiak 6ba9be46fb Adding check for SSL load balancers 2020-07-17 09:59:53 -05:00
Toni de la Fuente 206b675179 Added group for pci-dss as reference 2020-07-13 17:33:07 +02:00
Toni de la Fuente 84060db013 Added group internet-exposed 2020-06-16 18:01:14 +02:00
Toni de la Fuente 69e2e19e7d Added extra791 and extra792 to group extras 2020-05-27 09:37:10 +02:00
Toni de la Fuente f065beb93b Fixed title in group16_trustboundaries 2020-04-14 23:57:55 +02:00
Toni de la Fuente 8f83da985a PR #511 2020-04-08 18:00:54 +02:00
Toni de la Fuente effc3eb14d Added new checks to group extras 2020-04-08 14:06:11 +02:00
Toni de la Fuente 6ea37b05ca Improvements and new checks for elasticsearch 2020-04-08 14:00:12 +02:00
Toni de la Fuente bd432fed92 New check for Metadata Service Version 2 #413 2020-04-07 16:46:46 +02:00
Toni de la Fuente 8c18533752 Updated check titles 2020-03-25 17:18:43 +01:00
Toni de la Fuente b4aaf0b81e Added initial PCI group without checks yet, issue #296 2020-03-25 10:53:55 +01:00
Toni de la Fuente f809f2fa1d Modify group names header to clarify what is CIS only 2020-03-25 10:53:05 +01:00
Toni de la Fuente 568bba4c38 Add Elasticsearch checks issue #521 2020-03-24 23:46:11 +01:00
Toni de la Fuente db3ac2361c Merge branch 'master' into checks/find_security_groups_with_wide_open_non_RFC1918_IPv4 2020-03-23 14:48:05 +01:00
Toni de la Fuente 30941c355c Added extra777 - Security Groups with too many rules @renuez 2020-03-23 14:39:23 +01:00
Philipp Zeuner f149fb7535 Refactored check name to check_extra778 2020-03-08 08:15:20 +01:00
Marcel Beck 95cb26fb2b fix: Enable check extra776 in extra group 2020-03-04 07:27:40 +01:00
Philipp Zeuner 6ea863ac3b Initial commit 2020-03-01 20:26:51 +01:00
Kasprzykowski 40985212ab check_extra775 added | group7_extras and group11_secrets updated 2020-02-21 09:24:13 -05:00
Kasprzykowski a1d26b44c3 check_extra999 added and group7_extras updated 2020-02-21 09:05:33 -05:00
jonnyCodev 2abe36083f Update group7_extras 2020-02-05 15:55:09 +02:00
jonnyCodev a824e064b3 Check if user have unused console login 2020-02-04 14:39:42 +02:00
Toni de la Fuente 8b5733b5fe Merge branch 'master' into issue-163-CloudFront-WAF 2020-01-27 17:59:13 -05:00
Toni de la Fuente 278e382f9a Update group7_extras 2020-01-27 17:58:04 -05:00
Toni de la Fuente e65a11bc27 Merge branch 'master' into prowler_eip_check 2020-01-27 17:44:59 -05:00
C.J 9fc0f6c61c Remove check 766, dupe of check 765 2020-01-25 15:29:05 -05:00
Fayez Barbari 2f17cfbc30 Check if CloudFront is using a WAF 2020-01-20 17:14:52 -06:00
root 4c1d1887e4 Add Prowler check for unused elastic IP addresses 2020-01-10 15:47:15 -05:00
Toni de la Fuente d2b3e5ecdc Added new checks to extras group 2019-12-17 10:44:38 +01:00
Toni de la Fuente 7b5ece8007 New check IAM Access Analyzer issue #428 2019-12-03 15:58:19 +01:00
Toni de la Fuente fe65eaf373 New check ECS scan on push issue #427 2019-12-03 15:27:09 +01:00
Nimrod Kor b61af3a9eb Add ECS task definition environment variables check 
(cherry picked from commit 662f287dd6)
 2019-11-21 12:44:09 -08:00
Toni de la Fuente 961b79a4aa Added extra767 for CloudFront field level encryption issue #425 2019-11-21 17:48:34 +01:00
Toni de la Fuente 264b84ae2a Added check_extra765 ECR scanning issue #406 2019-11-21 00:52:18 +01:00
zfLQ2qx2 3a893889b6 Misc prowler fixes 2019-11-13 22:49:32 -05:00
Mr. Secure 2c531a2ffc add check for unsupported lambda runtimes 2019-10-21 09:28:00 -05:00
Jerome Caffet 66c59ea1f7 add extra761 EBS default encryption 2019-10-09 14:33:46 +02:00
Toni de la Fuente ea6d9c93fc Integration with Yelp detect-secrets 2019-06-25 08:28:50 -04:00
gabrielsoltz 40117ed5dd new ec2 age checks 2019-06-06 19:22:26 +01:00