Nimrod Kor
87fd299cdb
check_extra774 - revert changes
2020-03-22 11:14:03 +02:00
Nimrod Kor
75d66df940
extra774 - check correct date, consolidate files and fix report generation
2020-03-22 11:00:02 +02:00
Nimrod Kor
f80c2e28b7
check26 - on failure, output info and not failure
2020-03-22 10:53:47 +02:00
Nimrod Kor
168c71cd5f
check23 - on failure, output info and not failure
2020-03-22 10:53:33 +02:00
Nimrod Kor
7485ebdb43
Merge remote-tracking branch 'tony/master'
...
# Conflicts:
# .gitignore
2020-03-09 17:36:04 +02:00
jonjozwiak
8173c20941
Improve performance of check_extra742 by limiting to one AWS CLI call
2020-03-04 16:46:28 +02:00
Toni de la Fuente
c0d8258283
[new check] Check if ECR image scan found vulnerabilities in the newest image version
...
[new check] Check if ECR image scan found vulnerabilities in the newest image version
2020-03-03 23:06:44 +01:00
Toni de la Fuente
4646dbcd0b
Updated check_extra776 title
2020-03-03 23:04:09 +01:00
Marcel Beck
db260da8b0
feat: New check for ecr image scan findings
...
This will check if there is any ecr image with findings.
2020-03-03 22:53:26 +01:00
Marcel Beck
5257ce6c0b
docs: Fix typo
2020-02-28 17:58:10 +01:00
Marcel Beck
c9508c28b3
fix: check119 needs to ignore terminated instances
...
Terminated does not seem to have an instance profile. And its not
possible to start a terminated instance again.
2020-02-25 09:23:55 +01:00
Faraz Angabini
2321655503
fixed check numbers for 774,775
2020-02-22 22:16:59 -08:00
Kasprzykowski
40985212ab
check_extra775 added | group7_extras and group11_secrets updated
2020-02-21 09:24:13 -05:00
Kasprzykowski
a1d26b44c3
check_extra999 added and group7_extras updated
2020-02-21 09:05:33 -05:00
Christopher Morrow
4a1d4060ec
Check Extra 774 - Fixed bug - was checking account creation time instead of last logon date.
2020-02-20 15:11:13 -08:00
Toni de la Fuente
ca34590da0
Merge branch 'bugfix/check_11_check_access_keys_usage' of https://github.com/bridgecrewio/prowler into bridgecrewio-bugfix/check_11_check_access_keys_usage
2020-02-19 18:14:37 +01:00
Toni de la Fuente
44716cfab2
Merge pull request #486 from bridgecrewio/bugfix/mark_only_available_rds_instances_as_violating
...
Filter for only available rds instances
2020-02-19 18:11:43 +01:00
Toni de la Fuente
1f3aaa8c7b
Merge pull request #485 from bridgecrewio/bugfix/es_public_domains_filter_condition
...
Add conditions check for extra716
2020-02-19 18:09:37 +01:00
Toni de la Fuente
6213a7418c
Merge pull request #484 from bridgecrewio/bugfix/public_bucket_policy_check_for_conditions
...
Add conditions check for extra771
2020-02-19 18:08:02 +01:00
Toni de la Fuente
bf9ffc0485
Merge pull request #483 from bridgecrewio/bugfix/extra748_check_for_all_ports
...
Check extra748 should fail in case of all ports (0-65535) open
2020-02-19 17:58:17 +01:00
Nimrod Kor
e41e77ed78
Remove unnecessary print
...
(cherry picked from commit 72bb29f13c
2020-02-18 11:58:05 +02:00
Nimrod Kor
72bb29f13c
Remove unnecessary print
2020-02-18 11:57:52 +02:00
Nimrod Kor
a6516e4af8
Check 1.1 - check password access and access key usage
...
(cherry picked from commit f62cde1bf1
2020-02-18 11:36:57 +02:00
Nimrod Kor
f62cde1bf1
Check 1.1 - check password access and access key usage
2020-02-18 11:36:20 +02:00
Nimrod Kor
4fe575030b
Filter for only available rds instances
...
(cherry picked from commit 5a7356be3c
2020-02-18 10:48:58 +02:00
Nimrod Kor
178a34e40d
Add conditions check for extra716
...
(cherry picked from commit 2ec6696897
2020-02-18 10:48:25 +02:00
Nimrod Kor
5f3293af1e
Add conditions check for extra771
...
(cherry picked from commit 805b276578
2020-02-18 10:28:36 +02:00
Nimrod Kor
28a8ae7572
Check extra748 should fail in case of all ports (0-65535) open
2020-02-18 10:26:44 +02:00
Nimrod Kor
daa26ed14c
extra764 should also check for principal being AWS = "*"
2020-02-18 10:20:13 +02:00
Nimrod Kor
5a7356be3c
Filter for only available rds instances
2020-02-18 10:07:39 +02:00
Nimrod Kor
805b276578
Add conditions check for extra771
2020-02-18 10:01:23 +02:00
Nimrod Kor
2ec6696897
Add conditions check for extra716
2020-02-18 09:57:20 +02:00
Nimrod Kor
fc4f94543f
Merge remote-tracking branch 'tony/master'
...
# Conflicts:
# checks/check11
2020-02-18 09:36:49 +02:00
Toni de la Fuente
f99d35888a
Merge branch 'patch-1' of https://github.com/alphad05/prowler into alphad05-patch-1
2020-02-12 23:20:32 +01:00
Toni de la Fuente
35fc8cd0bf
Merge branch 'fix-check11' of https://github.com/bridgecrewio/prowler into bridgecrewio-fix-check11
2020-02-12 23:13:49 +01:00
jonnyCodev
447657140d
check if last_login_date is a valid date
2020-02-12 10:16:18 +02:00
alphad05
5069fd29f9
Associate VPCFlowLog with VPC
...
Associate VPCFlowLow with the VPC it is for to ensure accurate check. If there are multiple VPCs in a region and only some have VPC flow logs, current check will pass all VPCs even those without VPC flow logs.
2020-02-11 20:55:30 -08:00
Toni de la Fuente
274d02576f
Revert "Feature/handle get bucket policy error"
2020-02-10 23:31:02 +01:00
Toni de la Fuente
5cebebba97
Merge pull request #474 from bridgecrewio/feature/handle_get_bucket_policy_error
...
Feature/handle get bucket policy error
2020-02-10 23:29:04 +01:00
Toni de la Fuente
092dc84186
Merge pull request #454 from zfLQ2qx2/prowler_check119
...
Add command for check119
2020-02-10 22:56:34 +01:00
Toni de la Fuente
528e14d4cf
Update check119
...
updated to not scored
2020-02-10 22:55:57 +01:00
jonnyCodev
fe2d2b45bb
check root account access login and fail if used in the last day
2020-02-06 11:10:10 +02:00
Or Evron
74cbbddc5c
add text info in case of error occurred
...
(cherry picked from commit b28917beb7
2020-02-06 09:37:16 +02:00
Or Evron
e575fcd6b2
typo
...
(cherry picked from commit eb4f336428
2020-02-06 09:37:16 +02:00
Or Evron
aca93b7526
typo
...
(cherry picked from commit b89f67bba1
2020-02-06 09:37:16 +02:00
Or Evron
029c330ed1
fix check extra 764
...
(cherry picked from commit 0db690ad5f
2020-02-06 09:37:16 +02:00
jonnyCodev
f833d6a948
check root account access login and fail if used in the last day
2020-02-05 17:33:01 +02:00
jonnyCodev
af4c047896
check root account access login and fail if used in the last day
2020-02-05 17:21:17 +02:00
jonnyCodev
10a30b34f2
check root account access login and fail if used in the last day
2020-02-05 16:30:04 +02:00
jonnyCodev
2b4bb6e12e
check root account access login and fail if used in the last day
2020-02-05 13:49:41 +02:00
Nimrod Kor