Andoni A.
f389ee3d1d
feat(m365): add entra_conditional_access_policy_enforce_sign_in_frequency security check
...
Move check from Azure provider to M365 provider and add device filter support
to the M365 entra service. The check validates that at least one Conditional
Access policy enforces sign-in frequency for non-corporate devices.
Changes:
- Add DeviceFilter and DeviceFilterMode models to M365 entra_service
- Add device_filter to Conditions model in M365 entra_service
- Update _get_conditional_access_policies to fetch device filter data
- Create check in M365 provider with proper M365 patterns
- Remove Azure check (wrong provider)
- Update CHANGELOG to reflect M365 provider
2026-01-29 14:00:34 +01:00
Andoni A.
2ceda9bac1
feat(azure): add entra_conditional_access_policy_enforce_sign_in_frequency security check
...
Add new security check entra_conditional_access_policy_enforce_sign_in_frequency for azure provider.
Includes check implementation, metadata, and unit tests.
2026-01-29 12:29:59 +01:00
mohd4adil and Daniel Barranquero
e97e31c7ca
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb ( #9692 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-29 09:13:34 +01:00
Kay Agahd and Daniel Barranquero
04e2d15dd2
feat(aws): add check rds_instance_extended_support ( #9865 )
...
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com >
2026-01-28 16:49:35 +01:00
Hugo Pereira Brito and Andoni Alonso
80c94faff9
feat(cloudflare): --account-id filter support ( #9894 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 14:18:55 +01:00
Hugo Pereira Brito and Andoni Alonso
6bb8dc6168
feat(cloudflare): extend dns and zone services check coverage ( #9426 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-27 13:48:26 +01:00
9e7ecb39fa
feat(aws): CloudTrail timeline for findings ( #9101 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-27 13:00:46 +01:00
3d6aa6c650
feat(m365): add defender_zap_for_teams_enabled security check ( #9838 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-26 17:34:10 +01:00
Andoni Alonso
7f4c02c738
feat(m365): add exchange_shared_mailbox_sign_in_disabled check ( #9828 )
2026-01-26 16:00:28 +01:00
Hugo Pereira Brito
5784592437
chore(azure): add vault parallelization in keyvault service ( #9876 )
2026-01-26 13:39:54 +01:00
Andoni Alonso and HugoPBrito
6cb0edf3e1
feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability ( #9840 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-22 15:12:24 +01:00
lydiavilchez and Daniel Barranquero
963ece9a0b
feat(gcp): add check to detect persistent disks on suspended VM instances ( #9747 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2026-01-22 13:38:30 +01:00
lydiavilchez
e76ecfdd4d
feat(gcp): add check for OS Login 2FA enabled at project level ( #9839 )
2026-01-21 15:12:01 +01:00
lydiavilchez
7b839d9f9e
feat(gcp): add check to enforce On Host Maintenance set to MIGRATE ( #9834 )
2026-01-21 09:37:21 +01:00
Hugo Pereira Brito and Andoni Alonso
aa24034ca7
feat(cloudflare): Add bot protection and configuration checks for zones ( #9425 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-16 12:06:52 +01:00
Josema Camacho and Andoni A.
847645543a
feat(attack-paths): update boto dependencies for catrography compatibility ( #9798 )
...
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com >
2026-01-15 13:00:54 +01:00
Hugo Pereira Brito and Andoni Alonso
d4bc6d7531
feat(cloudflare): Add TLS/SSL, records and email security checks for zones ( #9424 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2026-01-15 09:31:27 +01:00
Hugo Pereira Brito
1bf49747ad
chore(entra): enhance performance for user_registration_details and user mfa evaluation ( #9236 )
2026-01-14 14:01:51 +01:00
lydiavilchez
2cde4c939d
feat(gcp): add compute_snapshot_not_outdated check ( #9774 )
2026-01-14 12:35:29 +01:00
Hugo Pereira Brito
9844379d30
chore(cloudflare): rename zones service to zone ( #9792 )
2026-01-14 11:00:51 +01:00
Hugo Pereira Brito
b0eea61468
feat(cloudflare): Add Cloudflare provider with zones service and critical security checks ( #9423 )
2026-01-13 11:09:54 +01:00
429c591819
chore(aws): fixup AWS EC2 SG lib ( #9216 )
...
Co-authored-by: MrCloudSec <hello@mistercloudsec.com >
Co-authored-by: Sergio Garcia <sergargar1@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2026-01-12 13:47:37 +01:00
62a8540169
feat(gcp): add check to detect Compute Engine configuration changes ( #9698 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2026-01-12 12:22:15 +01:00
mchennai and Pepe Fagoaga
05466cff22
test: Add edge case test for s3_bucket_server_access_logging_enabled ( #9725 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2026-01-12 10:06:34 +01:00
Andoni Alonso
27492cbd42
fix(oci): validate credentials before scanning ( #9738 )
2026-01-08 15:47:26 +01:00
lydiavilchez
3e4458c8f3
feat(gcp): add check to detect VMs with multiple network interfaces ( #9702 )
2026-01-07 17:04:53 +01:00
lydiavilchez
e12e0dc1aa
feat(gcp): add check to ensure Compute Engine disk images are not publicly shared ( #9718 )
2026-01-07 15:05:36 +01:00
mchennai and pedrooot
4169611a6a
test(s3_bucket_server_access_logging_enabled): Add multi-bucket test ( #9716 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2026-01-05 11:34:57 +01:00
lydiavilchez and Daniel Barranquero
78ce4d8d9b
feat(gcp): add check to ensure Managed Instance Groups have autohealing enabled ( #9690 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-30 12:40:47 +01:00
lydiavilchez and Daniel Barranquero
144d59de45
feat(gcp): add check to ensure Managed Instance Groups are attached to load balancers ( #9695 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-29 14:16:11 +01:00
Pedro Martín and Pepe Fagoaga
8d1d041092
chore(aws): support new eusc partition ( #9649 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 12:28:10 +01:00
lydiavilchez and Daniel Barranquero
ad5095595c
feat(gcp): add compute check to ensure VM disks have auto-delete disabled ( #9604 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-23 10:57:11 +01:00
Ryan Nolette and Pepe Fagoaga
81e046ecf6
feat(bedrock): API pagination ( #9606 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 09:06:19 +01:00
Ryan Nolette and Pepe Fagoaga
0d363e6100
feat(sagemaker): parallelize tag listing for better performance ( #9609 )
...
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-23 08:51:16 +01:00
lydiavilchez and Daniel Barranquero
43875b6ae7
feat(gcp): add check to ensure Managed Instance Groups span multiple zones ( #9566 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-12-22 15:12:08 +01:00
57b9a2ea10
feat(aws): Update regions for AWS services ( #9631 )
...
Co-authored-by: prowler-bot <179230569+prowler-bot@users.noreply.github.com >
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2025-12-22 13:31:58 +01:00
Pedro Martín
3eb2595f6d
feat(api): support alibabacloud provider ( #9485 )
2025-12-22 12:46:50 +01:00
lydiavilchez
c83374d4ed
fix(gcp): store Cloud Storage bucket regions as lowercase ( #9567 )
2025-12-16 17:34:01 +01:00
Daniel Barranquero and Andoni Alonso
d4b90abd10
chore(mongodbatlas): store location as lowercase ( #9554 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-12-16 10:40:49 +01:00
lydiavilchez
bfce602859
fix(gcp-cloudstorage): handle VPC-blocked API calls as PASS ( #9478 )
2025-12-10 10:40:52 +01:00
dbdce98cf2
feat(alibaba): add Alibaba Cloud provider ( #9329 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-12-03 11:47:55 -05:00
lydiavilchez
3dadb264cc
feat(gcp): add check for VM instance deletion protection ( #9358 )
2025-12-01 13:20:32 +01:00
lydiavilchez and HugoPBrito
b2abdbeb60
feat(gcp-compute): add check to ensure VMs are not preemptible or spot ( #9342 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-11-28 12:49:19 +01:00
lydiavilchez
dc852b4595
feat(gcp-compute): add automatic restart check for VM instances ( #9271 )
2025-11-28 12:21:58 +01:00
Hugo Pereira Brito
1250f582a5
fix(check): custom check folder validation ( #9335 )
2025-11-28 12:19:47 +01:00
mattkeeler and HugoPBrito
dc9e91ac4e
fix(m365): Support multiple Exchange mailbox policies ( #9241 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-11-27 14:10:15 +01:00
Shafkat Rahman and Andoni Alonso
59f8dfe5ae
feat(github): add immutable releases check ( #9162 )
...
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com >
2025-11-27 13:40:15 +01:00
lydiavilchez and Daniel Barranquero
9d7b9c3327
feat(gcp): Add VPC Service Controls check for Cloud Storage ( #9256 )
...
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com >
2025-11-26 14:45:27 +01:00
Hugo Pereira Brito
880345bebe
fix(sharepoint): false positives on disabled external sharing ( #9298 )
2025-11-26 12:23:04 +01:00
Andoni Alonso
2198e461c9
feat(iac): use branch as region for IaC findings ( #9295 )
2025-11-24 17:00:06 +01:00
Andoni A.