prowler icon indicating copy to clipboard operation
prowler copied to clipboard

[Bug]: prowler azure is not scanning virtual machines in azure

Open anushaks579 opened this issue 1 year ago • 2 comments

Steps to Reproduce

Azure services for prowler

Expected behavior

prowler services by default it provide 4 services but its not included virtual machines , Is there any way we can scan azure virtual machines to get the open port details.

Actual Result with Screenshots or Logs

Azure services for prowler

How did you install Prowler?

From pip package (pip install prowler)

Environment Resource

azure Virtual machine

OS used

Linux ubuntu 22.04

Prowler version

v3.11.0

Pip version

3.5.6

Context

Please help in steps for prowler for azure in Linux machine to scan azure virtual machines.

anushaks579 avatar Dec 08 '23 10:12 anushaks579

Hi @anushaks579,

Yes, the azure provider is missing some checks and services, we would like to have it completed as soon as possible. If you can list which checks are you missing, apart from the vm open ports one, it would help us a lot (we can start from that point)

n4ch04 avatar Dec 11 '23 07:12 n4ch04

In the report prowler scans azure subscription for VMs it has to display in which VM port are open if its open it should display some warning message some thing like that because when all ports open its easy to hack the data. Also we need to add one check about the user who opened which port OR who created the network security group and access , log time like that in that report. Lack of Azure documentation compare to AWS prowler.

anushaks579 avatar Dec 21 '23 05:12 anushaks579

Hi @anushaks579 recently we've finished the CIS 2.0 and 2.1 for Azure including the following checks related to open ports:

  • network_rdp_internet_access_restricted
  • network_ssh_internet_access_restricted
  • network_watcher_enabled

What are your requirements about scanning virtual machines? Does those checks cover what you need? Please give it a try and let us know.

Thanks for using Prowler 🚀

jfagoagas avatar Apr 11 '24 09:04 jfagoagas

Closing the PR since the checks were already added.

sergargar avatar Apr 30 '24 10:04 sergargar