prowler
prowler copied to clipboard
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness....
### New feature motivation We would like to use Prowler for AWS compliance but Prowler doesn't include all of the relevant frameworks, specifically CIS AWS Compute Services Benchmark v1.0.0. ###...
The --python option enable prowler to be called by a python program to manipulate findings directly ### Context Hello, It would be nice to be able to use prowler from...
### Description This PR updates the regions for AWS services. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...
### Steps to Reproduce prowler aws -s iam -M csv ### Expected behavior After execution, it says: ``` Detailed results are in: - CSV: /shared/prepo/prowler/output/prowler-output-XXXXXX-20240430165309.csv ``` But that csv only...
### Steps to Reproduce 1. prowler azure --tenant-id --browser-auth --compliance cis_2.1_azure ### Expected behavior I expect all the checks from the CIS Azure V2.1.0 to be included in the CSV/XLSX...
### Steps to Reproduce 1. command: prowler kubernetes --context --namespace 2. Cloud provider: GCP/GKE 3. Environment: Single project in GCP 4. Error: [File: kubernetes_provider.py:151] [Module: kubernetes_provider] CRITICAL: ConfigException[141]: Service host/port...
### Description Handle non-existing Private IPs in Instances to solve `[KeyError[258]: 'PrivateIpAddress']` ### License By submitting this pull request, I confirm that my contribution is made under the terms of...
### New feature motivation All checks related to secret detection lead to a massive amount of false positives. This could get prevented if there would be a possibility to configure...
### Description New checks related with cognito service for aws are added: - [x] cognito_user_pool_temporary_password_expiration -> Cognito user pools temporary passwords set by administrators expire in 7 days or less...
### Description Improve default AWS mutelist with more ControlTower resources. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...