Xavier Garceau-Aranda

Results 64 comments of Xavier Garceau-Aranda

Will be interesting to see how https://github.com/kbroughton/azure_cis_scanner develops, especially with respect to IAM/AAD.

Looks like Azure API endpoints for RBAC/subscription resources allow specifying a RG, which should simplify adding this to the facades.

Thanks, will address this medium-term.

Leverage https://github.com/nccgroup/sadcloud to spin up a vulnerable infra dynamically.

This would be a good addition, although I'm not sure how this can / is done for python dependencies. The requirements file already separates libraries per provider so knowing how...

@klauern I'm told this would be possible with the setup file, and could be used in conjunction with pipx (instead of virtual environments). Then people could do `pipx install scoutsuite[aws]`...

1. Even though the environment (i.e. container) is reused, doesn't each execution/process run in a different memory space? I fail to see why they would be sharing memory. Or is...

> After I ripped out the existing caching functionality, I ran into further issues with asynchronous event handling. This is surprising considering dozens of other services (all but 7) don't...

@bprathap104 see https://github.com/nccgroup/ScoutSuite/pull/679 for a similar effort.

@darumaseye do you have an ETA for a working prototype?