@sagentix-inc/evidence-collector 0.2.1 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/README.md +167 -6
  2. package/THIRD_PARTY_NOTICES.md +14 -14
  3. package/apps/sos-app/src/data/checks/aws.json +2 -2
  4. package/apps/sos-app/src/data/checks/checkov.json +59 -59
  5. package/apps/sos-app/src/data/checks/configmgr.json +45 -0
  6. package/apps/sos-app/src/data/checks/endpoint_central.json +45 -0
  7. package/apps/sos-app/src/data/checks/google_endpoints.json +39 -0
  8. package/apps/sos-app/src/data/checks/ivanti_mdm.json +51 -0
  9. package/apps/sos-app/src/data/checks/kubescape.json +1 -1
  10. package/apps/sos-app/src/data/checks/ninjaone.json +39 -0
  11. package/apps/sos-app/src/data/checks/prowler_aws.json +478 -464
  12. package/apps/sos-app/src/data/checks/prowler_azure.json +137 -137
  13. package/apps/sos-app/src/data/checks/prowler_cloudflare.json +2 -2
  14. package/apps/sos-app/src/data/checks/prowler_gcp.json +99 -92
  15. package/apps/sos-app/src/data/checks/prowler_github.json +2 -2
  16. package/apps/sos-app/src/data/checks/prowler_googleworkspace.json +2 -2
  17. package/apps/sos-app/src/data/checks/prowler_kubernetes.json +75 -75
  18. package/apps/sos-app/src/data/checks/prowler_m365.json +69 -69
  19. package/apps/sos-app/src/data/checks/prowler_okta.json +2 -2
  20. package/apps/sos-app/src/data/checks/workspace_one.json +45 -0
  21. package/apps/sos-app/src/data/fedramp_rules.json +1 -1
  22. package/collector/package.json +1 -1
  23. package/collector/src/agent.js +312 -0
  24. package/collector/src/channel.js +220 -0
  25. package/collector/src/cli.js +160 -89
  26. package/collector/src/release_keys.js +9 -0
  27. package/collector/src/report.js +300 -0
  28. package/collector/src/sources/aws/checks.js +4 -1
  29. package/collector/src/sources/azure/checks.js +4 -2
  30. package/collector/src/sources/configmgr.js +286 -0
  31. package/collector/src/sources/device_sources.js +11 -1
  32. package/collector/src/sources/endpoint_central.js +345 -0
  33. package/collector/src/sources/gcp/api.js +38 -2
  34. package/collector/src/sources/gcp.js +6 -4
  35. package/collector/src/sources/google_endpoints.js +171 -0
  36. package/collector/src/sources/ivanti_mdm.js +276 -0
  37. package/collector/src/sources/ninjaone.js +271 -0
  38. package/collector/src/sources/oauth.js +4 -2
  39. package/collector/src/sources/prowler.js +1 -1
  40. package/collector/src/sources/workspace_one.js +226 -0
  41. package/package.json +1 -1
package/apps/sos-app/src/data/checks/kubescape.json CHANGED
@@ -6,7 +6,7 @@
6
6
  ],
7
7
  "engine": {
8
8
  "name": "Kubescape",
9
- "version": "4.0.15",
9
+ "version": "4.0.16",
10
10
  "licence": "Apache-2.0",
11
11
  "rules": {
12
12
  "repo": "kubescape/regolibrary",
package/apps/sos-app/src/data/checks/ninjaone.json ADDED
@@ -0,0 +1,39 @@
1
+ {
2
+ "source": "ninjaone",
3
+ "title": "NinjaOne (Public API v2, API Services client with the Monitoring scope only)",
4
+ "readScopes": [
5
+ "A NinjaOne API Services (machine-to-machine) client app (Configuration > Apps > API > Client App IDs > Add) with the single scope Monitoring (\"grants read-only access to monitoring data and organization structure\") and the Client Credentials grant type. The collector asks /ws/oauth/token for scope=monitoring and reads GET /v2/devices and GET /v2/queries/computer-systems, /volumes (include=bl), /operating-systems and /device-health. The instance URL (https://app, us2, eu, ca or oc .ninjarmm.com) is NINJAONE_URL; the client id and secret are NINJAONE_CLIENT_ID and NINJAONE_CLIENT_SECRET."
6
+ ],
7
+ "checks": [
8
+ {
9
+ "id": "ninjaone.disk_encryption",
10
+ "title": "Each Windows workstation's C: volume is fully BitLocker-encrypted and protected",
11
+ "scope": "Every Windows device, from the volumes report with include=bl: C: bitLockerStatus conversionStatus FULLY_ENCRYPTED and protectionStatus PROTECTED passes; other states fail; UNKNOWN, no C: volume, Macs and Linux hosts are skipped.",
12
+ "evidenceType": "Configuration"
13
+ },
14
+ {
15
+ "id": "ninjaone.os_minimum",
16
+ "title": "Each device runs an OS at or above the given minimum version",
17
+ "scope": "Every device whose platform has a --ninjaone-min-os floor, from the operating-systems report (Windows as 10.0.<buildNumber>, others from the version in the OS name); without the option the check is skipped once.",
18
+ "evidenceType": "Configuration"
19
+ },
20
+ {
21
+ "id": "ninjaone.os_patches",
22
+ "title": "Each device has no failed OS patch and no more pending OS patches than allowed",
23
+ "scope": "Every device, from the device-health report: failedOSPatchesCount 0 and pendingOSPatchesCount at most --ninjaone-max-pending-patches (default 0). A device with no health row is skipped.",
24
+ "evidenceType": "Configuration"
25
+ },
26
+ {
27
+ "id": "ninjaone.last_contact",
28
+ "title": "Each device has contacted NinjaOne within the last 14 days",
29
+ "scope": "Every device, from lastContact in List devices; the window is --ninjaone-contact-days.",
30
+ "evidenceType": "Configuration"
31
+ },
32
+ {
33
+ "id": "ninjaone.approved",
34
+ "title": "Each device is approved for management in NinjaOne",
35
+ "scope": "Every device, from approvalStatus: APPROVED passes, PENDING or STAGED fails, DECOMMISSIONED is skipped.",
36
+ "evidenceType": "Configuration"
37
+ }
38
+ ]
39
+ }