@sagentix-inc/evidence-collector 0.3.1 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/apps/sos-app/src/data/checks/prowler_aws.json +1455 -34
- package/apps/sos-app/src/data/checks/prowler_azure.json +497 -0
- package/apps/sos-app/src/data/checks/prowler_cloudflare.json +205 -1
- package/apps/sos-app/src/data/checks/prowler_gcp.json +175 -0
- package/apps/sos-app/src/data/checks/prowler_github.json +191 -1
- package/apps/sos-app/src/data/checks/prowler_googleworkspace.json +457 -1
- package/apps/sos-app/src/data/checks/prowler_kubernetes.json +133 -0
- package/apps/sos-app/src/data/checks/prowler_m365.json +574 -0
- package/apps/sos-app/src/data/checks/prowler_okta.json +205 -1
- package/collector/package.json +1 -1
- package/collector/src/sources/prowler.js +80 -25
- package/package.json +1 -1
|
@@ -16,5 +16,461 @@
|
|
|
16
16
|
"url": "https://github.com/prowler-cloud/prowler"
|
|
17
17
|
},
|
|
18
18
|
"provider": "googleworkspace",
|
|
19
|
-
"checks": [
|
|
19
|
+
"checks": [
|
|
20
|
+
{
|
|
21
|
+
"id": "prowler.googleworkspace.additionalservices_external_groups_disabled",
|
|
22
|
+
"title": "Access to external Google Groups is off for everyone",
|
|
23
|
+
"scope": "Prowler 5.47.0 check additionalservices_external_groups_disabled (Google Workspace additionalservices, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
24
|
+
"evidenceType": "Configuration",
|
|
25
|
+
"severity": "medium"
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
"id": "prowler.googleworkspace.calendar_external_invitations_warning",
|
|
29
|
+
"title": "External invitation warnings are enabled for Google Calendar",
|
|
30
|
+
"scope": "Prowler 5.47.0 check calendar_external_invitations_warning (Google Workspace calendar, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
31
|
+
"evidenceType": "Configuration",
|
|
32
|
+
"severity": "medium"
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"id": "prowler.googleworkspace.calendar_external_sharing_primary_calendar",
|
|
36
|
+
"title": "External sharing for primary calendars is restricted to free/busy only",
|
|
37
|
+
"scope": "Prowler 5.47.0 check calendar_external_sharing_primary_calendar (Google Workspace calendar, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
38
|
+
"evidenceType": "Configuration",
|
|
39
|
+
"severity": "medium"
|
|
40
|
+
},
|
|
41
|
+
{
|
|
42
|
+
"id": "prowler.googleworkspace.calendar_external_sharing_secondary_calendar",
|
|
43
|
+
"title": "External sharing for secondary calendars is restricted to free/busy only",
|
|
44
|
+
"scope": "Prowler 5.47.0 check calendar_external_sharing_secondary_calendar (Google Workspace calendar, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
45
|
+
"evidenceType": "Configuration",
|
|
46
|
+
"severity": "medium"
|
|
47
|
+
},
|
|
48
|
+
{
|
|
49
|
+
"id": "prowler.googleworkspace.chat_apps_installation_disabled",
|
|
50
|
+
"title": "Chat apps installation is disabled for users",
|
|
51
|
+
"scope": "Prowler 5.47.0 check chat_apps_installation_disabled (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
52
|
+
"evidenceType": "Configuration",
|
|
53
|
+
"severity": "medium"
|
|
54
|
+
},
|
|
55
|
+
{
|
|
56
|
+
"id": "prowler.googleworkspace.chat_external_file_sharing_disabled",
|
|
57
|
+
"title": "External file sharing in Chat is set to no files",
|
|
58
|
+
"scope": "Prowler 5.47.0 check chat_external_file_sharing_disabled (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
59
|
+
"evidenceType": "Configuration",
|
|
60
|
+
"severity": "medium"
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"id": "prowler.googleworkspace.chat_external_messaging_restricted",
|
|
64
|
+
"title": "External Chat messaging is restricted to allowed domains",
|
|
65
|
+
"scope": "Prowler 5.47.0 check chat_external_messaging_restricted (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
66
|
+
"evidenceType": "Configuration",
|
|
67
|
+
"severity": "medium"
|
|
68
|
+
},
|
|
69
|
+
{
|
|
70
|
+
"id": "prowler.googleworkspace.chat_external_spaces_restricted",
|
|
71
|
+
"title": "External spaces in Chat are restricted to allowed domains",
|
|
72
|
+
"scope": "Prowler 5.47.0 check chat_external_spaces_restricted (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
73
|
+
"evidenceType": "Configuration",
|
|
74
|
+
"severity": "medium"
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
"id": "prowler.googleworkspace.chat_incoming_webhooks_disabled",
|
|
78
|
+
"title": "Incoming webhooks in Chat are disabled for users",
|
|
79
|
+
"scope": "Prowler 5.47.0 check chat_incoming_webhooks_disabled (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
80
|
+
"evidenceType": "Configuration",
|
|
81
|
+
"severity": "medium"
|
|
82
|
+
},
|
|
83
|
+
{
|
|
84
|
+
"id": "prowler.googleworkspace.chat_internal_file_sharing_disabled",
|
|
85
|
+
"title": "Internal file sharing in Chat is set to no files",
|
|
86
|
+
"scope": "Prowler 5.47.0 check chat_internal_file_sharing_disabled (Google Workspace chat, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
87
|
+
"evidenceType": "Configuration",
|
|
88
|
+
"severity": "low"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"id": "prowler.googleworkspace.directory_super_admin_count",
|
|
92
|
+
"title": "Domain has 2-4 super administrators",
|
|
93
|
+
"scope": "Prowler 5.47.0 check directory_super_admin_count (Google Workspace directory, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
94
|
+
"evidenceType": "Configuration",
|
|
95
|
+
"severity": "high"
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
"id": "prowler.googleworkspace.directory_super_admin_only_admin_roles",
|
|
99
|
+
"title": "All super admin accounts are used only for super admin activities",
|
|
100
|
+
"scope": "Prowler 5.47.0 check directory_super_admin_only_admin_roles (Google Workspace directory, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
101
|
+
"evidenceType": "Configuration",
|
|
102
|
+
"severity": "high"
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
"id": "prowler.googleworkspace.drive_access_checker_recipients_only",
|
|
106
|
+
"title": "Drive Access Checker is configured to recipients only",
|
|
107
|
+
"scope": "Prowler 5.47.0 check drive_access_checker_recipients_only (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
108
|
+
"evidenceType": "Configuration",
|
|
109
|
+
"severity": "medium"
|
|
110
|
+
},
|
|
111
|
+
{
|
|
112
|
+
"id": "prowler.googleworkspace.drive_desktop_access_disabled",
|
|
113
|
+
"title": "Google Drive for desktop is disabled",
|
|
114
|
+
"scope": "Prowler 5.47.0 check drive_desktop_access_disabled (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
115
|
+
"evidenceType": "Configuration",
|
|
116
|
+
"severity": "medium"
|
|
117
|
+
},
|
|
118
|
+
{
|
|
119
|
+
"id": "prowler.googleworkspace.drive_external_sharing_warn_users",
|
|
120
|
+
"title": "Users are warned when sharing files outside the domain",
|
|
121
|
+
"scope": "Prowler 5.47.0 check drive_external_sharing_warn_users (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
122
|
+
"evidenceType": "Configuration",
|
|
123
|
+
"severity": "medium"
|
|
124
|
+
},
|
|
125
|
+
{
|
|
126
|
+
"id": "prowler.googleworkspace.drive_internal_users_distribute_content",
|
|
127
|
+
"title": "Only internal users can distribute content outside the organization",
|
|
128
|
+
"scope": "Prowler 5.47.0 check drive_internal_users_distribute_content (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
129
|
+
"evidenceType": "Configuration",
|
|
130
|
+
"severity": "medium"
|
|
131
|
+
},
|
|
132
|
+
{
|
|
133
|
+
"id": "prowler.googleworkspace.drive_publishing_files_disabled",
|
|
134
|
+
"title": "Publishing Drive files to the web is disabled",
|
|
135
|
+
"scope": "Prowler 5.47.0 check drive_publishing_files_disabled (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
136
|
+
"evidenceType": "Configuration",
|
|
137
|
+
"severity": "medium"
|
|
138
|
+
},
|
|
139
|
+
{
|
|
140
|
+
"id": "prowler.googleworkspace.drive_shared_drive_creation_allowed",
|
|
141
|
+
"title": "Users are allowed to create new shared drives",
|
|
142
|
+
"scope": "Prowler 5.47.0 check drive_shared_drive_creation_allowed (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
143
|
+
"evidenceType": "Configuration",
|
|
144
|
+
"severity": "medium"
|
|
145
|
+
},
|
|
146
|
+
{
|
|
147
|
+
"id": "prowler.googleworkspace.drive_shared_drive_disable_download_print_copy",
|
|
148
|
+
"title": "Viewers and commenters cannot download, print, or copy shared drive files",
|
|
149
|
+
"scope": "Prowler 5.47.0 check drive_shared_drive_disable_download_print_copy (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
150
|
+
"evidenceType": "Configuration",
|
|
151
|
+
"severity": "medium"
|
|
152
|
+
},
|
|
153
|
+
{
|
|
154
|
+
"id": "prowler.googleworkspace.drive_shared_drive_managers_cannot_override",
|
|
155
|
+
"title": "Shared drive managers cannot override shared drive settings",
|
|
156
|
+
"scope": "Prowler 5.47.0 check drive_shared_drive_managers_cannot_override (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
157
|
+
"evidenceType": "Configuration",
|
|
158
|
+
"severity": "medium"
|
|
159
|
+
},
|
|
160
|
+
{
|
|
161
|
+
"id": "prowler.googleworkspace.drive_shared_drive_members_only_access",
|
|
162
|
+
"title": "Shared drive file access is restricted to members only",
|
|
163
|
+
"scope": "Prowler 5.47.0 check drive_shared_drive_members_only_access (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
164
|
+
"evidenceType": "Configuration",
|
|
165
|
+
"severity": "medium"
|
|
166
|
+
},
|
|
167
|
+
{
|
|
168
|
+
"id": "prowler.googleworkspace.drive_sharing_allowlisted_domains",
|
|
169
|
+
"title": "Document sharing is restricted to allowlisted domains",
|
|
170
|
+
"scope": "Prowler 5.47.0 check drive_sharing_allowlisted_domains (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
171
|
+
"evidenceType": "Configuration",
|
|
172
|
+
"severity": "medium"
|
|
173
|
+
},
|
|
174
|
+
{
|
|
175
|
+
"id": "prowler.googleworkspace.drive_warn_sharing_with_allowlisted_domains",
|
|
176
|
+
"title": "Users are warned when sharing files with allowlisted domains",
|
|
177
|
+
"scope": "Prowler 5.47.0 check drive_warn_sharing_with_allowlisted_domains (Google Workspace drive, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
178
|
+
"evidenceType": "Configuration",
|
|
179
|
+
"severity": "medium"
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
"id": "prowler.googleworkspace.gmail_anomalous_attachment_protection_enabled",
|
|
183
|
+
"title": "Protection against anomalous attachment types in emails is enabled",
|
|
184
|
+
"scope": "Prowler 5.47.0 check gmail_anomalous_attachment_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
185
|
+
"evidenceType": "Configuration",
|
|
186
|
+
"severity": "medium"
|
|
187
|
+
},
|
|
188
|
+
{
|
|
189
|
+
"id": "prowler.googleworkspace.gmail_auto_forwarding_disabled",
|
|
190
|
+
"title": "Automatic forwarding options are disabled",
|
|
191
|
+
"scope": "Prowler 5.47.0 check gmail_auto_forwarding_disabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
192
|
+
"evidenceType": "Configuration",
|
|
193
|
+
"severity": "medium"
|
|
194
|
+
},
|
|
195
|
+
{
|
|
196
|
+
"id": "prowler.googleworkspace.gmail_comprehensive_mail_storage_enabled",
|
|
197
|
+
"title": "Comprehensive mail storage is enabled",
|
|
198
|
+
"scope": "Prowler 5.47.0 check gmail_comprehensive_mail_storage_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
199
|
+
"evidenceType": "Configuration",
|
|
200
|
+
"severity": "medium"
|
|
201
|
+
},
|
|
202
|
+
{
|
|
203
|
+
"id": "prowler.googleworkspace.gmail_domain_spoofing_protection_enabled",
|
|
204
|
+
"title": "Protection against domain spoofing based on similar domain names is enabled",
|
|
205
|
+
"scope": "Prowler 5.47.0 check gmail_domain_spoofing_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
206
|
+
"evidenceType": "Configuration",
|
|
207
|
+
"severity": "medium"
|
|
208
|
+
},
|
|
209
|
+
{
|
|
210
|
+
"id": "prowler.googleworkspace.gmail_employee_name_spoofing_protection_enabled",
|
|
211
|
+
"title": "Protection against spoofing of employee names is enabled",
|
|
212
|
+
"scope": "Prowler 5.47.0 check gmail_employee_name_spoofing_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
213
|
+
"evidenceType": "Configuration",
|
|
214
|
+
"severity": "medium"
|
|
215
|
+
},
|
|
216
|
+
{
|
|
217
|
+
"id": "prowler.googleworkspace.gmail_encrypted_attachment_protection_enabled",
|
|
218
|
+
"title": "Protection against encrypted attachments from untrusted senders is enabled",
|
|
219
|
+
"scope": "Prowler 5.47.0 check gmail_encrypted_attachment_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
220
|
+
"evidenceType": "Configuration",
|
|
221
|
+
"severity": "medium"
|
|
222
|
+
},
|
|
223
|
+
{
|
|
224
|
+
"id": "prowler.googleworkspace.gmail_enhanced_pre_delivery_scanning_enabled",
|
|
225
|
+
"title": "Enhanced pre-delivery message scanning is enabled",
|
|
226
|
+
"scope": "Prowler 5.47.0 check gmail_enhanced_pre_delivery_scanning_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
227
|
+
"evidenceType": "Configuration",
|
|
228
|
+
"severity": "medium"
|
|
229
|
+
},
|
|
230
|
+
{
|
|
231
|
+
"id": "prowler.googleworkspace.gmail_external_image_scanning_enabled",
|
|
232
|
+
"title": "Scanning of linked images for malicious content is enabled",
|
|
233
|
+
"scope": "Prowler 5.47.0 check gmail_external_image_scanning_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
234
|
+
"evidenceType": "Configuration",
|
|
235
|
+
"severity": "medium"
|
|
236
|
+
},
|
|
237
|
+
{
|
|
238
|
+
"id": "prowler.googleworkspace.gmail_groups_spoofing_protection_enabled",
|
|
239
|
+
"title": "Groups are protected from inbound emails spoofing your domain",
|
|
240
|
+
"scope": "Prowler 5.47.0 check gmail_groups_spoofing_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
241
|
+
"evidenceType": "Configuration",
|
|
242
|
+
"severity": "medium"
|
|
243
|
+
},
|
|
244
|
+
{
|
|
245
|
+
"id": "prowler.googleworkspace.gmail_inbound_domain_spoofing_protection_enabled",
|
|
246
|
+
"title": "Protection against inbound emails spoofing your domain is enabled",
|
|
247
|
+
"scope": "Prowler 5.47.0 check gmail_inbound_domain_spoofing_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
248
|
+
"evidenceType": "Configuration",
|
|
249
|
+
"severity": "medium"
|
|
250
|
+
},
|
|
251
|
+
{
|
|
252
|
+
"id": "prowler.googleworkspace.gmail_mail_delegation_disabled",
|
|
253
|
+
"title": "Mail delegation is disabled for users",
|
|
254
|
+
"scope": "Prowler 5.47.0 check gmail_mail_delegation_disabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
255
|
+
"evidenceType": "Configuration",
|
|
256
|
+
"severity": "medium"
|
|
257
|
+
},
|
|
258
|
+
{
|
|
259
|
+
"id": "prowler.googleworkspace.gmail_per_user_outbound_gateway_disabled",
|
|
260
|
+
"title": "Per-user outbound gateways are disabled",
|
|
261
|
+
"scope": "Prowler 5.47.0 check gmail_per_user_outbound_gateway_disabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
262
|
+
"evidenceType": "Configuration",
|
|
263
|
+
"severity": "medium"
|
|
264
|
+
},
|
|
265
|
+
{
|
|
266
|
+
"id": "prowler.googleworkspace.gmail_pop_imap_access_disabled",
|
|
267
|
+
"title": "POP and IMAP access is disabled for all users",
|
|
268
|
+
"scope": "Prowler 5.47.0 check gmail_pop_imap_access_disabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
269
|
+
"evidenceType": "Configuration",
|
|
270
|
+
"severity": "medium"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"id": "prowler.googleworkspace.gmail_script_attachment_protection_enabled",
|
|
274
|
+
"title": "Protection against attachments with scripts from untrusted senders is enabled",
|
|
275
|
+
"scope": "Prowler 5.47.0 check gmail_script_attachment_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
276
|
+
"evidenceType": "Configuration",
|
|
277
|
+
"severity": "medium"
|
|
278
|
+
},
|
|
279
|
+
{
|
|
280
|
+
"id": "prowler.googleworkspace.gmail_shortener_scanning_enabled",
|
|
281
|
+
"title": "Identification of links behind shortened URLs is enabled",
|
|
282
|
+
"scope": "Prowler 5.47.0 check gmail_shortener_scanning_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
283
|
+
"evidenceType": "Configuration",
|
|
284
|
+
"severity": "medium"
|
|
285
|
+
},
|
|
286
|
+
{
|
|
287
|
+
"id": "prowler.googleworkspace.gmail_unauthenticated_email_protection_enabled",
|
|
288
|
+
"title": "Protection against any unauthenticated emails is enabled",
|
|
289
|
+
"scope": "Prowler 5.47.0 check gmail_unauthenticated_email_protection_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
290
|
+
"evidenceType": "Configuration",
|
|
291
|
+
"severity": "medium"
|
|
292
|
+
},
|
|
293
|
+
{
|
|
294
|
+
"id": "prowler.googleworkspace.gmail_untrusted_link_warnings_enabled",
|
|
295
|
+
"title": "Warning prompt for clicks on untrusted domain links is enabled",
|
|
296
|
+
"scope": "Prowler 5.47.0 check gmail_untrusted_link_warnings_enabled (Google Workspace gmail, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
297
|
+
"evidenceType": "Configuration",
|
|
298
|
+
"severity": "medium"
|
|
299
|
+
},
|
|
300
|
+
{
|
|
301
|
+
"id": "prowler.googleworkspace.groups_creation_restricted",
|
|
302
|
+
"title": "Group creation is restricted to admins with no external members or incoming email",
|
|
303
|
+
"scope": "Prowler 5.47.0 check groups_creation_restricted (Google Workspace groups, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
304
|
+
"evidenceType": "Configuration",
|
|
305
|
+
"severity": "medium"
|
|
306
|
+
},
|
|
307
|
+
{
|
|
308
|
+
"id": "prowler.googleworkspace.groups_external_access_restricted",
|
|
309
|
+
"title": "Accessing groups from outside the organization is set to private",
|
|
310
|
+
"scope": "Prowler 5.47.0 check groups_external_access_restricted (Google Workspace groups, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
311
|
+
"evidenceType": "Configuration",
|
|
312
|
+
"severity": "medium"
|
|
313
|
+
},
|
|
314
|
+
{
|
|
315
|
+
"id": "prowler.googleworkspace.groups_view_conversations_restricted",
|
|
316
|
+
"title": "Default permission to view conversations is set to all group members",
|
|
317
|
+
"scope": "Prowler 5.47.0 check groups_view_conversations_restricted (Google Workspace groups, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
318
|
+
"evidenceType": "Configuration",
|
|
319
|
+
"severity": "medium"
|
|
320
|
+
},
|
|
321
|
+
{
|
|
322
|
+
"id": "prowler.googleworkspace.marketplace_apps_access_restricted",
|
|
323
|
+
"title": "Users access to Google Workspace Marketplace apps is restricted",
|
|
324
|
+
"scope": "Prowler 5.47.0 check marketplace_apps_access_restricted (Google Workspace marketplace, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
325
|
+
"evidenceType": "Configuration",
|
|
326
|
+
"severity": "medium"
|
|
327
|
+
},
|
|
328
|
+
{
|
|
329
|
+
"id": "prowler.googleworkspace.rules_admin_privilege_granted_alert_configured",
|
|
330
|
+
"title": "User granted Admin privilege alert rule is configured",
|
|
331
|
+
"scope": "Prowler 5.47.0 check rules_admin_privilege_granted_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
332
|
+
"evidenceType": "Configuration",
|
|
333
|
+
"severity": "medium"
|
|
334
|
+
},
|
|
335
|
+
{
|
|
336
|
+
"id": "prowler.googleworkspace.rules_gmail_employee_spoofing_alert_configured",
|
|
337
|
+
"title": "Gmail potential employee spoofing alert rule is configured",
|
|
338
|
+
"scope": "Prowler 5.47.0 check rules_gmail_employee_spoofing_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
339
|
+
"evidenceType": "Configuration",
|
|
340
|
+
"severity": "medium"
|
|
341
|
+
},
|
|
342
|
+
{
|
|
343
|
+
"id": "prowler.googleworkspace.rules_government_backed_attacks_alert_configured",
|
|
344
|
+
"title": "Government-backed attacks alert rule is configured",
|
|
345
|
+
"scope": "Prowler 5.47.0 check rules_government_backed_attacks_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
346
|
+
"evidenceType": "Configuration",
|
|
347
|
+
"severity": "high"
|
|
348
|
+
},
|
|
349
|
+
{
|
|
350
|
+
"id": "prowler.googleworkspace.rules_leaked_password_alert_configured",
|
|
351
|
+
"title": "Leaked password alert rule is configured",
|
|
352
|
+
"scope": "Prowler 5.47.0 check rules_leaked_password_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
353
|
+
"evidenceType": "Configuration",
|
|
354
|
+
"severity": "medium"
|
|
355
|
+
},
|
|
356
|
+
{
|
|
357
|
+
"id": "prowler.googleworkspace.rules_password_changed_alert_configured",
|
|
358
|
+
"title": "User's password changed alert rule is configured",
|
|
359
|
+
"scope": "Prowler 5.47.0 check rules_password_changed_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
360
|
+
"evidenceType": "Configuration",
|
|
361
|
+
"severity": "medium"
|
|
362
|
+
},
|
|
363
|
+
{
|
|
364
|
+
"id": "prowler.googleworkspace.rules_suspicious_activity_suspension_alert_configured",
|
|
365
|
+
"title": "User suspended due to suspicious activity alert rule is configured",
|
|
366
|
+
"scope": "Prowler 5.47.0 check rules_suspicious_activity_suspension_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
367
|
+
"evidenceType": "Configuration",
|
|
368
|
+
"severity": "high"
|
|
369
|
+
},
|
|
370
|
+
{
|
|
371
|
+
"id": "prowler.googleworkspace.rules_suspicious_login_alert_configured",
|
|
372
|
+
"title": "Suspicious login alert rule is configured",
|
|
373
|
+
"scope": "Prowler 5.47.0 check rules_suspicious_login_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
374
|
+
"evidenceType": "Configuration",
|
|
375
|
+
"severity": "low"
|
|
376
|
+
},
|
|
377
|
+
{
|
|
378
|
+
"id": "prowler.googleworkspace.rules_suspicious_programmatic_login_alert_configured",
|
|
379
|
+
"title": "Suspicious programmatic login alert rule is configured",
|
|
380
|
+
"scope": "Prowler 5.47.0 check rules_suspicious_programmatic_login_alert_configured (Google Workspace rules, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
381
|
+
"evidenceType": "Configuration",
|
|
382
|
+
"severity": "low"
|
|
383
|
+
},
|
|
384
|
+
{
|
|
385
|
+
"id": "prowler.googleworkspace.security_2sv_enforced",
|
|
386
|
+
"title": "2-Step Verification is enforced for all users",
|
|
387
|
+
"scope": "Prowler 5.47.0 check security_2sv_enforced (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
388
|
+
"evidenceType": "Configuration",
|
|
389
|
+
"severity": "high"
|
|
390
|
+
},
|
|
391
|
+
{
|
|
392
|
+
"id": "prowler.googleworkspace.security_2sv_hardware_keys_admins",
|
|
393
|
+
"title": "Hardware security keys are required for 2-Step Verification",
|
|
394
|
+
"scope": "Prowler 5.47.0 check security_2sv_hardware_keys_admins (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
395
|
+
"evidenceType": "Configuration",
|
|
396
|
+
"severity": "high"
|
|
397
|
+
},
|
|
398
|
+
{
|
|
399
|
+
"id": "prowler.googleworkspace.security_advanced_protection_configured",
|
|
400
|
+
"title": "Advanced Protection Program is configured",
|
|
401
|
+
"scope": "Prowler 5.47.0 check security_advanced_protection_configured (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
402
|
+
"evidenceType": "Configuration",
|
|
403
|
+
"severity": "high"
|
|
404
|
+
},
|
|
405
|
+
{
|
|
406
|
+
"id": "prowler.googleworkspace.security_app_access_restricted",
|
|
407
|
+
"title": "Application access to Google services is restricted",
|
|
408
|
+
"scope": "Prowler 5.47.0 check security_app_access_restricted (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
409
|
+
"evidenceType": "Configuration",
|
|
410
|
+
"severity": "high"
|
|
411
|
+
},
|
|
412
|
+
{
|
|
413
|
+
"id": "prowler.googleworkspace.security_dlp_drive_rules_configured",
|
|
414
|
+
"title": "DLP policies for Google Drive are configured",
|
|
415
|
+
"scope": "Prowler 5.47.0 check security_dlp_drive_rules_configured (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
416
|
+
"evidenceType": "Configuration",
|
|
417
|
+
"severity": "medium"
|
|
418
|
+
},
|
|
419
|
+
{
|
|
420
|
+
"id": "prowler.googleworkspace.security_internal_apps_trusted",
|
|
421
|
+
"title": "Internal apps can access Google Workspace APIs",
|
|
422
|
+
"scope": "Prowler 5.47.0 check security_internal_apps_trusted (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
423
|
+
"evidenceType": "Configuration",
|
|
424
|
+
"severity": "medium"
|
|
425
|
+
},
|
|
426
|
+
{
|
|
427
|
+
"id": "prowler.googleworkspace.security_less_secure_apps_disabled",
|
|
428
|
+
"title": "Less secure app access is disabled",
|
|
429
|
+
"scope": "Prowler 5.47.0 check security_less_secure_apps_disabled (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
430
|
+
"evidenceType": "Configuration",
|
|
431
|
+
"severity": "medium"
|
|
432
|
+
},
|
|
433
|
+
{
|
|
434
|
+
"id": "prowler.googleworkspace.security_login_challenges_configured",
|
|
435
|
+
"title": "Login challenges are configured correctly",
|
|
436
|
+
"scope": "Prowler 5.47.0 check security_login_challenges_configured (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
437
|
+
"evidenceType": "Configuration",
|
|
438
|
+
"severity": "medium"
|
|
439
|
+
},
|
|
440
|
+
{
|
|
441
|
+
"id": "prowler.googleworkspace.security_password_policy_strong",
|
|
442
|
+
"title": "Password policy is configured for enhanced security",
|
|
443
|
+
"scope": "Prowler 5.47.0 check security_password_policy_strong (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
444
|
+
"evidenceType": "Configuration",
|
|
445
|
+
"severity": "medium"
|
|
446
|
+
},
|
|
447
|
+
{
|
|
448
|
+
"id": "prowler.googleworkspace.security_session_duration_limited",
|
|
449
|
+
"title": "Google session control is configured to 12 hours or less",
|
|
450
|
+
"scope": "Prowler 5.47.0 check security_session_duration_limited (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
451
|
+
"evidenceType": "Configuration",
|
|
452
|
+
"severity": "medium"
|
|
453
|
+
},
|
|
454
|
+
{
|
|
455
|
+
"id": "prowler.googleworkspace.security_super_admin_recovery_disabled",
|
|
456
|
+
"title": "Super Admin account recovery is disabled",
|
|
457
|
+
"scope": "Prowler 5.47.0 check security_super_admin_recovery_disabled (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
458
|
+
"evidenceType": "Configuration",
|
|
459
|
+
"severity": "high"
|
|
460
|
+
},
|
|
461
|
+
{
|
|
462
|
+
"id": "prowler.googleworkspace.security_user_recovery_enabled",
|
|
463
|
+
"title": "User account recovery is enabled",
|
|
464
|
+
"scope": "Prowler 5.47.0 check security_user_recovery_enabled (Google Workspace security, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
465
|
+
"evidenceType": "Configuration",
|
|
466
|
+
"severity": "medium"
|
|
467
|
+
},
|
|
468
|
+
{
|
|
469
|
+
"id": "prowler.googleworkspace.sites_service_disabled",
|
|
470
|
+
"title": "Service status for Google Sites is set to off",
|
|
471
|
+
"scope": "Prowler 5.47.0 check sites_service_disabled (Google Workspace sites, resource type NotDefined): one result per resource Prowler evaluates; shows one setting, not the whole control.",
|
|
472
|
+
"evidenceType": "Configuration",
|
|
473
|
+
"severity": "medium"
|
|
474
|
+
}
|
|
475
|
+
]
|
|
20
476
|
}
|