Skip to content

Commit 7b92f22

Browse files
silverhacksilverhack
committed
updated findings
1 parent ddc4a8d commit 7b92f22

File tree

291 files changed

+35940
-34086
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

291 files changed

+35940
-34086
lines changed

‎rules/findings/Azure/Activity Alerts/CIS3.0/azure-activity-log-missing-alerts.json‎

Lines changed: 119 additions & 116 deletions
Original file line numberDiff line numberDiff line change
@@ -1,124 +1,127 @@
11
{
2-
"args": [
3-
4-
],
5-
"provider": "Azure",
6-
"serviceType": "Azure Alerts",
7-
"serviceName": "Subscription",
8-
"displayName": "_ARG_0_ missing alert",
9-
"description": "_ARG_0_ alert was missing. Consider to add and enable this alert.",
10-
"rationale": "_ARG_5_",
11-
"impact": null,
12-
"remediation": {
13-
"text": null,
14-
"code": {
15-
"powerShell": null,
16-
"iac": null,
17-
"terraform": null,
18-
"other": null
19-
}
20-
},
21-
"recommendation": null,
22-
"references": [
23-
"https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-log-collect",
24-
"_ARG_2_"
25-
],
26-
"compliance": [
27-
{
28-
"name": "CIS Microsoft Azure Foundations",
29-
"version": "_ARG_3_",
30-
"reference": "_ARG_4_",
31-
"profile": "Level 1"
32-
}
33-
],
34-
"level": "medium",
35-
"tags": [
36-
37-
],
38-
"rule": {
39-
"path": "az_monitor_alerts",
40-
"subPath": null,
41-
"selectCondition": {
42-
43-
},
44-
"query": [
45-
{
46-
"filter": [
47-
{
48-
"conditions": [
49-
[
50-
"operationName",
51-
"eq",
52-
"_ARG_1_"
53-
]
54-
]
55-
}
56-
]
57-
}
2+
"args": [
3+
584
],
59-
"shouldExist": "true",
60-
"returnObject": {
61-
"operationName": "_ARG_1_",
62-
"Status": "DoesNotExists"
5+
"provider": "Azure",
6+
"serviceType": "Azure Alerts",
7+
"serviceName": "Subscription",
8+
"displayName": "_ARG_0_ missing alert",
9+
"description": "_ARG_0_ alert was missing. Consider to add and enable this alert.",
10+
"rationale": "_ARG_5_",
11+
"impact": null,
12+
"remediation": {
13+
"text": null,
14+
"code": {
15+
"powerShell": null,
16+
"iac": null,
17+
"terraform": null,
18+
"other": null
19+
}
6320
},
64-
"removeIfNotExists": null
65-
},
66-
"output": {
67-
"html": {
68-
"data": {
69-
"properties": {
70-
71-
},
72-
"expandObject": null
73-
},
74-
"table": null,
75-
"decorate": [
76-
77-
],
78-
"emphasis": [
21+
"recommendation": null,
22+
"references": [
23+
"https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-log-collect",
24+
"_ARG_2_"
25+
],
26+
"compliance": [
27+
{
28+
"name": "CIS Microsoft Azure Foundations",
29+
"version": "_ARG_3_",
30+
"reference": "_ARG_4_",
31+
"profile": "Level 1"
32+
}
33+
],
34+
"level": "medium",
35+
"tags": [
7936

80-
],
81-
"actions": {
82-
"objectData": {
83-
"properties": [
84-
"*"
85-
],
86-
"expandObject": null,
87-
"limit": null
37+
],
38+
"rule": {
39+
"path": "az_monitor_alerts",
40+
"subPath": null,
41+
"selectCondition": {
42+
43+
},
44+
"query": [
45+
{
46+
"filter": [
47+
{
48+
"conditions": [
49+
[
50+
"operationName",
51+
"eq",
52+
"_ARG_1_"
53+
]
54+
]
55+
}
56+
]
57+
}
58+
],
59+
"shouldExist": "true",
60+
"returnObject": {
61+
"operationName": "_ARG_1_",
62+
"Status": "DoesNotExists"
8863
},
89-
"showGoToButton": false,
90-
"showModalButton": false,
91-
"directLink": null
92-
}
64+
"removeIfNotExists": null
9365
},
94-
"text": {
95-
"data": {
96-
"properties": {
97-
66+
"output": {
67+
"html": {
68+
"data": {
69+
"properties": {
70+
71+
},
72+
"expandObject": null
73+
},
74+
"table": null,
75+
"decorate": [
76+
77+
],
78+
"emphasis": [
79+
80+
],
81+
"actions": {
82+
"objectData": {
83+
"properties": [
84+
"*"
85+
],
86+
"expandObject": null,
87+
"limit": null
88+
},
89+
"showGoToButton": false,
90+
"showModalButton": false,
91+
"directLink": null
92+
}
9893
},
99-
"expandObject": null
100-
},
101-
"status": {
102-
"keyName": [
103-
104-
],
105-
"message": "The _ARG_1_ alert was not found",
106-
"defaultMessage": null
107-
},
108-
"properties": {
109-
"resourceName": "operationName",
110-
"resourceId": null,
111-
"resourceType": null
112-
},
113-
"onlyStatus": false
114-
}
115-
},
116-
"idSuffix": "azure_monitor_alert_missing_rule",
117-
"notes": [
118-
119-
],
120-
"categories": [
121-
122-
]
94+
"text": {
95+
"data": {
96+
"properties": {
97+
98+
},
99+
"expandObject": null
100+
},
101+
"status": {
102+
"keyName": [
103+
104+
],
105+
"message": "The _ARG_1_ alert was not found",
106+
"defaultMessage": null
107+
},
108+
"properties": {
109+
"resourceName": "operationName",
110+
"resourceId": null,
111+
"resourceType": null
112+
},
113+
"onlyStatus": false
114+
}
115+
},
116+
"idSuffix": "azure_monitor_alert_missing_rule",
117+
"notes": [
118+
119+
],
120+
"categories": [
121+
122+
],
123+
"immutable_properties": [
124+
125+
],
126+
"id": "azure_101"
123127
}
124-

0 commit comments

Comments
 (0)