Better Azure Inventory and Configuration, initial CIS Rules, and Baselines
sfc-gh-afedorov
released this
25 Feb 19:18
·
195 commits
to master
since this release
Data Connectors
- Azure Inventory and Configuration are updated, improved, and vetted against GovCloud
- AWS Inventory & Config adds results of
aws inspector list-findings
anddescribe-findings
(ty @kuannie1 for the contribution!) - an initial set of Azure CIS SQL rules is included in ./packs/azure_cis.sql
- fixes tenable.io agent collection to include agents not in a group and handling of API downtime
- fixes #376 in Azure Log connector (ty @plakhanpal for spotting this regression)
WebUI
- the URL now includes Alert and Violation id's, for easy linking to a specific rule
- beta features added to menu drop-down, letting you toggle ones not quite ready for prime-time
- (beta) Baselines section contains an initial version of Percentile Baselines have now been added to the WebUI. These help you analyze your data for patterns and alert on abnormalities.
Handlers
- adds custom issue type in Jira handler (ty @plakhanpal and @GalGreenfield for noting the trouble)
Minor & Misc
- various clarifications in AWS Inventory and Configuration docs
- fixes installer bug for accounts where default timezone is either LTZ or NTZ
- adds optional port environment variable running tests locally (#378)
- removes vestigial scripts
- fixes Jamf inventory connector to run every two hours
- makes it simpler to manually re-run alert query runners (ba88d6f)