Commit Graph

2285 Commits

Author SHA1 Message Date
Florian Sonnenschein 79632bfbe5 - Deleted "filevault_status" variable
- Now checks if "fdesetup" exists
- Add some hardening points (AddHP): 3 of 3 when enabled, 0 of 3, when not.
2024-05-14 16:02:51 +02:00
Florian Sonnenschein 0b7e8c3bfe Added CRYP-7932 to determine if the system has enabled macOS FileVault. 2024-03-11 14:37:07 +01:00
Stefan Baumgartner bf197ffd7f
Update tests_malware
Fix incorrect "IsRunning" invocations for SentinelOne detection.
2023-09-17 10:24:52 +02:00
Michael Boelen 74fa9ab164
Merge branch 'master' into issue-1397 2023-09-13 16:15:05 +02:00
Michael Boelen 23bed418e5
Merge pull request #1396 from xnoguer/issue-1300
Replacing deprecated option -i. Issue 1300
2023-09-13 16:10:04 +02:00
Michael Boelen 9a19aa6a5b
Merge pull request #1404 from avenjamin/sentinelone-malware
Add malware detection support for SentinelOne
2023-09-13 16:08:36 +02:00
Michael Boelen 1bfcc9b146
Update tests_malware
Corrected variable
2023-09-13 16:07:41 +02:00
Michael Boelen 7b98ad465e
Merge pull request #1405 from xnoguer/issue-1277
Updating parsing of arch-audit since arch-audit modified its output. Issue 1277
2023-09-13 16:04:58 +02:00
Michael Boelen 4b912ab357
Merge pull request #1399 from xnoguer/issue-1319
Added tests considering Wazuh for file integrity and tooling
2023-09-13 16:04:04 +02:00
Michael Boelen 20a6c2b774
Merge pull request #1403 from xnoguer/fix_test_names
Fixing missing or erroneous test number comments
2023-09-13 16:00:02 +02:00
Michael Boelen 2c313249de
Merge pull request #1372 from al-lac/os-detection-mac-os-ventura
osdetection: add macOS Ventura and Sonoma
2023-09-13 13:34:41 +02:00
Michael Boelen fd067df465
Merge pull request #1390 from akuster/master
osdetection: add OpenEmbedded and Poky
2023-09-13 13:08:33 +02:00
Michael Boelen 986237f557
Merge pull request #1408 from digitalcheetah/guix
Adding Guix to detected OSes
2023-09-13 13:07:08 +02:00
Michael Boelen 111494f972
Merge pull request #1409 from digitalcheetah/lsdk
Update osdetection with LSDK
2023-09-13 13:05:43 +02:00
Michael Boelen 0d77a367c5
[MALW-3280] Correction to detect com.avast.daemon 2023-08-08 11:15:34 +00:00
Michael Boelen 9d9cedee4e
Only quote binary, not the option -E 2023-08-08 09:11:02 +00:00
Michael Boelen d0c855d19b
Merge branch 'master' into issue-1338 2023-08-07 10:06:12 +02:00
al-lac 461edd3e1f Add OS support for macOS Sonoma (14.x) 2023-08-07 09:55:28 +02:00
rpmbuild 6e3cea8c87 use grep -E instead of egrep if possible 2023-07-30 09:37:10 +02:00
Jay Keller 5214132e97
Update osdetection with LSDK
This should close issue #1393.
2023-06-10 11:20:10 +00:00
Jay Keller be5a63a45b
Update osdetection with Guix
Closes issue #1379
2023-06-10 11:03:48 +00:00
Xavier Noguer 6963e4e408 Updating parsing of arch-audit since arch-audit modified its output 2023-05-30 14:56:11 +00:00
Ben Perry aa7085bf92
Update tests_malware 2023-05-30 18:19:46 +10:00
Xavier Noguer 1e70cd0b92 Fixing missing or erroneous test number comments 2023-05-30 08:04:36 +00:00
Xavier Noguer 9f36e17ee0 Added tests considering Wazuh for file integrity and tooling 2023-05-23 15:07:42 +00:00
Xavier Noguer dbf263dbbd Looking for configuration files in all /usr/local/pgsql/data* directories 2023-05-20 15:58:12 +00:00
Xavier Noguer 6fdfa0a012 Replacing deprecated option -i 2023-05-19 23:12:39 +00:00
Armin Kuster 2b82fa6eba osdetection: add OpenEmbedded and Poky
Signed-off-by: Armin Kuster <akuster@mvista.com>
2023-05-03 07:38:38 -04:00
xnoguer c845cecb6f Fixing test 2023-04-23 19:00:16 -04:00
xnoguer c7b73837db Removing changes from another branch 2023-04-23 17:44:44 -04:00
xnoguer 6f1797fb59 Using grep -E 2023-04-23 17:38:21 -04:00
al-lac ef3a8338a0 osdetection: add macOS Ventura 2023-01-27 15:12:17 +01:00
HansHoogerwerf bbe135d56f
Fix space 2022-10-17 16:27:21 +02:00
HansHoogerwerf ff26dca83a
Fix simple mistake 2022-10-17 16:24:59 +02:00
HansHoogerwerf 98ac5a562a
Verify the linux OS supports nanoseconds
Add extra check to verify the linux OS supports nanoseconds. This might not be the case with certain busybox implementations.
2022-10-17 15:46:40 +02:00
Michael Boelen 490d39f580
Merge pull request #1292 from konstruktoid/issue1291
Only test Compression if sshd version < 7.4
2022-10-12 10:51:31 +02:00
Michael Boelen bf4fa9fabf
Merge pull request #1294 from konstruktoid/issue1288
add plocate
2022-10-12 10:48:25 +02:00
Michael Boelen 73d43c25eb
Moved section to discover current timestamp related to issue #1329 2022-09-17 14:49:26 +00:00
Michael Boelen 622f53247d
[DBS-1820] added newer style format for Mongo authorization setting 2022-08-24 11:42:22 +00:00
Thomas Sjögren 975712a616 add plocate
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-05-15 23:58:43 +02:00
Thomas Sjögren e124499e27 Only test Compression if sshd version < 7.4
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-05-04 10:51:35 +02:00
Michael Boelen 0664dea946
Merge branch 'master' into symlink_file 2022-03-14 11:54:03 +01:00
Michael Boelen e2781677ba
[KRNL-5820] small changes to prevent using ROOTDIR and resetting it, also showing additional paths in screen output 2022-03-14 11:48:30 +01:00
Michael Boelen ff3f24bbba
Merge pull request #1265 from rfrohl/alternative_path_security-limits
[KRNL-5820] additional path for security/limits.conf
2022-03-14 11:30:29 +01:00
Wojciech Banaś 4098236412 #1270 added finding configuration files in the "etc" directory, even if they are symlinks 2022-02-14 13:23:20 +01:00
Michael Boelen 4f382331b3
Renumbered new test PKGS-7346 to PKGS-7200 2022-02-10 14:26:38 +01:00
Michael Boelen 8afa7d93fe
Merge pull request #1254 from pyllyukko/pam_faillock
Check for pam_faillock in AUTH-9408
2022-02-10 14:18:19 +01:00
Michael Boelen 59d1d8acd8
Merge pull request #1247 from devnull-hub-lab/patch-1
Update mod_security module version
2022-02-10 12:05:43 +01:00
Michael Boelen 0830a745cc
Merge pull request #1250 from JensChrG/master
Dont write over FIND variable. Fixes #1021
2022-02-10 12:03:46 +01:00
Michael Boelen cd433e928e
Merge pull request #1205 from kolenichsj/alpine_apk
Adding support for Alpine Package Keeper
2022-02-10 12:00:38 +01:00