RDS database instance has automated backups disabled
Automated backups are disabled for the RDS instance {AwsRdsDbInstance}. Backups help protect against human error, ransomware attacks, and downtime. If...
All articles by Orca Security
Ensure the logging level is set to ‘info’ (Automated)
Setting up an appropriate log level, configures the Docker daemon to log events that you would want to review later....
Ensure auditing is configured for Docker files and directories – /usr/bin/containerd (Automated)
As well as auditing the normal Linux file system and system calls, you should audit all Docker related files and...
VMware Virtual Machine with Unity Interlock feature enabled
A VMware virtual machine is a software-based emulation of a physical computer. VMware Unity Interlock feature should be disabled if...
Insecure file permission
An important file ({ConfigurationFile.Path}) has been identified with permission mask against best practices. Permission mask is set to {ConfigurationFile.PermissionMask} instead...
NPM package potentially vulnerable to dependency confusion attack
A Dependency Confusion attack occurs when a software installer script is tricked into pulling a malicious package from a public...
Docker container escape
Docker Socket '{DockerSocket}' was found to have mounted sockets. Docker socket is the UNIX socket that Docker is listening to....
PyPi package potentially vulnerable to dependency confusion attack
A Dependency Confusion attack occurs when a software installer script is tricked into pulling a malicious package from a public...
Redundant Service Found on Windows VM
It was found that a few redundant services are running on the server. As a best practice, it is recommended...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.