Subdomain is under risk of a takeover
The subdomain CNAME record is redirecting to a subdomain which is not in use anymore and can be registered by...
Blog
Expired SSL Certificate for a Subdomain
The certificate for {Subdomain.Name} has expired. Expired certificates can not be validated and can not guarantee ownership of a subdomain....
EBS volume unattached
The EBS volume {AwsEc2EbsVolume} is not attached to any instance and therefore may be unnecessary.
Malware
A file infected with malware was detected on the cloud asset. Malware may include viruses, trojan horses, spyware, or worms...
Coin Miner indicator in shell history
An indicator of CryptoMiner activity was found in the bash history file.
RDS SQL auditing is disabled
Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. SQL Explorer...
GKE not using Stackdriver Kubernetes Logging and Monitoring
Exporting logs and metrics to a dedicated, persistent datastore such as Stackdriver ensures availability of audit data following a cluster...
Azure PostgreSQL Server ‘log retention days’ is configured to less than 3 days
Server {AzurePostgresDbServer} does not save logs for more than 3 days. Log Retention for over 3 days is useful to...
VPC with disabled flow logs
The VPC {AwsVpc} does not have Flow Logs enabled. Flow Logs can help monitoring abnormal activity as traffic and overly...