Malware
A file infected with malware was detected on the cloud asset. Malware may include viruses, trojan horses, spyware, or worms...
Cloud Risks
Coin Miner indicator in shell history
An indicator of CryptoMiner activity was found in the bash history file.
RDS SQL auditing is disabled
Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. SQL Explorer...
GKE not using Stackdriver Kubernetes Logging and Monitoring
Exporting logs and metrics to a dedicated, persistent datastore such as Stackdriver ensures availability of audit data following a cluster...
Azure PostgreSQL Server ‘log retention days’ is configured to less than 3 days
Server {AzurePostgresDbServer} does not save logs for more than 3 days. Log Retention for over 3 days is useful to...
VPC with disabled flow logs
The VPC {AwsVpc} does not have Flow Logs enabled. Flow Logs can help monitoring abnormal activity as traffic and overly...
VPC without flow log
Alibaba VPC is a virtual private cloud service that provides an isolated cloud network to operate resources in a secure...
ActionTrail does not export all logs
ActionTrail is a web service that monitors and records actions performed on your cloud through cloud console, API calls, and...
WAF domain without log service enabled
Web Application Firewall (WAF) provides end-to-end security protection for your websites or apps. WAF effectively identifies and filters out malicious...