Azure Storage Account without private endpoint and firewall configured
In the storage account creation process, there are three connectivity methods: Public for all networks, Public for specified networks or...
Cloud Risks
Kubernetes API server publicly accessible
The API server of {GcpGkeCluster} is publicly accessible from anywhere on the internet. This leaves the Kubernetes API server exposed...
AWS Dynamodb table with provisioned capacity mode and disabled read/write autoscaling
It was detected that the read/write autoscaling of DynamoDB table ({AwsDynamodbTable}) is disabled. Amazon DynamoDB auto scaling uses the AWS...
Web-service unpatched
We have found that the web-service {service_detailed} on the system was not patched for several months. It is important to...
Defender for Cloud: Antimalware file exclusion and code execution in your virtual machine
File excluded from your antimalware scanner at the same time as code was executed via a custom script extension on...
Defender for Cloud: Fileless Attack Technique Detected
The memory of the process specified below contains evidence of a fileless attack technique. Fileless attacks are used by attackers...
Defender for Cloud: Executable found running from a suspicious location
Analysis of host data detected an executable file on host that is running from a location in common with known...
Ensure the PostgreSQL Audit Extension (pgAudit) is enabled (Automated)
Basic statement logging can be provided by the standard logging facility with log_statement = all. This is acceptable for monitoring...
AWS EC2 instance allows public ingress access on Oracle port 1521
Oracle TNS(Transparent Network Substrate) port - 1521 is used by Oracle client to connect to the database server over Oracle...