├── Audit_PostGre_Server_parameters.ps1 ├── Audit_sqlDB_audit_set_On.ps1 ├── Audit_webapp_TLs_version.ps1 ├── Audit_webapp_netframework.ps1 ├── Audit_webapps.ps1 ├── MySQL_'Enforce SSL connection'.ps1 ├── README.md ├── asc_contact_settings.ps1 ├── asc_storage_https_recs_report.ps1 ├── asc_vm_sshrdp_recs_report.ps1 ├── audit-webapp_httpsonly.ps1 ├── audit_sqldb_allow_ingress.ps1 ├── check_network_watcher_enabled.ps1 ├── check_sqlData_encryption_status.ps1 ├── check_storage_publicaccess.ps1 ├── diagnostics_for_keyvault.ps1 ├── logprofilesettings.ps1 └── remediation ├── Remediate _Retention is 'greater than 90 days'.ps1 ├── Remediate_ActivityLog_retention.ps1 ├── Remediate_MySQL_'Enforce SSL connection'.ps1 ├── Remediate_PostGre_SSLEnforcement.ps1 ├── Remediate_PostGre_con_throttling.ps1 ├── Remediate_PostGre_log_checkpoints.ps1 ├── Remediate_PostGre_log_connections.ps1 ├── Remediate_PostGre_log_disconnections.ps1 ├── Remediate_PostGre_log_duration.ps1 ├── Remediate_PostGre_log_retention_days.ps1 ├── Remediate_activity_audit.ps1 ├── Remediate_activity_locations.ps1 ├── Remediate_allow_ingress.ps1 ├── Remediate_logprofile.ps1 ├── Remediate_sqlDB_Action_groups.ps1 ├── Remediate_sqlDB_audit_set_On.ps1 ├── Remediate_sqlData_encryption.ps1 ├── Remediate_webapp_httpsonly.ps1 ├── Remediate_webapp_minTLsVersion.ps1 ├── Remediate_webapp_netframework.ps1 ├── readme.md ├── remediate_asc_contactinfo.ps1 ├── remediate_public_storage.ps1 └── remediate_storage_https.ps1 /Audit_PostGre_Server_parameters.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/Audit_PostGre_Server_parameters.ps1 -------------------------------------------------------------------------------- /Audit_sqlDB_audit_set_On.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/Audit_sqlDB_audit_set_On.ps1 -------------------------------------------------------------------------------- /Audit_webapp_TLs_version.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/Audit_webapp_TLs_version.ps1 -------------------------------------------------------------------------------- /Audit_webapp_netframework.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/Audit_webapp_netframework.ps1 -------------------------------------------------------------------------------- /Audit_webapps.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/Audit_webapps.ps1 -------------------------------------------------------------------------------- /MySQL_'Enforce SSL connection'.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/MySQL_'Enforce SSL connection'.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/README.md -------------------------------------------------------------------------------- /asc_contact_settings.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/asc_contact_settings.ps1 -------------------------------------------------------------------------------- /asc_storage_https_recs_report.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/asc_storage_https_recs_report.ps1 -------------------------------------------------------------------------------- /asc_vm_sshrdp_recs_report.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/asc_vm_sshrdp_recs_report.ps1 -------------------------------------------------------------------------------- /audit-webapp_httpsonly.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/audit-webapp_httpsonly.ps1 -------------------------------------------------------------------------------- /audit_sqldb_allow_ingress.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/audit_sqldb_allow_ingress.ps1 -------------------------------------------------------------------------------- /check_network_watcher_enabled.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/check_network_watcher_enabled.ps1 -------------------------------------------------------------------------------- /check_sqlData_encryption_status.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/check_sqlData_encryption_status.ps1 -------------------------------------------------------------------------------- /check_storage_publicaccess.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/check_storage_publicaccess.ps1 -------------------------------------------------------------------------------- /diagnostics_for_keyvault.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/diagnostics_for_keyvault.ps1 -------------------------------------------------------------------------------- /logprofilesettings.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/logprofilesettings.ps1 -------------------------------------------------------------------------------- /remediation/Remediate _Retention is 'greater than 90 days'.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate _Retention is 'greater than 90 days'.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_ActivityLog_retention.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_ActivityLog_retention.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_MySQL_'Enforce SSL connection'.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_MySQL_'Enforce SSL connection'.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_SSLEnforcement.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_SSLEnforcement.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_con_throttling.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_con_throttling.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_log_checkpoints.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_log_checkpoints.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_log_connections.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_log_connections.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_log_disconnections.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_log_disconnections.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_log_duration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_log_duration.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_PostGre_log_retention_days.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_PostGre_log_retention_days.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_activity_audit.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_activity_audit.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_activity_locations.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_activity_locations.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_allow_ingress.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_allow_ingress.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_logprofile.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_logprofile.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_sqlDB_Action_groups.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_sqlDB_Action_groups.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_sqlDB_audit_set_On.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_sqlDB_audit_set_On.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_sqlData_encryption.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_sqlData_encryption.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_webapp_httpsonly.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_webapp_httpsonly.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_webapp_minTLsVersion.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_webapp_minTLsVersion.ps1 -------------------------------------------------------------------------------- /remediation/Remediate_webapp_netframework.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/Remediate_webapp_netframework.ps1 -------------------------------------------------------------------------------- /remediation/readme.md: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /remediation/remediate_asc_contactinfo.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/remediate_asc_contactinfo.ps1 -------------------------------------------------------------------------------- /remediation/remediate_public_storage.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/remediate_public_storage.ps1 -------------------------------------------------------------------------------- /remediation/remediate_storage_https.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jknightly/azureCIS/HEAD/remediation/remediate_storage_https.ps1 --------------------------------------------------------------------------------