Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Azure monitor table #38

Closed
krishna5891 opened this issue Mar 4, 2021 · 1 comment · Fixed by #70 or #71
Closed

Add Azure monitor table #38

krishna5891 opened this issue Mar 4, 2021 · 1 comment · Fixed by #70 or #71
Assignees
Labels
new table New table request priority:high This issue requires immediate attention

Comments

@krishna5891
Copy link

krishna5891 commented Mar 4, 2021

Describe the new table

Need to query the Azure Monitor table to verify the CIS section 5 (Logging and Monitoring)

References

Section 5

We need to achieve some of the steps as per CIS recommendation

5.1 Configuring Diagnostic Settings
5.1.1 Ensure that a 'Diagnostics Setting' exists (Automated)
5.1.2 Ensure Diagnostic Setting captures appropriate categories (Automated)
5.1.3 Ensure the storage container storing the activity logs is not publicly accessible (Automated)
5.1.4 Ensure the storage account containing the container with activity logs is encrypted with BYOK (Use Your Own Key) (Automated)
5.1.5 Ensure that logging for Azure KeyVault is 'Enabled' (Automated)
5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment (Automated)
5.2.2 Ensure that Activity Log Alert exists for Delete Policy Assignment (Automated)
5.2.3 Ensure that Activity Log Alert exists for Create or Update Network Security Group (Automated)
5.2.4 Ensure that Activity Log Alert exists for Delete Network Security Group (Automated)
5.2.5 Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule (Automated)
5.2.6 Ensure that activity log alert exists for the Delete Network Security Group Rule (Automated)
5.2.7 Ensure that Activity Log Alert exists for Create or Update Security Solution (Automated)
5.2.8 Ensure that Activity Log Alert exists for Delete Security Solution (Automated)
5.2.9 Ensure that Activity Log Alert exists for Create or Update or Delete SQL Server Firewall Rule (Automated)
5.3 Ensure that Diagnostic Logs are enabled for all services which support it. (Automated)

@krishna5891 krishna5891 changed the title Add Azure monitor table #23 Add Azure monitor table Mar 4, 2021
@rajlearner17 rajlearner17 added the priority:high This issue requires immediate attention label Mar 23, 2021
@bigdatasourav bigdatasourav self-assigned this Mar 26, 2021
@bigdatasourav bigdatasourav added the new table New table request label Mar 26, 2021
@bigdatasourav
Copy link
Contributor

Will create 3 tables for the above -
azure_log_alert
azure_log_profile
azure_diagnostic_setting

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
new table New table request priority:high This issue requires immediate attention
Projects
None yet
4 participants