google / google/grr

Add artifacts for firewall rules

Open
#330 1 comment 0 reactions 0 assignees View on GitHub
enhancement Priority-Low
Dominant language
Python
Stars
5.1k
Forks
796
PR merge metrics
No merged PRs in 30d

Description

Like this as written by keith, except use the apple alf plist instead of the CLI (which seems to be missing information).

```
Firewall Related Artifacts.

name: Firewalls
doc: Firewall Native to OS.
sources:
- type: REGISTRY_KEY
attributes:
keys:
- 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules'
supported_os: [Windows]
- type: COMMAND
attributes:
args: ['-L', '-v', '-n']
cmd: /sbin/iptables
supported_os: [Linux]
- type: COMMAND
attributes:
args: ['--listapps']
cmd: /usr/libexec/ApplicationFirewall/socketfilterfw
supported_os: [Darwin]
labels: [System, Network]
supported_os: [Windows, Linux, Darwin]
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.