guardicore / guardicore/monkey
Add more data services to the fingerprinters list to look for unencrypted access to data
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
Increase the coverage of ZT tests in the Data pillar
Right now we're testing for open data endpoints by looking for HTTP and Elastic servers.
**Describe the solution you'd like**
1. List the top 10 on-prem data servers we're likely to see. This list probably includes stuff like Splunk.
2. Choose which ones we develop fingerprinters for.
3. Add the relevant tests and telem processing in `monkey/monkey_island/cc/services/telemetry/zero_trust_tests/data_endpoints.py`.
4. *Bonus*: Add these servers to the MonkeyZoo and check the results in the test to make sure the fingerprinters aren't broken.
**Describe alternatives you've considered**
n/a
UPDATE:
We planned to start with the top 6 databases from [here](https://www.explore-group.com/blog/the-most-popular-databases-2019/bp46/).
Contributor guide
Assessment
This issue has not been assessed yet.