guardicore / guardicore/monkey

Add more data services to the fingerprinters list to look for unencrypted access to data

Open
#829 0 comments 0 reactions 1 assignee Claimed by @shreyamalviya View on GitHub
Complexity: High Feature Impact: Medium MonkeyZoo
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
Increase the coverage of ZT tests in the Data pillar

Right now we're testing for open data endpoints by looking for HTTP and Elastic servers.

**Describe the solution you'd like**
1. List the top 10 on-prem data servers we're likely to see. This list probably includes stuff like Splunk.
2. Choose which ones we develop fingerprinters for.
3. Add the relevant tests and telem processing in `monkey/monkey_island/cc/services/telemetry/zero_trust_tests/data_endpoints.py`.
4. *Bonus*: Add these servers to the MonkeyZoo and check the results in the test to make sure the fingerprinters aren't broken.

**Describe alternatives you've considered**
n/a


UPDATE:
We planned to start with the top 6 databases from [here](https://www.explore-group.com/blog/the-most-popular-databases-2019/bp46/).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.