microsoft / microsoft/AttackSurfaceAnalyzer
Add Weak Permissions Flags for Files/Registry/Processes
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 3k
- Forks
- 294
- PR merge metrics
- No merged PRs in 30d
Description
Bringing forward a feature from ASA Classic, we should report on weak ACLs on Files (executable types), Registry Keys (in Local Machine hive) and Processes (Windows has process ACLs)
Also useful for:
COM Classes
Named Pipes
Services
Memory Mapped Sections
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the corresponding ASA Classic feature and the current Attack Surface Analyzer architecture for security-configuration reporting. Define the resource types and weak-ACL conditions to support before implementation. Done means the analyzer reports weak permissions for the agreed resource categories with coverage for the relevant cases.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100