turbot/steampipe-mod-net-insights

Run individual configuration, compliance and security controls or full compliance benchmarks for DNS records using Powerpipe and Steampipe.

Net Insights Mod for Powerpipe

Important

Powerpipe is now the preferred way to run this mod! Migrating from Steampipe →

All v0.x versions of this mod will work in both Steampipe and Powerpipe, but v1.0.0 onwards will be in Powerpipe format only.

20+ checks covering security best practices for DNS records.

Run checks in a dashboard:

Or in a terminal:

Overview

Dashboards can help answer questions like:

• What are the DNS records for my domain?
• Are my DNS records configured according to best practices?
• Are my DNS records secure?
• Are my DNS records compliant with security best practices?
• Are my DNS records compliant with regulatory standards?

Getting Started

Installation

Install Powerpipe (https://powerpipe.io/downloads), or use Brew:

brew install turbot/tap/powerpipe

This mod also requires Steampipe with the Net plugin as the data source. Install Steampipe (https://steampipe.io/downloads), or use Brew:

brew install turbot/tap/steampipe
steampipe plugin install net

Finally, install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-net-insights

Browsing Dashboards

Start Steampipe as the data source:

steampipe service start

Start the dashboard server:

powerpipe server

Browse and view your dashboards at http://localhost:9033.

Open Source & Contributing

This repository is published under the Apache 2.0 license. Please see our code of conduct. We look forward to collaborating with you!

Steampipe and Powerpipe are products produced from this open source software, exclusively by Turbot HQ, Inc. They are distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #powerpipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

• Powerpipe
• Net Insights Mod

steampipe-mod-net-insights's Issues

Update mod.sp to address deprecation warning

Describe the bug
The current version of the mod returns a warning due to using the deprecated option version instead of min_version for the net plugin.

This issue can be trivially resolved by updating

  require {
    plugin "net" {
      version = "0.5.0"
    }
  }

to

  require {
    plugin "net" {
      min_version = "0.5.0"
    }
  }

Steampipe version (steampipe -v)
Example: v0.3.0

Plugin version (steampipe plugin list)
Example: v0.5.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Dashboard fails to load workspace: Failed to decode all mod hcl files

Describe the bug
A clear and concise description of what the bug is.

steampipe-mod-net-insights$ steampipe dashboard 
[ Wait    ] Loading Workspace
Error: failed to load workspace: Failed to decode all mod hcl files
Mod defines more than one resource named 'net_insights.input.domain_input': 
- ../steampipe-mod-net-insights/dashboards/ssl_certificate_report.sp:17,3-23
-../steampipe-mod-net-insights/dashboards/ssl_configuration_report.sp:11,3-23
steampipe-mod-net-insights$

Steampipe version (steampipe -v)
Example: v0.3.0

Plugin version (steampipe plugin list)
Example: v0.5.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Add DMARC check for MX records to DNS records report/benchmark

Is your feature request related to a problem? Please describe.
I'd like to check if a site has DMARC enabled through DNS MX records.

Describe the solution you'd like
Add a DMARC check to any DNS reports/benchmarks.

Describe alternatives you've considered
Checking for DMARC through external tools.

Additional context
Add any other context or screenshots about the feature request here.

Add check for HTTP headers

Is your feature request related to a problem? Please describe.

Add checks to verify various HTTP headers related to website security; e.g.

• HTTP Strict-Transport-Security
• Content-Security-Policy
• X-Frame-Options
• X-Content-Type-Options
• Referrer-Policy
• Permissions-Policy

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Add SSL benchmarks

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Add DNS benchmarks

Add SSL report

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

dns_best_practices doesn't check any dns names?

It should use the defaults but doesn't seem to.

This doesn't seem to work either.

steampipe check benchmark.dns_best_practices --var='domain_names=[ "github.com", "turbot.com" ]'

Receive `more tha none row returned by a subquery used as an expression` error in DNS Records Report query

Describe the bug
The error comes from the dns_soa_report query for pipes.turbot.com

Steampipe version (steampipe -v)
v0.21.7

Plugin version (steampipe plugin list)
v0.12.0

To reproduce
Run the DNS Records Report for pipes.turbot.com

Expected behavior
The dashboard should render correctly

Additional context
Add any other context about the problem here.