Skip to content
Merged
Show file tree
Hide file tree
Changes from 34 commits
Commits
Show all changes
41 commits
Select commit Hold shift + click to select a range
bff0152
wip: initial detections
graza-io Mar 12, 2025
ae54bbd
wip: updated security queries to work with DuckDB
graza-io Mar 13, 2025
3695598
wip: updated queries to work with DuckDB
graza-io Mar 13, 2025
5f22759
wip: updated to run
graza-io Mar 13, 2025
85f7c64
wip: added activity dashboard
graza-io Mar 13, 2025
e783de3
Add detections
Priyanka-Chatterjee-2000 Mar 26, 2025
e38f6e5
Minor update README and documentation links for Nginx Access Log Dete…
Priyanka-Chatterjee-2000 Apr 2, 2025
d799b50
Enhance Nginx detection rules by adding MITRE ATT&CK IDs
Priyanka-Chatterjee-2000 Apr 2, 2025
9f7a0dd
Update Nginx detection tags to include MITRE ATT&CK IDs and enhance p…
Priyanka-Chatterjee-2000 Apr 3, 2025
ec7f0d9
Enhance Nginx activity dashboard with new charts and queries, includi…
Priyanka-Chatterjee-2000 Apr 4, 2025
48dff8a
Refactor Nginx activity dashboard titles and documentation name
Priyanka-Chatterjee-2000 Apr 4, 2025
610ffd0
Refactor Nginx detection rules by updating detection names and descri…
Priyanka-Chatterjee-2000 Apr 4, 2025
5258d13
Refactor Nginx detection rules to utilize local variables for display…
Priyanka-Chatterjee-2000 Apr 4, 2025
6b10e2a
Refactor naming conventions and remove compliance benchmark place th…
Priyanka-Chatterjee-2000 Apr 4, 2025
0e08580
Rename Nginx detection files
Priyanka-Chatterjee-2000 Apr 4, 2025
5d85a85
Minor query fix
Priyanka-Chatterjee-2000 Apr 4, 2025
58ed382
Refactor Nginx detection
Priyanka-Chatterjee-2000 Apr 4, 2025
0b56838
Refactor Nginx activity dashboard
Priyanka-Chatterjee-2000 Apr 4, 2025
1b1bff0
Add detection docs
Priyanka-Chatterjee-2000 Apr 4, 2025
fb84c60
Remove some unintended links
Priyanka-Chatterjee-2000 Apr 4, 2025
1c14e3f
Update activity dashboard titles and queries for consistency
Priyanka-Chatterjee-2000 Apr 7, 2025
ec2380a
Update activity dashboard queries and titles for improved clarity and…
Priyanka-Chatterjee-2000 Apr 9, 2025
45632c8
Add Access Log Detections
Priyanka-Chatterjee-2000 Apr 14, 2025
7dd378f
Add nginx dashboard image
Priyanka-Chatterjee-2000 Apr 14, 2025
5cb08bb
add nginx detection dashboard image
Priyanka-Chatterjee-2000 Apr 14, 2025
a107948
Minor fix
Priyanka-Chatterjee-2000 Apr 14, 2025
669ec61
Update dashboard
Priyanka-Chatterjee-2000 Apr 15, 2025
0acfe6e
update locals
Priyanka-Chatterjee-2000 Apr 15, 2025
f895406
Update docs
Priyanka-Chatterjee-2000 Apr 15, 2025
6ff5984
Update locals.pp, mod.pp, .github, activity_dashboard
Priyanka-Chatterjee-2000 Apr 15, 2025
91b47df
Add UTF-7 encoding detection for cross-site scripting in request URI …
Priyanka-Chatterjee-2000 Apr 15, 2025
42c0a36
Revert SQL injection detection patterns
Priyanka-Chatterjee-2000 Apr 15, 2025
bf18b58
Update dashboard image
Priyanka-Chatterjee-2000 Apr 15, 2025
9486cb0
Add `status` column to display columns in locals.pp
cbruno10 Apr 15, 2025
c7440d5
Dashboard and benchmark updates
cbruno10 Apr 16, 2025
3225b68
Update screenshots
cbruno10 Apr 16, 2025
a1922d5
Sort detections
cbruno10 Apr 16, 2025
d8ad759
Refactor detection titles and descriptions, update MITRE attack IDs
Priyanka-Chatterjee-2000 Apr 16, 2025
9a55e30
Add CHANGELOG for v0.1.0
Priyanka-Chatterjee-2000 Apr 16, 2025
1fc5d48
Fix OWASP Top 10 benchmark CHANGELOG entry
misraved Apr 16, 2025
812ee8a
Fix broken link in CHANGELOG.md
misraved Apr 16, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
name: Bug report
about: Create a report to help us improve
title: ''
labels: bug
assignees: ''

---

**Describe the bug**
A clear and concise description of what the bug is.

**Powerpipe version (`powerpipe -v`)**
Example: v0.3.0

**Tailpipe version (`tailpipe -v`)**
Example: v0.3.0

**Plugin version (`tailpipe plugin list`)**
Example: v0.5.0

**To reproduce**
Steps to reproduce the behavior (please include relevant code and/or commands).

**Expected behavior**
A clear and concise description of what you expected to happen.

**Additional context**
Add any other context about the problem here.
11 changes: 11 additions & 0 deletions .github/ISSUE_TEMPLATE/config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
blank_issues_enabled: false
contact_links:
- name: Questions
url: https://turbot.com/community/join
about: GitHub issues in this repository are only intended for bug reports and feature requests. Other issues will be closed. Please ask and answer questions through the Turbot Slack community.
- name: Powerpipe CLI Bug Reports and Feature Requests
url: https://github.com/turbot/powerpipe/issues/new/choose
about: Powerpipe CLI has its own codebase. Bug reports and feature requests for those pieces of functionality should be directed to that repository.
- name: Tailpipe CLI Bug Reports and Feature Requests
url: https://github.com/turbot/tailpipe/issues/new/choose
about: Tailpipe CLI has its own codebase. Bug reports and feature requests for those pieces of functionality should be directed to that repository.
20 changes: 20 additions & 0 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
name: Feature request
about: Suggest an idea for this project
title: ''
labels: enhancement
assignees: ''

---

**Is your feature request related to a problem? Please describe.**
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

**Describe the solution you'd like**
A clear and concise description of what you want to happen.

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.

**Additional context**
Add any other context or screenshots about the feature request here.
2 changes: 2 additions & 0 deletions .github/PULL_REQUEST_TEMPLATE.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
### Checklist
- [ ] Issue(s) linked
17 changes: 17 additions & 0 deletions .github/workflows/stale.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: Stale Issues and PRs
on:
schedule:
- cron: "30 23 * * *"
workflow_dispatch:
inputs:
dryRun:
description: Set to true for a dry run
required: false
default: "false"
type: string

jobs:
stale_workflow:
uses: turbot/steampipe-workflows/.github/workflows/stale.yml@main
with:
dryRun: ${{ github.event.inputs.dryRun }}
9 changes: 9 additions & 0 deletions .github/workflows/sync-labels.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
name: Sync Labels
on:
schedule:
- cron: "30 22 * * 1"
workflow_dispatch:

jobs:
sync_labels_workflow:
uses: turbot/steampipe-workflows/.github/workflows/sync-labels.yml@main
19 changes: 11 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,14 @@
# Nginx Access Log Detections Mod for Powerpipe

View dashboards, run detections and scan for anomalies across your Nginx access logs.
[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to collect logs and query them with SQL.

<!--
TODO: Insert images
-->
The [Nginx Access Log Detections Mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-nginx-access-log-detections) contains pre-built dashboards and detections, which can be used to monitor and analyze activity across your Nginx servers.

Run detection benchmarks:
![image](docs/images/nginx_access_log_detection_dashboard.png)

View insights in dashboards:
![image](docs/images/nginx_access_log_activity_dashboard.png)

## Documentation

Expand Down Expand Up @@ -102,13 +106,12 @@ List available benchmarks:
powerpipe benchmark list
```

<!-- TODO: add a benchmark name and uncomment
Run a benchmark:

```sh
powerpipe benchmark run nginx_access_log_detections.benchmark.
powerpipe benchmark run nginx_access_log_detections.benchmark.access_log_detections
```
-->

Different output formats are also available, for more information please see
[Output Formats](https://powerpipe.io/docs/reference/cli/benchmark#output-formats).

Expand All @@ -126,4 +129,4 @@ Want to help but don't know where to start? Pick up one of the `help wanted` iss

- [Powerpipe](https://github.com/turbot/powerpipe/labels/help%20wanted)
- [Tailpipe](https://github.com/turbot/tailpipe/labels/help%20wanted)
- [Nginx Access Log Detections Mod](https://github.com/turbot/tailpipe-mod-nginx0-access-log-detections/labels/help%20wanted)
- [Nginx Access Log Detections Mod](https://github.com/turbot/tailpipe-mod-nginx-access-log-detections/labels/help%20wanted)
Loading