blob: c30029b616b7990c2db876233baf4ec6cb258fd8 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
* Background
I have been an auditor for years, starting with operational/financial
audits and quickly transitioning to technology audits early in my
career.
While performing technology audits, attestations, etc., you will find
that it requires a lot of manual effort if you don't use the right tools
to automate as much as possible.
This repository serves as my personal collection of audit tools that I
want to save and re-use later.
** Scope
While I created the scripts and tools within this repository
specifically for the applications I use, I am working to include
edge-cases and niche tools as I can.
For now, refer to the tree below for application coverage.
#+begin_src shell
tree -I ".git*|venv"
#+end_src
#+begin_src text
.
├── applications
│ ├── github
│ │ ├── github_admins.py
│ │ ├── github_audit_log.py
│ │ ├── github_branch_protections.py
│ │ ├── github_commits.py
│ │ └── README.org
│ └── gitlab
│ ├── approvals.py
│ ├── branch_protections.py
│ ├── passwords.py
│ ├── pipelines.py
│ ├── provisioning.py
│ ├── README.org
│ ├── repositories.py
│ └── users.py
├── CODEOWNERS
├── databases
│ ├── mongo
│ │ ├── admins.py
│ │ └── README.org
│ ├── mysql
│ │ ├── mysql_admins_alt.sql
│ │ ├── mysql_admins.sql
│ │ ├── passwords.sql
│ │ └── README.org
│ ├── oracle
│ │ ├── oracle_admins_alt.sql
│ │ ├── oracle_admins.sql
│ │ └── README.org
│ ├── postgres
│ │ ├── admins.sql
│ │ ├── passwords.sql
│ │ └── README.org
│ └── sql
│ ├── admins.sql
│ ├── passwords
│ │ ├── example_data.csv
│ │ ├── passwords.py
│ │ └── query.sql
│ └── README.org
├── LICENSE
├── os
│ └── linux
│ ├── passwords.sh
│ ├── README.org
│ └── ssh_root_login.sh
├── project_management
│ ├── alteryx
│ │ └── project_email_reminders.yxmd
│ ├── dash
│ │ └── app.py
│ └── powerbi
│ └── project_dashboard
│ ├── project_dashboard.pbix
│ └── project_data.xlsx
├── README.org
├── requirements.txt
└── sampling
├── README.org
├── sample.html
├── sample-html.png
└── sample.py
#+end_src
* Development
** Python
For the Python scripts, use the following to activate a virtual
environment for consistent packing:
#+begin_src shell
python3 -m venv venv
source ./venv/bin/activate
pip install PACKAGE_NAME
python3 ./PYTHON_SCRIPT.py
#+end_src
|
