go.mondoo.com/cnquery@v0.0.0-20231005093811-59568235f6ea/providers/os/resources/os.lr.manifest.yaml (about)

     1  # Copyright (c) Mondoo, Inc.
     2  # SPDX-License-Identifier: BUSL-1.1
     3  
     4  resources:
     5    asset:
     6      fields:
     7        vulnerabilityReport: {}
     8      min_mondoo_version: latest
     9    asset.eol:
    10      fields:
    11        date: {}
    12        docsUrl: {}
    13        productUrl: {}
    14      min_mondoo_version: latest
    15    audit.advisory:
    16      fields:
    17        description: {}
    18        id: {}
    19        modified: {}
    20        mrn: {}
    21        published: {}
    22        title: {}
    23        worstScore: {}
    24      is_private: true
    25      min_mondoo_version: 5.15.0
    26    audit.cve:
    27      fields:
    28        id: {}
    29        modified: {}
    30        mrn: {}
    31        published: {}
    32        state: {}
    33        summary: {}
    34        unscored: {}
    35        worstScore: {}
    36      is_private: true
    37      min_mondoo_version: 5.15.0
    38    audit.cvss:
    39      fields:
    40        score: {}
    41        vector: {}
    42      is_private: true
    43      min_mondoo_version: 5.15.0
    44    auditpol:
    45      fields:
    46        list:
    47          min_mondoo_version: latest
    48      min_mondoo_version: 5.15.0
    49      snippets:
    50      - query: auditpol { inclusionsetting exclusionsetting subcategory }
    51        title: List all audit policies
    52      - query: |
    53          auditpol.where(subcategory == 'Sensitive Privilege Use') {
    54            inclusionsetting == 'Success and Failure'
    55          }
    56        title: Check a specific auditpol configuration
    57    auditpol.entry:
    58      fields:
    59        exclusionsetting: {}
    60        inclusionsetting: {}
    61        machinename: {}
    62        policytarget: {}
    63        subcategory: {}
    64        subcategoryguid: {}
    65      min_mondoo_version: 5.15.0
    66    authorizedkeys:
    67      fields:
    68        content: {}
    69        file: {}
    70        list: {}
    71        path: {}
    72      min_mondoo_version: 5.15.0
    73    authorizedkeys.entry:
    74      fields:
    75        file: {}
    76        key: {}
    77        label: {}
    78        line: {}
    79        options: {}
    80        type: {}
    81      min_mondoo_version: latest
    82    command:
    83      fields:
    84        command: {}
    85        exitcode: {}
    86        stderr: {}
    87        stdout: {}
    88      min_mondoo_version: 5.15.0
    89    container.image:
    90      fields:
    91        identifier: {}
    92        identifierType: {}
    93        name: {}
    94        reference:
    95          min_mondoo_version: latest
    96        repository: {}
    97      min_mondoo_version: 5.31.0
    98    container.repository:
    99      fields:
   100        fullName: {}
   101        name: {}
   102        registry: {}
   103        scheme: {}
   104      min_mondoo_version: 5.31.0
   105    docker:
   106      fields:
   107        containers: {}
   108        images: {}
   109      min_mondoo_version: 5.15.0
   110    docker.container:
   111      fields:
   112        command: {}
   113        id: {}
   114        image: {}
   115        imageid: {}
   116        labels: {}
   117        names: {}
   118        os:
   119          min_mondoo_version: 6.19.0
   120        state: {}
   121        status: {}
   122      min_mondoo_version: 5.15.0
   123    docker.image:
   124      fields:
   125        id: {}
   126        labels: {}
   127        size: {}
   128        tags: {}
   129        virtualsize: {}
   130      min_mondoo_version: 5.15.0
   131    equinix.metal.device:
   132      fields:
   133        billingCycle: {}
   134        createdAt: {}
   135        description: {}
   136        hostname: {}
   137        id: {}
   138        locked: {}
   139        os: {}
   140        shortID: {}
   141        spotInstance: {}
   142        state: {}
   143        updatedAt: {}
   144        url: {}
   145      maturity: experimental
   146      min_mondoo_version: 5.15.0
   147      platform:
   148        name:
   149        - equinix
   150    equinix.metal.organization:
   151      fields:
   152        address: {}
   153        billingPhone: {}
   154        createdAt: {}
   155        creditAmount: {}
   156        description: {}
   157        id: {}
   158        mainPhone: {}
   159        name: {}
   160        taxId: {}
   161        twitter: {}
   162        updatedAt: {}
   163        url: {}
   164        website: {}
   165      maturity: experimental
   166      min_mondoo_version: 5.15.0
   167      platform:
   168        name:
   169        - equinix
   170    equinix.metal.project:
   171      fields:
   172        createdAt: {}
   173        devices: {}
   174        id: {}
   175        name: {}
   176        organization: {}
   177        paymentMethod: {}
   178        sshKeys: {}
   179        updatedAt: {}
   180        url: {}
   181        users: {}
   182      maturity: experimental
   183      min_mondoo_version: 5.15.0
   184      platform:
   185        name:
   186        - equinix
   187    equinix.metal.sshkey:
   188      fields:
   189        createdAt: {}
   190        fingerPrint: {}
   191        id: {}
   192        key: {}
   193        label: {}
   194        updatedAt: {}
   195        url: {}
   196      maturity: experimental
   197      min_mondoo_version: 5.15.0
   198      platform:
   199        name:
   200        - equinix
   201    equinix.metal.user:
   202      fields:
   203        avatarUrl: {}
   204        createdAt: {}
   205        email: {}
   206        facebook: {}
   207        firstName: {}
   208        fullName: {}
   209        id: {}
   210        lastName: {}
   211        linkedin: {}
   212        phoneNumber: {}
   213        timezone: {}
   214        twitter: {}
   215        twoFactorAuth: {}
   216        updatedAt: {}
   217        url: {}
   218        vpn: {}
   219      maturity: experimental
   220      min_mondoo_version: 5.15.0
   221      platform:
   222        name:
   223        - equinix
   224    file:
   225      fields:
   226        basename: {}
   227        content: {}
   228        dirname: {}
   229        empty:
   230          min_mondoo_version: 5.18.0
   231        exists: {}
   232        group: {}
   233        path: {}
   234        permissions: {}
   235        size: {}
   236        user: {}
   237      min_mondoo_version: 5.0.0
   238      snippets:
   239      - query: |
   240          file('/etc') {
   241            exists
   242            permissions.isDirectory
   243          }
   244        title: Test if a directory exists
   245    file.permissions:
   246      fields:
   247        group_executable: {}
   248        group_readable: {}
   249        group_writeable: {}
   250        isDirectory: {}
   251        isFile: {}
   252        isSymlink: {}
   253        mode: {}
   254        other_executable: {}
   255        other_readable: {}
   256        other_writeable: {}
   257        sgid: {}
   258        sticky: {}
   259        string:
   260          min_mondoo_version: latest
   261        suid: {}
   262        user_executable: {}
   263        user_readable: {}
   264        user_writeable: {}
   265      is_private: true
   266      min_mondoo_version: 5.15.0
   267    files:
   268      fields: {}
   269      min_mondoo_version: latest
   270    files.find:
   271      fields:
   272        from: {}
   273        list:
   274          min_mondoo_version: latest
   275        name: {}
   276        permissions: {}
   277        regex: {}
   278        type: {}
   279        xdev: {}
   280      min_mondoo_version: 5.15.0
   281    group:
   282      fields:
   283        gid: {}
   284        members: {}
   285        name: {}
   286        sid: {}
   287      min_mondoo_version: 5.15.0
   288    groups:
   289      fields:
   290        list:
   291          min_mondoo_version: latest
   292      min_mondoo_version: 5.15.0
   293      snippets:
   294      - query: groups.where(name == 'wheel').list { members.all( name != 'username')}
   295        title: Ensure the user is not part of group
   296    ip6tables:
   297      fields:
   298        input: {}
   299        output: {}
   300      min_mondoo_version: 5.15.0
   301    iptables:
   302      fields:
   303        input: {}
   304        output: {}
   305      min_mondoo_version: 5.15.0
   306    iptables.entry:
   307      fields:
   308        bytes: {}
   309        chain: {}
   310        destination: {}
   311        in: {}
   312        lineNumber: {}
   313        opt: {}
   314        options: {}
   315        out: {}
   316        packets: {}
   317        protocol: {}
   318        source: {}
   319        target: {}
   320      min_mondoo_version: 5.15.0
   321    kernel:
   322      fields:
   323        info: {}
   324        installed: {}
   325        modules: {}
   326        parameters: {}
   327      min_mondoo_version: 5.15.0
   328      snippets:
   329      - query: kernel.modules { name loaded size }
   330        title: List all kernel modules
   331      - query: kernel.modules.where( loaded == true ) { name }
   332        title: List all loaded kernel modules
   333      - query: kernel { info }
   334        title: List all information from running kernel
   335      - query: kernel { info['version'] }
   336        title: List version from running kernel
   337    kernel.module:
   338      fields:
   339        loaded: {}
   340        name: {}
   341        size: {}
   342      min_mondoo_version: 5.15.0
   343    kubelet:
   344      fields:
   345        configFile: {}
   346        configuration: {}
   347        process: {}
   348      min_mondoo_version: latest
   349    logindefs:
   350      fields:
   351        content: {}
   352        file: {}
   353        params: {}
   354      min_mondoo_version: 5.15.0
   355    lsblk:
   356      fields:
   357        list:
   358          min_mondoo_version: latest
   359      min_mondoo_version: 5.15.0
   360    lsblk.entry:
   361      fields:
   362        fstype: {}
   363        label: {}
   364        mountpoints: {}
   365        name: {}
   366        uuid: {}
   367      min_mondoo_version: 5.15.0
   368    machine:
   369      fields: {}
   370      min_mondoo_version: 5.15.0
   371    machine.baseboard:
   372      fields:
   373        assetTag: {}
   374        manufacturer: {}
   375        product: {}
   376        serial: {}
   377        version: {}
   378      min_mondoo_version: 5.15.0
   379    machine.bios:
   380      fields:
   381        releaseDate: {}
   382        vendor: {}
   383        version: {}
   384      min_mondoo_version: 5.15.0
   385    machine.chassis:
   386      fields:
   387        assetTag: {}
   388        manufacturer: {}
   389        serial: {}
   390        version: {}
   391      min_mondoo_version: 5.15.0
   392    machine.system:
   393      fields:
   394        family: {}
   395        manufacturer: {}
   396        product: {}
   397        serial: {}
   398        sku: {}
   399        uuid: {}
   400        version: {}
   401      min_mondoo_version: 5.15.0
   402    macos:
   403      fields:
   404        globalAccountPolicies: {}
   405        userHostPreferences: {}
   406        userPreferences: {}
   407      min_mondoo_version: 5.15.0
   408    macos.alf:
   409      fields:
   410        allowDownloadSignedEnabled: {}
   411        allowSignedEnabled: {}
   412        applications: {}
   413        exceptions: {}
   414        explicitAuths: {}
   415        firewallUnload: {}
   416        globalState: {}
   417        loggingEnabled: {}
   418        loggingOption: {}
   419        stealthEnabled: {}
   420        version: {}
   421      min_mondoo_version: 5.15.0
   422    macos.security:
   423      fields:
   424        authorizationDB: {}
   425      min_mondoo_version: 5.15.0
   426    macos.systemsetup:
   427      fields:
   428        allowPowerButtonToSleepComputer: {}
   429        computerName: {}
   430        date: {}
   431        disableKeyboardWhenEnclosureLockIsEngaged: {}
   432        displaySleep: {}
   433        harddiskSleep: {}
   434        localSubnetName: {}
   435        networkTimeServer: {}
   436        remoteAppleEvents: {}
   437        remoteLogin: {}
   438        restartFreeze: {}
   439        restartPowerFailure: {}
   440        sleep: {}
   441        startupDisk: {}
   442        time: {}
   443        timeZone: {}
   444        usingNetworkTime: {}
   445        waitForStartupAfterPowerFailure: {}
   446        wakeOnModem: {}
   447        wakeOnNetworkAccess: {}
   448      min_mondoo_version: 5.15.0
   449    macos.timemachine:
   450      fields:
   451        preferences: {}
   452      min_mondoo_version: 5.15.0
   453    mondoo.eol:
   454      fields:
   455        date: {}
   456        product: {}
   457        version: {}
   458      is_private: true
   459      min_mondoo_version: latest
   460    mount:
   461      fields:
   462        list:
   463          min_mondoo_version: latest
   464      min_mondoo_version: 5.15.0
   465      snippets:
   466      - query: mount.list { path device fstype options }
   467        title: List all mount points
   468      - query: mount.one( path == "/" )
   469        title: Ensure the mountpoint exists
   470      - query: |
   471          mount.where( path == "/" ) {
   472            device == '/dev/mapper/vg00-lv_root'
   473            fstype == 'xfs'
   474            options['rw'] != null
   475            options['relatime'] != null
   476            options['seclabel'] != null
   477            options['attr2'] != null
   478            options['inode64'] != null
   479            options['noquota'] != null
   480          }
   481        title: Check mountpoint configuration
   482    mount.point:
   483      fields:
   484        device: {}
   485        fstype: {}
   486        mounted: {}
   487        options: {}
   488        path: {}
   489      min_mondoo_version: 5.15.0
   490    ntp.conf:
   491      fields:
   492        content: {}
   493        file: {}
   494        fudge: {}
   495        restrict: {}
   496        servers: {}
   497        settings: {}
   498      min_mondoo_version: 5.15.0
   499    os:
   500      fields:
   501        env: {}
   502        hostname: {}
   503        machineid: {}
   504        name: {}
   505        path: {}
   506        rebootpending: {}
   507        updates: {}
   508        uptime: {}
   509      min_mondoo_version: 5.15.0
   510      snippets:
   511      - query: os.env
   512        title: Show all environment variables
   513      - query: os.env['windir']
   514        title: Retrieve a single environment variable
   515    os.base:
   516      fields:
   517        env: {}
   518        groups: {}
   519        hostname: {}
   520        machine: {}
   521        name: {}
   522        path: {}
   523        rebootpending: {}
   524        updates: {}
   525        uptime: {}
   526        users: {}
   527      min_mondoo_version: 6.19.0
   528    os.linux:
   529      fields:
   530        ip6tables: {}
   531        iptables: {}
   532        unix: {}
   533      min_mondoo_version: 6.19.0
   534    os.rootCertificates:
   535      fields:
   536        content: {}
   537        files: {}
   538        list: {}
   539      min_mondoo_version: 5.15.0
   540    os.unix:
   541      fields:
   542        base: {}
   543      min_mondoo_version: 6.19.0
   544    os.update:
   545      fields:
   546        category: {}
   547        format: {}
   548        name: {}
   549        restart: {}
   550        severity: {}
   551      min_mondoo_version: 5.15.0
   552    package:
   553      fields:
   554        arch: {}
   555        available: {}
   556        description: {}
   557        epoch: {}
   558        format: {}
   559        installed: {}
   560        name: {}
   561        origin: {}
   562        outdated: {}
   563        status: {}
   564        version: {}
   565      min_mondoo_version: 5.15.0
   566      snippets:
   567      - query: package('git').installed
   568        title: Check if a package is installed
   569    packages:
   570      fields:
   571        list:
   572          min_mondoo_version: latest
   573      min_mondoo_version: 5.15.0
   574    pam.conf:
   575      fields:
   576        content: {}
   577        entries: {}
   578        files: {}
   579        services: {}
   580      min_mondoo_version: 5.15.0
   581    pam.conf.serviceEntry:
   582      fields:
   583        control: {}
   584        lineNumber: {}
   585        module: {}
   586        options: {}
   587        pamType: {}
   588        service: {}
   589      is_private: true
   590      min_mondoo_version: 5.15.0
   591    parse.certificates:
   592      fields:
   593        content: {}
   594        file: {}
   595        list:
   596          min_mondoo_version: latest
   597        path: {}
   598      min_mondoo_version: 5.15.0
   599      snippets:
   600      - query: parse.certificates('/etc/ssl/cert.pem').list { issuer.dn }
   601        title: Parse Certificates from target file system
   602      - query: 'parse.certificates(content: ''PEM CONTENT'').list { issuer.dn }'
   603        title: Parse Certificates from content
   604    parse.ini:
   605      fields:
   606        content: {}
   607        delimiter: {}
   608        file: {}
   609        params: {}
   610        sections: {}
   611      min_mondoo_version: 5.15.0
   612    parse.json:
   613      fields:
   614        content: {}
   615        file: {}
   616        params: {}
   617      min_mondoo_version: 5.15.0
   618      snippets:
   619      - query: 'parse.json(content: ''{ "a": "b"  }'').params'
   620        title: Parse JSON from string content
   621      - query: parse.json("/path/to/test.json").params
   622        title: Parse JSON from file
   623    parse.openpgp:
   624      fields:
   625        content: {}
   626        file: {}
   627        list: {}
   628        path: {}
   629      min_mondoo_version: latest
   630    parse.plist:
   631      fields:
   632        content: {}
   633        file: {}
   634        params: {}
   635      min_mondoo_version: 5.15.0
   636    parse.yaml:
   637      fields:
   638        content: {}
   639        file: {}
   640        params: {}
   641      min_mondoo_version: 5.15.0
   642    platform:
   643      fields:
   644        vulnerabilityReport: {}
   645      min_mondoo_version: latest
   646    platform.advisories:
   647      fields:
   648        cvss: {}
   649        list: {}
   650        stats: {}
   651      min_mondoo_version: 5.15.0
   652    platform.cves:
   653      fields:
   654        cvss: {}
   655        list: {}
   656        stats: {}
   657      min_mondoo_version: 5.15.0
   658    platform.eol:
   659      fields:
   660        date: {}
   661        docsUrl: {}
   662        productUrl: {}
   663      min_mondoo_version: 5.15.0
   664    port:
   665      fields:
   666        address: {}
   667        port: {}
   668        process: {}
   669        protocol: {}
   670        remoteAddress: {}
   671        remotePort: {}
   672        state: {}
   673        tls: {}
   674        user: {}
   675      min_mondoo_version: 5.15.0
   676    ports:
   677      fields:
   678        list: {}
   679        listening: {}
   680      min_mondoo_version: latest
   681    powershell:
   682      fields:
   683        exitcode: {}
   684        script: {}
   685        stderr: {}
   686        stdout: {}
   687      min_mondoo_version: 5.15.0
   688      snippets:
   689      - query: |
   690          powershell('Get-WmiObject -Class Win32_volume -Filter "DriveType=3"| Select Label') {
   691            stdout == /PAGEFILE/
   692            stderr == ''
   693          }
   694        title: Run custom powershell command
   695      - query: |
   696          powershell('tzutil /g') {
   697            stdout.trim == 'GMT Standard Time'
   698            stderr == ''
   699          }
   700        title: Check the timezone
   701    privatekey:
   702      fields:
   703        encrypted: {}
   704        file: {}
   705        path: {}
   706        pem: {}
   707      min_mondoo_version: 5.15.0
   708    process:
   709      fields:
   710        command: {}
   711        executable: {}
   712        flags: {}
   713        pid: {}
   714        state: {}
   715      min_mondoo_version: 5.15.0
   716    processes:
   717      fields:
   718        list:
   719          min_mondoo_version: latest
   720      min_mondoo_version: 5.15.0
   721    python:
   722      fields:
   723        children: {}
   724        packages: {}
   725        path: {}
   726        toplevel: {}
   727      min_mondoo_version: latest
   728    python.package:
   729      fields:
   730        author: {}
   731        dependencies: {}
   732        file: {}
   733        id: {}
   734        licences: {}
   735        license: {}
   736        licenses: {}
   737        name: {}
   738        path: {}
   739        summary: {}
   740        version: {}
   741      min_mondoo_version: latest
   742    python.packages:
   743      fields:
   744        "": {}
   745        children: {}
   746        packages: {}
   747      min_mondoo_version: latest
   748    registrykey:
   749      fields:
   750        children: {}
   751        exists: {}
   752        items:
   753          min_mondoo_version: 8.19.0
   754        path: {}
   755        properties: {}
   756      min_mondoo_version: 5.15.0
   757    registrykey.property:
   758      fields:
   759        data:
   760          min_mondoo_version: 8.19.0
   761        exists: {}
   762        name: {}
   763        path: {}
   764        type:
   765          min_mondoo_version: 8.19.0
   766        value: {}
   767      min_mondoo_version: 5.15.0
   768      snippets:
   769      - query: |
   770          registrykey.property(path: 'HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System', name: 'MaxSize') {
   771            value >= 32768
   772          }
   773        title: Verify a registry key property
   774    rsyslog.conf:
   775      fields:
   776        content: {}
   777        files: {}
   778        path:
   779          min_mondoo_version: latest
   780        settings: {}
   781      min_mondoo_version: 5.15.0
   782    secpol:
   783      fields:
   784        eventaudit: {}
   785        privilegerights: {}
   786        registryvalues: {}
   787        systemaccess: {}
   788      min_mondoo_version: 5.15.0
   789      snippets:
   790      - query: secpol.privilegerights['SeRemoteShutdownPrivilege'].contains( _ == 'S-1-5-32-544')
   791        title: Check that a specific SID is included in the privilege rights
   792    service:
   793      fields:
   794        description: {}
   795        enabled: {}
   796        installed: {}
   797        masked: {}
   798        name: {}
   799        running: {}
   800        type: {}
   801      min_mondoo_version: 5.15.0
   802    services:
   803      fields:
   804        list:
   805          min_mondoo_version: latest
   806      min_mondoo_version: 5.15.0
   807    shadow:
   808      fields:
   809        list:
   810          min_mondoo_version: latest
   811      min_mondoo_version: 5.15.0
   812    shadow.entry:
   813      fields:
   814        expirydates: {}
   815        inactivedays: {}
   816        lastchanged: {}
   817        maxdays: {}
   818        mindays: {}
   819        password: {}
   820        reserved: {}
   821        user: {}
   822        warndays: {}
   823      min_mondoo_version: 5.15.0
   824    sshd:
   825      fields: {}
   826      min_mondoo_version: 5.15.0
   827    sshd.config:
   828      fields:
   829        ciphers: {}
   830        content: {}
   831        file: {}
   832        files:
   833          min_mondoo_version: latest
   834        hostkeys: {}
   835        kexs: {}
   836        macs: {}
   837        params: {}
   838      min_mondoo_version: 5.15.0
   839      snippets:
   840      - query: sshd.config.params['Banner'] == '/etc/ssh/sshd-banner'
   841        title: Check that the SSH banner is sourced from /etc/ssh/sshd-banner
   842    user:
   843      fields:
   844        authorizedkeys: {}
   845        enabled: {}
   846        gid: {}
   847        group: {}
   848        home: {}
   849        name: {}
   850        shell: {}
   851        sid: {}
   852        sshkeys: {}
   853        uid: {}
   854      min_mondoo_version: 5.15.0
   855      snippets:
   856      - query: |
   857          user(name: 'vagrant') { home uid }
   858        title: Display a specific user's home directory and UID
   859    users:
   860      fields:
   861        list: {}
   862      min_mondoo_version: 5.15.0
   863      snippets:
   864      - query: users.list { uid name }
   865        title: Display all users and their UID
   866      - query: users.one( name == 'root')
   867        title: Ensure user exists
   868      - query: users.none(name == 'vagrant')
   869        title: Ensure user does not exist
   870      - query: |
   871          users.where( sid == /S-1-5-21-\d+-\d+-\d+-501/ ).list {
   872            name != "Guest"
   873          }
   874        title: Search for a specific SID and check for its values
   875    windows:
   876      fields:
   877        computerInfo: {}
   878        features: {}
   879        hotfixes: {}
   880      min_mondoo_version: 5.15.0
   881      snippets:
   882      - query: windows.computerInfo['WindowsInstallationType'] == 'Server Core'
   883        title: Check the OS Edition
   884    windows.bitlocker:
   885      fields:
   886        volumes: {}
   887      min_mondoo_version: 5.35.0
   888    windows.bitlocker.volume:
   889      fields:
   890        conversionStatus: {}
   891        deviceID: {}
   892        driveLetter: {}
   893        encryptionMethod: {}
   894        lockStatus: {}
   895        persistentVolumeID: {}
   896        protectionStatus: {}
   897        version: {}
   898      min_mondoo_version: 5.35.0
   899    windows.feature:
   900      fields:
   901        description: {}
   902        displayName: {}
   903        installState: {}
   904        installed: {}
   905        name: {}
   906        path: {}
   907      min_mondoo_version: 5.15.0
   908      snippets:
   909      - query: windows.feature('SNMP-Service').installed
   910        title: Check that a Windows features is installed
   911      - query: windows.feature('Windows-Defender').installed == false
   912        title: Check that a specific feature is not installed
   913    windows.firewall:
   914      fields:
   915        profiles: {}
   916        rules: {}
   917        settings: {}
   918      min_mondoo_version: 5.15.0
   919      snippets:
   920      - query: |
   921          windows.firewall.rules.where ( displayName == "File and Printer Sharing (Echo Request - ICMPv4-In)") {
   922            enabled == 1
   923          }
   924        title: Check a specific Windows Firewall rule
   925    windows.firewall.profile:
   926      fields:
   927        allowInboundRules: {}
   928        allowLocalFirewallRules: {}
   929        allowLocalIPsecRules: {}
   930        allowUnicastResponseToMulticast: {}
   931        allowUserApps: {}
   932        allowUserPorts: {}
   933        defaultInboundAction: {}
   934        defaultOutboundAction: {}
   935        enableStealthModeForIPsec: {}
   936        enabled: {}
   937        instanceID: {}
   938        logAllowed: {}
   939        logBlocked: {}
   940        logFileName: {}
   941        logIgnored: {}
   942        logMaxSizeKilobytes: {}
   943        name: {}
   944        notifyOnListen: {}
   945      min_mondoo_version: 5.15.0
   946    windows.firewall.rule:
   947      fields:
   948        action: {}
   949        description: {}
   950        direction: {}
   951        displayGroup: {}
   952        displayName: {}
   953        edgeTraversalPolicy: {}
   954        enabled: {}
   955        enforcementStatus: {}
   956        instanceID: {}
   957        localOnlyMapping: {}
   958        looseSourceMapping: {}
   959        name: {}
   960        policyStoreSource: {}
   961        policyStoreSourceType: {}
   962        primaryStatus: {}
   963        status: {}
   964      min_mondoo_version: 5.15.0
   965    windows.hotfix:
   966      fields:
   967        caption: {}
   968        description: {}
   969        hotfixId: {}
   970        installedBy: {}
   971        installedOn: {}
   972      min_mondoo_version: 5.15.0
   973    windows.security:
   974      fields:
   975        products: {}
   976      min_mondoo_version: 5.35.0
   977    windows.security.health:
   978      fields:
   979        antiSpyware: {}
   980        antiVirus: {}
   981        autoUpdate: {}
   982        firewall: {}
   983        internetSettings: {}
   984        securityCenterService: {}
   985        uac: {}
   986      min_mondoo_version: 5.35.0
   987    windows.security.product:
   988      fields:
   989        guid: {}
   990        name: {}
   991        productState: {}
   992        signatureState: {}
   993        state: {}
   994        timestamp: {}
   995        type: {}
   996      is_private: true
   997      min_mondoo_version: 5.35.0
   998    yaml.path:
   999      fields:
  1000        filepath: {}
  1001        jsonpath: {}
  1002        result: {}
  1003      min_mondoo_version: 5.15.0
  1004    yum:
  1005      fields:
  1006        repos: {}
  1007        vars: {}
  1008      min_mondoo_version: 5.15.0
  1009    yum.repo:
  1010      fields:
  1011        baseurl: {}
  1012        enabled: {}
  1013        expire: {}
  1014        file:
  1015          min_mondoo_version: 5.18.0
  1016        filename: {}
  1017        id: {}
  1018        mirrors: {}
  1019        name: {}
  1020        pkgs: {}
  1021        revision: {}
  1022        size: {}
  1023        status: {}
  1024      min_mondoo_version: 5.15.0
  1025      snippets:
  1026      - query: |
  1027          yum.repo('salt-latest') {
  1028            enabled
  1029          }
  1030        title: Check if a yum repo is enabled