Control: 8.4 Ensure that Webshell detection is enabled on all web servers
Description
Enable webshell detection on all web servers to scans periodically the Web directories for detecting webshells on servers.
Remediation
Using the management console:
- Logon to Security Center Console.
- Select
Settings. - Click
General. - Click
Manage in Webshell Detection. - Add all web servers.
Default Value:
Not enabled.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v200_8_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v200_8_4 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;