Agentless scanning on Google Cloud platform

Hi All, Hope you are doing well. Anyone using Agentless scanning for their GCP env? I have a GCP environment with some restrictions ie org policies applied for skip default network creation, external IPs not allowed (but exempted for test project). the service account has appropriate permission (Permissions by feature (paloaltonetworks.com) fo...

Unable to get container defender to detect denied IP address on host

For some reason I am unable to see any events being generated for denied IP addresses when running a container defender on one of our hosts. Did the following: installed a container defender on a linux host. created a host policy that targets the host where the container defender runs. Added google dns (8.8.8.8) to list of denied IP addresses...

how to hide the underlying OS vulnerabilities for a container as we are running aks

We are using AKS and seeing lot of Vulnerabilities on the OS level which are Azure's responsibility to remediate. So how do we suppress seeing these OS vulnerabilities on the Vulnerbility Explorer or when we click an image within a container?

cybersecurity

Prisma cloud[ERROR] Runtime.ImportModuleError: Unable to import module 'twistlock': Failed to import module: lambda_function Traceback (most recent ca

We are getting the following error in our Lambdas, [ERROR] Runtime.ImportModuleError: Unable to import module 'twistlock': Failed to import module: lambda_function Traceback (most recent call last): After troubleshooting, our team identifies that is due Prisma Defender, apparently the lambda handler was changed to twistlock.handler.

In the Prisma i can see vulnerabilities pointing on files that are not there anymore

Hello everyone, In the Prisma compliance check, I see some vulnerabilities that seem outdated. For example, Prisma reports a vulnerable file that does not exist and, most likely, it's not there for a while. Is it a bug, or I'm missing something? -Andrey Please note you are posting a public message where community members and exp...

Show (X;Y) doesn't work trying to combine aws-ec2-describe-security-groups and aws-ec2-describe-vpcs

Hi All, I would really appreciate some help here, as I have tried hundreds of iterations to get this right and it isn't working. I followed the RQL guidance of the RQL example library, but even a basic example doesn't work with show(X;|Y;) I tried the following and it doesn't work: show (X;|Y;) - command doesn't work config from cloud.resource w...

Tenable.io x Compute Defender Agent - Prisma Cloud

Hello everybody Please, would anyone have a comparison table between the tenable.io solution and the compute defender from Prisma cloud solution for the vulnerability analysis? Tks

Issue with nat policies in Prisma ION device

Here is the error on this issue, I cannot enable the NAT rule after upgrading the ION 2K device to the 5.4.13 version. NAT extension cannot be enabled for the device having support for nat policy. Having an issue with NAT extension cannot be enabled for the device having support