Add Prowler detection coverage to 64 attack paths#10
Merged
sethsec merged 2 commits intoDataDog:mainfrom Feb 13, 2026
Merged
Conversation
Add Prowler privilege escalation detection links following the merge of prowler-cloud/prowler#9922 (commit eabe488), which added 50+ patterns from pathfinding.cloud to Prowler's detection engine. Changes: - Added new prowler URLs to 41 paths (14 with existing detectionTools, 27 with new detectionTools sections) - Updated prowler URLs on 23 paths to reference the merged commit - Skipped ecs-006 (not in Prowler) and sts-001 (commented out in Prowler)
andoniaf
requested review from
andrewkrug,
christophetd,
raesene and
sethsec
as code owners
Contributor
Author
|
And I'm already working on adding the missing |
sethsec
previously approved these changes
Feb 13, 2026
Collaborator
|
I'm so happy to see these new paths added to Prowler @andoniaf, that is so cool! Thank you so much for this PR as well! |
sethsec
approved these changes
Feb 13, 2026
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What type of PR is this? (check all applicable)
Description
Adds Prowler detection tool links to 64 attack paths following the merge of prowler-cloud/prowler#9922 (commit
eabe488), which added 50+ privilege escalation patterns from pathfinding.cloud to Prowler's detection engine.64 files changed across 3 categories:
prowler:URLs to reference the new merged commit hash + correct line numbersprowler:entry to existingdetectionToolssectionsdetectionToolssections withprowler:URLsSkipped (not covered by Prowler):
ecs-006(ecs:ExecuteCommand) — Not in Prowlersts-001(sts:AssumeRole) — Commented out in Prowler, needs resource/condition validation firstHow to reproduce and testing
See the Adding a New Privilege Escalation Path section of our Contributing Guide to see how to test your changes locally.