Commit 4425565447
Unsigned
Layout: unified · split
db_passwords/sql/data.csv added +9
| @@ -0,0 +1,9 @@ | ||
| 1 | name,principal_id,sid,type,type_desc,is_disabled,create_date,modify_date,default_database_name,default_language_name,credential_id,is_policy_checked,is_expiration_checked,password_hash,IsMustChange,IsLocked,LockoutTime,PasswordLastSetTime,IsExpired,BadPasswordCount,BadPasswordTime,HistoryLength | |
| 2 | user1,1,,S,SQL_LOGIN,0,2023-01-15 10:35:00,2023-01-15 10:35:00,master,us_english,NULL,1,0,0x01004086CEB6772AE2356381B9B069D4E02C0185D5A06CFA3822,0,0,,2023-01-15 10:35:00,0,0,,5 | |
| 3 | user2,267,,S,SQL_LOGIN,0,2023-02-20 20:49:00,2023-02-20 20:49:00,master,us_english,NULL,0,0,0x01003E3A7A6F88A8F548540ECB2043946AC2545120424CCD8782,1,0,,2023-02-20 20:49:00,0,1,2023-02-20 20:50:00,3 | |
| 4 | user3,268,,S,SQL_LOGIN,0,2023-03-10 11:20:00,2023-03-10 11:20:00,Adminserver,us_english,NULL,1,0,0x010042516769FBC191A67840731CB36B41EFDACC97BE8264281F,0,0,,2023-03-10 11:20:00,0,0,,4 | |
| 5 | user4,269,,S,SQL_LOGIN,0,2023-04-01 10:40:00,2023-04-01 11:32:00,Adminserver,us_english,NULL,1,0,0x01005F3B351B26E2DB7C7FD3C7ED02B3FD2EDC09BB2BF13DA3E5,0,1,2023-04-01 11:32:00,2023-04-01 10:40:00,0,3,2023-04-01 11:30:00,2 | |
| 6 | user5,270,,S,SQL_LOGIN,0,2023-05-05 12:33:00,2023-05-05 12:33:00,master,us_english,NULL,1,0,0x0100AE15D55972BB3D6C6283921711CD4A208747888BEEFED71B,0,0,,2023-05-05 12:33:00,0,0,,6 | |
| 7 | user6,272,,S,SQL_LOGIN,0,2023-06-15 11:46:00,2023-06-15 11:46:00,Adminserver,us_english,NULL,1,1,0x0100F12FAE790FCE0FF356A0948211AE4052653503E1BBC28FAB,0,0,,2023-06-15 11:46:00,0,0,,7 | |
| 8 | user7,279,,S,SQL_LOGIN,0,2023-07-20 12:50:00,2023-07-20 12:50:00,Adminserver,us_english,NULL,1,1,0x01004856A222264E62219236AB6AC7E5B622F1E53D1CCA2AF9B8,0,0,,2023-07-20 12:50:00,0,0,,8 | |
| 9 | user8,284,,S,SQL_LOGIN,0,2023-08-25 13:56:00,2023-08-25 13:56:00,master,us_english,NULL,1,1,0x0100723BEDBE69779CD3087C0E60AD69C33CC7E969F78DA2498A,0,0,,2023-08-25 13:56:00,0,0,,9 | |
| \ No newline at end of file | ||
db_passwords/sql/test.py +25 −24
| @@ -4,27 +4,23 @@ Checks SQL Server user data for compliance with Windows policies. | ||
| 4 | 4 | |
| 5 | 5 | # Import packages |
| 6 | 6 | import pandas as pd |
| 7 | from io import StringIO | |
| 8 | ||
| 9 | # Sample data as a CSV string | |
| 10 | data = """name,principal_id,sid,type,type_desc,is_disabled,create_date,modify_date,default_database_name,default_language_name,credential_id,is_policy_checked,is_expiration_checked,password_hash,IsMustChange,IsLocked,LockoutTime,PasswordLastSetTime,IsExpired,BadPasswordCount,BadPasswordTime,HistoryLength | |
| 11 | user1,1,,S,SQL_LOGIN,0,2023-01-15 10:35:00,2023-01-15 10:35:00,master,us_english,NULL,1,0,0x01004086CEB6772AE2356381B9B069D4E02C0185D5A06CFA3822,0,0,,2023-01-15 10:35:00,0,0,,5 | |
| 12 | user2,267,,S,SQL_LOGIN,0,2023-02-20 20:49:00,2023-02-20 20:49:00,master,us_english,NULL,0,0,0x01003E3A7A6F88A8F548540ECB2043946AC2545120424CCD8782,1,0,,2023-02-20 20:49:00,0,1,2023-02-20 20:50:00,3 | |
| 13 | user3,268,,S,SQL_LOGIN,0,2023-03-10 11:20:00,2023-03-10 11:20:00,Adminserver,us_english,NULL,1,0,0x010042516769FBC191A67840731CB36B41EFDACC97BE8264281F,0,0,,2023-03-10 11:20:00,0,0,,4 | |
| 14 | user4,269,,S,SQL_LOGIN,0,2023-04-01 10:40:00,2023-04-01 11:32:00,Adminserver,us_english,NULL,1,0,0x01005F3B351B26E2DB7C7FD3C7ED02B3FD2EDC09BB2BF13DA3E5,0,1,2023-04-01 11:32:00,2023-04-01 10:40:00,0,3,2023-04-01 11:30:00,2 | |
| 15 | user5,270,,S,SQL_LOGIN,0,2023-05-05 12:33:00,2023-05-05 12:33:00,master,us_english,NULL,1,0,0x0100AE15D55972BB3D6C6283921711CD4A208747888BEEFED71B,0,0,,2023-05-05 12:33:00,0,0,,6 | |
| 16 | user6,272,,S,SQL_LOGIN,0,2023-06-15 11:46:00,2023-06-15 11:46:00,Adminserver,us_english,NULL,1,1,0x0100F12FAE790FCE0FF356A0948211AE4052653503E1BBC28FAB,0,0,,2023-06-15 11:46:00,0,0,,7 | |
| 17 | user7,279,,S,SQL_LOGIN,0,2023-07-20 12:50:00,2023-07-20 12:50:00,Adminserver,us_english,NULL,1,1,0x01004856A222264E62219236AB6AC7E5B622F1E53D1CCA2AF9B8,0,0,,2023-07-20 12:50:00,0,0,,8 | |
| 18 | user8,284,,S,SQL_LOGIN,0,2023-08-25 13:56:00,2023-08-25 13:56:00,master,us_english,NULL,1,1,0x0100723BEDBE69779CD3087C0E60AD69C33CC7E969F78DA2498A,0,0,,2023-08-25 13:56:00,0,0,,9 | |
| 19 | """ | |
| 20 | 7 | |
| 21 | 8 | # Load the data into a pandas DataFrame |
| 22 | df = pd.read_csv(StringIO(data)) | |
| 9 | df_input = pd.read_csv('./data.csv') | |
| 23 | 10 | |
| 24 | 11 | # Function to apply rules and generate report |
| 25 | 12 | def apply_rules_and_report(df): |
| 13 | """ | |
| 14 | Apply defined rules against the input data. | |
| 15 | ||
| 16 | Parameters: | |
| 17 | df (pandas.DataFrame): SQL login data | |
| 18 | ||
| 19 | Returns: | |
| 20 | report (list): List of dictionaries containing test results | |
| 21 | """ | |
| 26 | 22 | report = [] |
| 27 | for index, row in df.iterrows(): | |
| 23 | for _, row in df.iterrows(): | |
| 28 | 24 | result = { |
| 29 | 25 | 'Name': row['name'], |
| 30 | 26 | 'Type Check': '', |
| @@ -46,29 +42,34 @@ def apply_rules_and_report(df): | ||
| 46 | 42 | # Check if password policy is enforced |
| 47 | 43 | if row['is_policy_checked'] == 1: |
| 48 | 44 | result['Policy Check'] = 'PASS' |
| 49 | result['Reason'] += ' Password policy is enforced. Reviewer to check the assigned policy.' | |
| 45 | result['Reason'] += '''Password policy is enforced. Reviewer to | |
| 46 | check the assigned policy.''' | |
| 50 | 47 | else: |
| 51 | 48 | result['Policy Check'] = 'FAIL' |
| 52 | result['Reason'] += ' Password policy is not enforced.' | |
| 53 | ||
| 49 | result['Reason'] += 'Password policy is not enforced.' | |
| 50 | ||
| 54 | 51 | # Check if password expiration is enforced |
| 55 | 52 | if row['is_expiration_checked'] == 1: |
| 56 | 53 | result['Expiration Check'] = 'PASS' |
| 57 | result['Reason'] += ' Password expiration is enforced. Reviewer to check the expiration policy.' | |
| 54 | result['Reason'] += '''Password expiration is enforced. Reviewer to | |
| 55 | check the expiration policy.''' | |
| 58 | 56 | else: |
| 59 | 57 | result['Expiration Check'] = 'FAIL' |
| 60 | result['Reason'] += ' Password expiration is not enforced.' | |
| 61 | ||
| 58 | result['Reason'] += 'Password expiration is not enforced.' | |
| 59 | ||
| 62 | 60 | report.append(result) |
| 63 | ||
| 61 | ||
| 64 | 62 | return report |
| 65 | 63 | |
| 66 | 64 | # Main function to run the script |
| 67 | 65 | def main(): |
| 66 | """ | |
| 67 | Apply defined rules against the input data and print the results. | |
| 68 | """ | |
| 68 | 69 | # Apply rules and generate report |
| 69 | report = apply_rules_and_report(df) | |
| 70 | report = apply_rules_and_report(df_input) | |
| 70 | 71 | report_df = pd.DataFrame(report) |
| 71 | ||
| 72 | ||
| 72 | 73 | # Print the report |
| 73 | 74 | print(report_df) |
| 74 | 75 | |