Add detection for Workday.#88
Conversation
|
Hi, |
|
Hi @righettod, Our apologies for the delay. We've reviewed your PR and understood that this only serves as a detection for Workday instances? We don't see any resources attached that indicate the existance of a Workday instance constitutes to a security misconfiguration. Looking forward to your feedback. Kind regards, |
|
Hi @ayoub-intigriti, No problem for the delay and thanks for the review. Indeed, by itself, having a instance on Workday it not an issue from a security perspective. The proposed config detect if the target name (often the company name) have a instance by checking the presence of a corresponding logging page. I think I have not correctly understand the purpose of the tool. I was thinking that the tool was also detecting instances of third party services used by a targeted name (company). My bad, you can close the PR if you consider it not relevant according to the purpose of the tool. Thanks again for the review. Have a nice day. |
|
Hi @righettod, Once again, thanks for the contribution! The Workday detection template looks good and we've decided to add it to the templates directory. Enjoy your week! Kind regards, |
|
Thank you very much for the update and the merging. Have a nice day 😉 |
Hi,
This PR add the configuration to detect an instance in the SaaS services offered by Workday.
Thanks for your feedback.