prowler-attack-paths-query

To generate openCypher queries for Prowler Attack Paths, you specify the cloud security risk to analyze, such as privilege escalation or network exposure. The Skill outputs valid openCypher Version 9 queries targeting your cloud infrastructure graph.

Yes, Prowler Attack Paths query generation supports both Neo4j and Neptune. It creates openCypher Version 9 queries that are compatible with both graph databases to ensure flexible deployment across different cloud infrastructure graph environments.

To find AWS principals that can escalate privileges using openCypher, you generate a query targeting the Cartography schema to trace role-passing paths to EC2 instances. This visualizes the attack path and detects specific misconfigurations in your cloud environment.

The Cartography schema provides the structural data model for cloud security graph analysis when generating openCypher queries. It maps relationships between AWS principals, EC2 instances, and other resources to accurately identify attack paths and misconfigurations.

Yes, you can detect network exposure and misconfigurations in cloud environments with openCypher. The generated queries traverse your infrastructure graph to pinpoint exposed resources and configuration flaws that could lead to privilege escalation.

A key limitation of using openCypher for Prowler Attack Paths is the strict dependency on openCypher Version 9 compatibility, which requires either Neo4j or Neptune. Additionally, accurate risk detection requires your graph data to align with the Cartography schema.