shellfirm 0.3.9

`shellfirm` will intercept any risky patterns (default or defined by you) and prompt you a small challenge for double verification, kinda like a captcha for your terminal.
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
- from: mongodb
  test: (?i)mongo(?:sh)?.*--eval.*drop
  description: "Executing drop operations via MongoDB shell."
  id: mongodb:drop
  severity: Critical
# Interactive session patterns (for shellfirm wrap)
- from: mongodb
  test: (?i)db\.[\w-]+\.drop\(\)
  id: mongodb:interactive_drop_collection
  severity: Critical
  description: "Dropping a MongoDB collection will permanently delete all its data."
- from: mongodb
  test: (?i)db\.dropDatabase\(\)
  id: mongodb:interactive_drop_database
  severity: Critical
  description: "Dropping a MongoDB database will permanently delete all its data."