Tools

1. ScoutSuite

2. prowler

3. CIS Benchmarks - Manual Review after downloading latest documents

4. trivy - scan docker misconfigurations, filesystem & firmware for cves (SCA - Static Component Analysis tool)

5. cve-bin-tool - scan filesystem/directories, firmware for cves