A toolkit for STIG and SCAP work -- Assists with needed documentation for an ATO

Example import and data enrichment of IASE Windows Server 2016 STIG v1r7 into Scapolite

Example import and data enrichment of CIS Security Benchmark for Google Chrome (v2.0) into Scapolite

random crap tools for helping with STIGs

SCAP OVAL Definition for SUSE Linux Enterprise Server 11

REST API build on top of greenbone-scap

ResumeRevealer is an advanced tool designed for HR professionals, recruiters, and hiring managers to streamline the process of resume parsing and candidate evaluation. It offers a comprehensive solution to extract valuable insights from diverse resume formats, standardize job titles, and mine detailed skills from project descriptions.

Python library for CVE and CPE Infomation

Compliance and Vulnerability scanning tool for containers

rSCAP is a standardized compliance checking solution and auditing script used with Redhat based Linux systems.

Compare the filesystem tree of a Debian package to the current filesystem tree, printing unified diffs for files that differ

This repository is part of the paper "Better Safe Than Sorry! Automated Identification of Breaking Security-Configuration Rules" accepted at the "4th ACM/IEEE International Conference on Automation of Software Test (AST)". https://conf.researchr.org/home/ast-2023

OSCAP/OVAL reporting

This repository is part of the paper "Automated Identification of Security-Relevant Configuration Settings Using NLP" accepted at the Industry Showcase track at the 37th IEEE/ACM International Conference on Automated Software Engineering (ASE). https://conf.researchr.org/track/ase-2022/ase-2022-industry-showcase.

This repository is part of the paper Automated Implementation of Windows-related Security-Configuration Guides presented at the 35th IEEE/ACM International Conference on Automated Software Engineering.

This repository is part of the paper "Hardening with Scapolite: a DevOps-based Approach for Improved Authoring and Testing of Security-Configuration Guides in Large-Scale Organizations" presented at the 12th ACM Conference on Data and Application Security and Privacy (CODASPY). http://www.codaspy.org/2022/

This repository is part of the paper Automated Implementation of Windows-related Security-Configuration Guides presented at the 35th IEEE/ACM International Conference on Automated Software Engineering.

A pipeline that creates hardened AWS AMIs based on compliance rules and remediation scripts.