[Open-scap] Openscap for Windows

[Roberto Carratala Sanchez]

Hello SMEs,

IHAC is asking about Openscap for scanning Windows servers, and I only
found information in an [1] issue related and some STIG guides related to
Windows [2].

Is there any additional information or status about this topic?

Thanks in advance!

[1] https://github.com/OpenSCAP/openscap/issues/1280
[2]
https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cwindows

ROBERTO CARRATALÁ

CLOUD & AUTOMATION ARCHITECT

Red Hat


rcarr...@redhat.comM: +34-618-466-532 IM: rcarrata

___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Openscap for windows - roadmap

[Rafael CONTI]

37117309923186508&sdata=CUmKVH6WiXkGVmyz9ZR1HjN7DCeraYo2BJTTzsfa7Lc%3D&reserved=0
specification of all probes for windows : 
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOVAL-Community%2FOVAL%2Fblob%2Fmaster%2Foval-specifications%2Foval-windows-extension-specification.docx&data=02%7C01%7Crafael.conti%40se.com%7C3cde055eb57a4d19541208d77ed158e1%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637117309923186508&sdata=Tfb%2Bs2MHpraGEpm5M185OukRG7hDXAhWpdILBGpxEOw%3D&reserved=0

With those document, you can see implemented and missing probes in windows.
I did not find information about a roadmap/status for missing probes.

I am willing to share information about openscap and windows,

Rafael CONTI
Principal Engineer - Cybersecurity
Energy Management Business
Schneider Electric
France

*Please consider the environment before printing this e-mail


De : open-scap-list-boun...@redhat.com  De 
la part de Rao, Yarlagadda Srinivasa (MCS) Envoyé : lundi 2 décembre 2019 16:21 
À : open-scap-list@redhat.com Objet : [Open-scap] Openscap for windows - roadmap

[External email: Use caution with links and attachments] 


Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported.
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu

__
This email has been scanned by the Symantec Email Security.cloud service.
__

__
This email has been scanned by the Symantec Email Security.cloud service.
__

__
This email has been scanned by the Symantec Email Security.cloud service.
__


___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Openscap for windows - roadmap

[Rao, Yarlagadda Srinivasa (MCS)]

Thank you again Rafael for sharing the information.
We will go-through the link for the new probe implementation.

Regarding SCE, supported languages are Bash, Python, Perl, Ruby. 
All of them are works for Linux platform
We are looking the languages that are supported for windows platform. 

Regards,
Vasu
-Original Message-
From: Rafael CONTI [mailto:rafael.co...@se.com] 
Sent: Wednesday, December 11, 2019 5:52 PM
To: Rao, Yarlagadda Srinivasa (MCS) ; 
open-scap-list@redhat.com
Subject: RE: Openscap for windows - roadmap

Hello,

Regarding missing probes, major contribution to openscap was done during a 
master thesis 
(https://www.vutbr.cz/www_base/zav_prace_soubor_verejne.php?file_id=181284 ).

This document may help to understand openscap structure and how openscap works 
under the hood.
The document also mention briefly how to add new probe for Windows operating 
system (p35 - 4.6.1) and why there is two wmi test probe (p42 - 4.6.6).

There is also the Script Check Engine, which may help using script for running 
checks: https://www.open-scap.org/features/other-standards/sce/ 

Regards,
Rafael CONTI
Principal Engineer - Cybersecurity
E  rafael.co...@se.com
France

*Please consider the environment before printing this e-mail


-Message d'origine-
De : Rao, Yarlagadda Srinivasa (MCS) 
Envoyé : mardi 3 décembre 2019 04:50
À : Rafael CONTI ; open-scap-list@redhat.com Objet : RE: 
Openscap for windows - roadmap

[External email: Use caution with links and attachments]





Thank you Rafael for sharing the information.
Just wanted to understand are there any alternatives available (like calling 
python OR PowerShell scripts) for the missing probes?
Also wanted to know, is there any open source location to download complete 
oval and xccdf files for windows platform CIS benchmarks?

Regards,
Vasu
-Original Message-
From: Rafael CONTI [mailto:rafael.co...@se.com]
Sent: Monday, December 2, 2019 9:02 PM
To: Rao, Yarlagadda Srinivasa (MCS) ; 
open-scap-list@redhat.com
Subject: RE: Openscap for windows - roadmap

Hello Vasu,

I already search for this information, and I am actively following openscap 
integration for windows.

You can check this thread 
(https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOpenSCAP%2Fopenscap%2Fissues%2F1312&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=hhqyuAI5ZoOY3SK2HJo1kMIncMu9zLQqm%2BimPTaqCqk%3D&reserved=0
 ) which list both links:

source code of implemented windows probes : 
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOpenSCAP%2Fopenscap%2Ftree%2Fmaint-1.3%2Fsrc%2FOVAL%2Fprobes%2Fwindows&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=yXsyUQrEc5Ikhhe1mPfT0R5xfGAqrWWgaG6LNAXwRP4%3D&reserved=0
specification of all probes for windows : 
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOVAL-Community%2FOVAL%2Fblob%2Fmaster%2Foval-specifications%2Foval-windows-extension-specification.docx&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=IikbEHOVvlG5go3YDsQpkbo4WviDueJgf1wan%2FAyJjc%3D&reserved=0
 

With those document, you can see implemented and missing probes in windows.
I did not find information about a roadmap/status for missing probes.

I am willing to share information about openscap and windows,

Rafael CONTI
Principal Engineer - Cybersecurity
Energy Management Business
Schneider Electric
France

*Please consider the environment before printing this e-mail


De : open-scap-list-boun...@redhat.com  De 
la part de Rao, Yarlagadda Srinivasa (MCS) Envoyé : lundi 2 décembre 2019 16:21 
À : open-scap-list@redhat.com Objet : [Open-scap] Openscap for windows - roadmap

[External email: Use caution with links and attachments] 


Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported.
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu

__
This email has been scanned by the Symantec Email Security.cloud service.
__

__
This email has been scanned by the Symantec Email Security.cloud service.
__


___
Open-scap-list mailing list
Ope

Re: [Open-scap] Openscap for windows - roadmap

[Rafael CONTI]

Hello,

Regarding missing probes, major contribution to openscap was done during a 
master thesis 
(https://www.vutbr.cz/www_base/zav_prace_soubor_verejne.php?file_id=181284).

This document may help to understand openscap structure and how openscap works 
under the hood.
The document also mention briefly how to add new probe for Windows operating 
system (p35 - 4.6.1) and why there is two wmi test probe (p42 - 4.6.6).

There is also the Script Check Engine, which may help using script for running 
checks: https://www.open-scap.org/features/other-standards/sce/

Regards,
Rafael CONTI
Principal Engineer - Cybersecurity
E  rafael.co...@se.com
France

*Please consider the environment before printing this e-mail


-Message d'origine-
De : Rao, Yarlagadda Srinivasa (MCS)  
Envoyé : mardi 3 décembre 2019 04:50
À : Rafael CONTI ; open-scap-list@redhat.com
Objet : RE: Openscap for windows - roadmap

[External email: Use caution with links and attachments]





Thank you Rafael for sharing the information.
Just wanted to understand are there any alternatives available (like calling 
python OR PowerShell scripts) for the missing probes?
Also wanted to know, is there any open source location to download complete 
oval and xccdf files for windows platform CIS benchmarks?

Regards,
Vasu
-Original Message-
From: Rafael CONTI [mailto:rafael.co...@se.com]
Sent: Monday, December 2, 2019 9:02 PM
To: Rao, Yarlagadda Srinivasa (MCS) ; 
open-scap-list@redhat.com
Subject: RE: Openscap for windows - roadmap

Hello Vasu,

I already search for this information, and I am actively following openscap 
integration for windows.

You can check this thread 
(https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOpenSCAP%2Fopenscap%2Fissues%2F1312&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=hhqyuAI5ZoOY3SK2HJo1kMIncMu9zLQqm%2BimPTaqCqk%3D&reserved=0)
 which list both links:

source code of implemented windows probes : 
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOpenSCAP%2Fopenscap%2Ftree%2Fmaint-1.3%2Fsrc%2FOVAL%2Fprobes%2Fwindows&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=yXsyUQrEc5Ikhhe1mPfT0R5xfGAqrWWgaG6LNAXwRP4%3D&reserved=0
specification of all probes for windows : 
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOVAL-Community%2FOVAL%2Fblob%2Fmaster%2Foval-specifications%2Foval-windows-extension-specification.docx&data=02%7C01%7Crafael.conti%40se.com%7C408cdc260c344aa297c508d777a3d1a7%7C6e51e1adc54b4b39b5980ffe9ae68fef%7C0%7C1%7C637109417789427953&sdata=IikbEHOVvlG5go3YDsQpkbo4WviDueJgf1wan%2FAyJjc%3D&reserved=0

With those document, you can see implemented and missing probes in windows.
I did not find information about a roadmap/status for missing probes.

I am willing to share information about openscap and windows,

Rafael CONTI
Principal Engineer - Cybersecurity
Energy Management Business
Schneider Electric
France

*Please consider the environment before printing this e-mail


De : open-scap-list-boun...@redhat.com  De 
la part de Rao, Yarlagadda Srinivasa (MCS) Envoyé : lundi 2 décembre 2019 16:21 
À : open-scap-list@redhat.com Objet : [Open-scap] Openscap for windows - roadmap

[External email: Use caution with links and attachments] 


Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported.
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu

__
This email has been scanned by the Symantec Email Security.cloud service.
__

__
This email has been scanned by the Symantec Email Security.cloud service.
__


___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Openscap for windows - roadmap

[Rao, Yarlagadda Srinivasa (MCS)]

Thank you Rafael for sharing the information.
Just wanted to understand are there any alternatives available (like calling 
python OR PowerShell scripts) for the missing probes? 
Also wanted to know, is there any open source location to download complete 
oval and xccdf files for windows platform CIS benchmarks?

Regards,
Vasu
-Original Message-
From: Rafael CONTI [mailto:rafael.co...@se.com] 
Sent: Monday, December 2, 2019 9:02 PM
To: Rao, Yarlagadda Srinivasa (MCS) ; 
open-scap-list@redhat.com
Subject: RE: Openscap for windows - roadmap

Hello Vasu,

I already search for this information, and I am actively following openscap 
integration for windows.

You can check this thread (https://github.com/OpenSCAP/openscap/issues/1312) 
which list both links:

source code of implemented windows probes : 
https://github.com/OpenSCAP/openscap/tree/maint-1.3/src/OVAL/probes/windows
specification of all probes for windows : 
https://github.com/OVAL-Community/OVAL/blob/master/oval-specifications/oval-windows-extension-specification.docx

With those document, you can see implemented and missing probes in windows.
I did not find information about a roadmap/status for missing probes.

I am willing to share information about openscap and windows,

Rafael CONTI
Principal Engineer - Cybersecurity
Energy Management Business
Schneider Electric
France

*Please consider the environment before printing this e-mail


De : open-scap-list-boun...@redhat.com  De 
la part de Rao, Yarlagadda Srinivasa (MCS) Envoyé : lundi 2 décembre 2019 16:21 
À : open-scap-list@redhat.com Objet : [Open-scap] Openscap for windows - roadmap

[External email: Use caution with links and attachments] 

 
Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported. 
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu

__
This email has been scanned by the Symantec Email Security.cloud service.
__


___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Openscap for windows - roadmap

[Rafael CONTI]

Hello Vasu,

I already search for this information, and I am actively following openscap 
integration for windows.

You can check this thread (https://github.com/OpenSCAP/openscap/issues/1312) 
which list both links:

source code of implemented windows probes : 
https://github.com/OpenSCAP/openscap/tree/maint-1.3/src/OVAL/probes/windows
specification of all probes for windows : 
https://github.com/OVAL-Community/OVAL/blob/master/oval-specifications/oval-windows-extension-specification.docx

With those document, you can see implemented and missing probes in windows.
I did not find information about a roadmap/status for missing probes.

I am willing to share information about openscap and windows,

Rafael CONTI
Principal Engineer - Cybersecurity
Energy Management Business
Schneider Electric
France

*Please consider the environment before printing this e-mail


De : open-scap-list-boun...@redhat.com  De 
la part de Rao, Yarlagadda Srinivasa (MCS)
Envoyé : lundi 2 décembre 2019 16:21
À : open-scap-list@redhat.com
Objet : [Open-scap] Openscap for windows - roadmap

[External email: Use caution with links and attachments]

 
Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported. 
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu

__
This email has been scanned by the Symantec Email Security.cloud service.
__


___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] Openscap for windows - roadmap

[Rao, Yarlagadda Srinivasa (MCS)]

Hi,

Where can find more information on Openscap for windows.
Right now I could find very limited no of oval objects are supported.
I am looking for how many oval objects (probes) are completely implemented and 
how many are in work in progress and not yet implemented for windows.
Can someone help me to find out this?

Thanks & Regards,
Vasu
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] openscap for windows?

[Maurizio Pagani]

Hi,



i need to know if is possible scan windows machine, and if is possible to
import scap report (for example a report that generate a windows machine) to
satellite.



Can somone help me?



Thanks



Maurizio Pagani





---
Questa e-mail è stata controllata per individuare virus con Avast antivirus.
https://www.avast.com/antivirus
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] openscap for windows?

[Jan Cerny]

Hi,

OpenSCAP can be run on Windows. The Windows installer can be downloaded from:
https://github.com/OpenSCAP/openscap/releases/download/1.3.1/OpenSCAP-1.3.1-win32.msi

However, the Windows version it contains only the 4 most used probes,
so it can scan only a few checks.

There is no integration with Satellite.


Regards

On Thu, Jul 11, 2019 at 8:49 AM Maurizio Pagani  wrote:
>
>
>
> Hi,
>
>
>
> i need to know if is possible scan windows machine, and if is possible to 
> import scap report (for example a report that generate a windows machine) to 
> satellite.
>
>
>
> Can somone help me?
>
>
>
> Thanks
>
>
>
> Maurizio
>
>
>
> ___
> Open-scap-list mailing list
> Open-scap-list@redhat.com
> https://www.redhat.com/mailman/listinfo/open-scap-list



-- 
Jan Černý
Security Technologies | Red Hat, Inc.

___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] openscap for windows?

[Maurizio Pagani]

Hi,



i need to know if is possible scan windows machine, and if is possible to
import scap report (for example a report that generate a windows machine) to
satellite.



Can somone help me?



Thanks



Maurizio





---
Questa e-mail è stata controllata per individuare virus con Avast antivirus.
https://www.avast.com/antivirus
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] openscap for windows?

[Maurizio Pagani]

Hi everybody,



Is possible use openscap for windows?

I'm searching some things online, but anything tell me how
install/configure/execute openscap on windows

I downloaded OpenScap WorkBench, but there is not the windows content (only
for Linux distro)

but i need to know if is possible download the content for windows and add
to openscap workbench (windows edition)





thanks in advance for your support



Maurizio





---
Questa e-mail è stata controllata per individuare virus con Avast antivirus.
https://www.avast.com/antivirus
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] openscap for windows?

[Matěj Týč]

Hello, it is technically possible to compile and execute the OpenSCAP 
scanner itself on Windows natively, but the ComplianceAsCode project 
doesn't supply Windows content. In other words, if the content is what 
holds you back, we can't help you with that.


It looks like that you are able to run the scanner, but just to be sure, 
you can grab a build of OpenSCAP scanner here:


https://github.com/OpenSCAP/openscap/releases/download/1.3.1/OpenSCAP-1.3.1-win32.msi

On 04. 07. 19 8:53, Maurizio Pagani wrote:


Hi everybody,

Is possible use openscap for windows?

I'm searching some things online, but anything tell me how 
install/configure/execute openscap on windows


I downloaded OpenScap WorkBench, but there is not the windows content 
(only for Linux distro)


but i need to know if is possible download the content for windows and 
add to openscap workbench (windows edition)


thanks in advance for your support

*Maurizio*


 
	Mail priva di virus. www.avast.com 
 



<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

[Open-scap] openscap for windows?

[Maurizio Pagani]

Hi everybody,



Is possible use openscap for windows?

I'm searching some things online, but anything tell me how
install/configure/execute openscap on windows

I downloaded OpenScap WorkBench, but there is not the windows content (only
for Linux distro)

but i need to know if is possible download the content for windows and add
to openscap workbench (windows edition)





thanks in advance for your support



Maurizio





---
Questa e-mail è stata controllata per individuare virus con Avast antivirus.
https://www.avast.com/antivirus
___
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list