MongoDB with STIG

Scripts used to verify, fix, or mitigate compliance checks (usually for DISA STIG checks). Can be considered server hardening.

Ansible role for Centos7 DISA STIG

InformationSystemsSecurityOfficerTools (ISSOTs)

***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and converts them into InSpec control 'stubs' to help ease the pain of InSpec profile developers everywhere.

DEPRECATED: A small parser to take the JSON full output of an InSpec profile and create/update the DISA Checklist file.

Hardening for Linux Servers

OSCAP/OVAL reporting

A Mongo-based version of Heimdall (Deprecated)

(WIP) An InSpec Profile for evaluating VMware ESXi 6.5 to the DISA Version 1 Release 1 using PowerCLI

Applies DISA STIGS GPO Policy's offline

Puppet module that hardens Windows Server to DoD STIG compliance

Hardened Web Server using ansible

A single page java-script implementation of the MITRE Heimdall InSpec results viewer

Utility to copy STIG Viewer Checklist

🦅 DISA STIG automation module for SQL Server

STIG for macOS Mojave - audit and remediation with scripts and Configuration Profiles

compliance as code

Ansible role for the Windows 2012 Domain Controller STIG

Ansible role for the Windows 2008 Member Server STIG