I want to export OVAL and XCCDF content for a CIS Benchmark® that is no longer integrated into the available Assessor release. How do I find the files?


Product Name

CIS Benchmarks®

Product Version

All

Date

May 7, 2021



 

Problem

I want to export OVAL and XCCDF content for a CIS Benchmark. How do I find the files?

 

Solution

Please, note: there are number of Benchmarks that do not include the necessary XCCDF and Oval files to be integrated into CIS-CAT Pro Assessor. For a comprehensive list of what Benchmarks are currently supported in CIS-CAT Pro Assessor, please see our Benchmarks Coverage Guide

 

  1. You will need to be a SecureSuite® Member

  2. Join the Community for the Benchmark file you would like to export and integrate into CIS-CAT Pro Assessor.

    1. As an example: If you wish to export the OVAL and XCCDF content for Windows Server 2019. Join the CIS Microsoft Windows Benchmarks Workbench Community

  3. Then, navigate to the WorkBench Benchmark page which correlates to the Assessor scan you would like to run and create a Forked Benchmark. As an example:

    1. Search for the CIS Microsoft Windows 10 Enterprise Release 20H2 Benchmark v1.10.0.

    2. Select “Fork” in the top menu. Then click “Submit”

    3. Wait for the duplication process to complete

  4. Navigate to your Organization’s Dashboard & locate your newly forked Benchmark

  5. On the left panel you will see the Export button, click on this and select which files you would like to download. Choose XCCDF + OVAL (.zip) and select “Generate”

  6. Once generated, download and unzip those files into the Assessor-CLI\benchmarks subfolder

 

If you are a non-member, you can only download the pdf format of the benchmark from workbench. You need to be a CIS SecureSuite member to download OVAL and XCCDF files from workbench.

Keywords; OVAL XCCDF

Content by Label


Copyright © 2020

Center for Internet Security®