What is the purpose of the following file types: xccdf.xml, oval.xml, cpe-oval.xml, cpe-dictionary.xml?


Product Name

CIS-CAT Pro Assessor v4

Product Version

All

Date

Dec 1, 2021



 

Problem

I don’t know what these are: xccdf.xml, oval.xml, cpe-oval.xml, cpe-dictionary.xml?

Solution

xccdf.xml files contain benchmark recommendations.

oval.xml files work in conjunction with the xccdf.xml to help define what is collected from the system using standard OVAL.
cpe-oval.xml and cpe-dictionary.xml files exist for only platform benchmarks and help the assessment tool define the platform is right for the benchmark. If it isn't, the assessment may give a warning or produce no results.

 

Keywords;

Content by Label


Copyright © 2020

Center for Internet Security®