Can I automate CIS-CAT Pro Assessor v4 to run Assessments?
Product Name
CIS-CAT Pro Assessor
Product Version
v4.x.x
Date
Apr 26, 2023
Problem
Can we schedule Assessment scans for Linux and/or Windows targets with the CIS-CAT PRO Assessor v4?
Solution
Yes, you can! By using tools which you may already have access to such as Scheduled Tasks, GPOs, or a script you created, you can automate CIS-CAT Pro Assessor.
Using a script or a scheduler tool you can set the CIS-CAT Pro Assessor to run as frequently or as infrequently as you would like. If the CIS-CAT Pro Assessor scans are being scheduled to run from a single system only, you likely won’t need to set up a Group Policy for it - you can instead use the built-in Windows Task Scheduler or similar Linux based tool/ program.
We will not be able to help with setting up those tasks, reviewing any scripts you may have created, or creating any scripts on your behalf.
While we do not offer specific set-up instructions as it has to do with your internal configurations, we do have this 3rd party information available to help you start the process. We recommend having a SysAdmin or someone experienced with tasks to start/ maintain this process.
Configuring the Scheduled Task via Group Policy
Various products and tools can be utilized to schedule this task. In a Windows environment, tasks are often scheduled using the Group Policy feature of Windows. For example, refer to an unofficial site (https://www.faqforge.com/windows-server-2016/configure-scheduled-task-item-using-group-policy/ ) on instructions to schedule a task using Group Policy.
Ensure that the user selected to run the task has the highest privilege. When scheduling the task, refer to the fully qualified domain name or IP address of the CIS-CAT Pro Assessor Host Server.
If you would like to bring this question to the Community to see if anyone has additional suggestions, you can do so by:
Join the CIS Workbench : CIS Members : CIS-CAT Discussion Community if you have not already
Search for, or start, a discussion around this topic. Since our Benchmarks are community driven, it is possible someone has already started a similar discussion.
These workbench discussions are with other community members and occasionally Developers and Benchmark Leads. They take suggestions and concerns into consideration as they develop future Benchmark and Benchmark revisions. It isn’t a ticketing-based system and responses are not guaranteed.
Set up notifications for the community and interact with other users who may be exploring similar options.
Keywords; Automation Scheduled Tasks Assessor
Content by Label