SCAP - A Primer and Customization

Explore the fundamentals and customization of Security Content Automation Protocol (SCAP) in this comprehensive conference talk from SecureWV/Hack3rcon 2017. Delve into SCAP basics, available checklists, and key components while learning about XCCDF content and viewing guides. Witness practical demonstrations of OpenSCAP usage, result interpretation, and vulnerability scanning. Discover the National Checklists Repository and its tiered program. Gain insights into SCAP tools and customization techniques, including using SCAP Workbench and manual methods. Understand SCAP remediation processes, with a focus on installation and real-world applications. Access valuable resources through provided links to enhance your SCAP knowledge and implementation skills.

Intro
Disclaimers
What is SCAP?
So What?
Some SCAP Basics
Available SCAP Checklists
Key SCAP Components
More on SCAP Components
Sample XCCDF Content
Viewing Content as Guide
Use: Getting Started
OpenSCAP Info Command
Show me some stuff (demo)
SCAP Results
SCAP OVAL Results
National Checklists Repository (NCR)
National Checklist Program Tiers
SCAP Vulnerability Scanning
SCAP Tools
Customization Basics
Customization using SCAP Workbench
Tailoring File
Manual Customization
XSL & SCAP
SCAP Remediation
Remediation at Install
Remediation In Action (demo)
Links