Hi Josh, Thanks, for the introduction! Does that mean you will be supporting the SCAP-on-Apple project on the Apple side of things? As for me, I work on the OVAL project at MITRE and will try to help and coordinate this effort from the OVAL side of things (e.g. introducing new tests in OVAL, OVAL content best practices, etc.). Thanks, Danny From: Josh Wisenbaker [mailto:dubs@apple.com] Sent: Friday, May 31, 2013 1:46 PM To: Haynes, Dan Cc: OVAL; scap-on-apple-dev@lists.macosforge.org Subject: Re: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner? Hi Danny, I suppose a bit of an introduction from myself would help here. I'm Josh Wisenbaker and I'm a peer of Shawn's at Apple on the CE team. I cover the client management and deployment subject matter and do a bit of Mac App Dev coverage as well. So while I'm not a contractor, I have done plenty of work over the years with gov and mil accounts. Josh -- Josh Wisenbaker Consulting Engineer - Apple U.S. Commercial and Governmental Sales dubs@apple.com On May 31, 2013, at 12:30 PM, "Haynes, Dan" <dhaynes@mitre.org> wrote: Hi Josh, I guess I forgot to ask, are you supporting the U.S. government as a contractor? Thanks, Danny From: Haynes, Dan Sent: Friday, May 31, 2013 12:03 PM To: 'Josh Wisenbaker'; <mailto:scap-on-apple-dev@lists.macosforge.org> scap-on-apple-dev@lists.macosforge.org Subject: RE: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner? Hi Josh, The SPAWAR SCC tool is limited to U.S. government agencies and supporting contractors. I will put you in touch with the SPAWAR team to see if you are eligible. If not, there are quite a few other tools available (some commercial and some open source). You can find them at the following links. <http://nvd.nist.gov/scapproducts.cfm> http://nvd.nist.gov/scapproducts.cfm <http://oval.mitre.org/adoption/productlist.html> http://oval.mitre.org/adoption/productlist.html Thanks, Danny From: <mailto:scap-on-apple-dev-bounces@lists.macosforge.org> scap-on-apple-dev-bounces@lists.macosforge.org [ <mailto:scap-on-apple-dev-bounces@lists.macosforge.org> mailto:scap-on-apple-dev-bounces@lists.macosforge.org] On Behalf Of Josh Wisenbaker Sent: Friday, May 31, 2013 11:52 AM To: <mailto:scap-on-apple-dev@lists.macosforge.org> scap-on-apple-dev@lists.macosforge.org Subject: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner? Does anyone have access to the SCC 3.1 that is posted on the DISA page here? < <http://iase.disa.mil/stigs/scap/index.html> http://iase.disa.mil/stigs/scap/index.html>
From the screenshots I've seen it looks like a Java tool.
Josh -- Josh Wisenbaker Consulting Engineer - Apple U.S. Commercial and Governmental Sales <mailto:dubs@apple.com> dubs@apple.com