Hi Josh,
Thanks, for the introduction! Does that mean you will be supporting the SCAP-on-Apple project on the Apple side of things?
As for me, I work on the OVAL project at MITRE and will try to help and coordinate this effort from the OVAL side of things (e.g. introducing new tests in OVAL, OVAL content best practices, etc.).
Thanks,
Danny
From: Josh Wisenbaker [mailto:dubs@apple.com]
Sent: Friday, May 31, 2013 1:46 PM
To: Haynes, Dan
Cc: OVAL; scap-on-apple-dev@lists.macosforge.org
Subject: Re: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
Hi Danny,
I suppose a bit of an introduction from myself would help here.
I'm Josh Wisenbaker and I'm a peer of Shawn's at Apple on the CE team. I cover the client management and deployment subject matter and do a bit of Mac App Dev coverage as well.
So while I'm not a contractor, I have done plenty of work over the years with gov and mil accounts.
Josh
On May 31, 2013, at 12:30 PM, "Haynes, Dan" <dhaynes@mitre.org> wrote:
Hi Josh,
I guess I forgot to ask, are you supporting the U.S. government as a contractor?
Thanks,
Danny
From: Haynes, Dan
Sent: Friday, May 31, 2013 12:03 PM
To: 'Josh Wisenbaker'; scap-on-apple-dev@lists.macosforge.org
Subject: RE: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
Hi Josh,
The SPAWAR SCC tool is limited to U.S. government agencies and supporting contractors. I will put you in touch with the SPAWAR team to see if you are eligible.
If not, there are quite a few other tools available (some commercial and some open source). You can find them at the following links.
Thanks,
Danny
From: scap-on-apple-dev-bounces@lists.macosforge.org [mailto:scap-on-apple-dev-bounces@lists.macosforge.org] On Behalf Of Josh Wisenbaker
Sent: Friday, May 31, 2013 11:52 AM
To: scap-on-apple-dev@lists.macosforge.org
Subject: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?
Does anyone have access to the SCC 3.1 that is posted on the DISA page here? <http://iase.disa.mil/stigs/scap/index.html>
From the screenshots I've seen it looks like a Java tool.
Josh