[SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?

[Haynes, Dan]

Hi Josh,

 

Thanks, for the introduction!  Does that mean you will be supporting the
SCAP-on-Apple project on the Apple side of things? 

 

As for me, I work on the OVAL project at MITRE and will try to help and
coordinate this effort from the OVAL side of things (e.g. introducing new
tests in OVAL, OVAL content best practices, etc.).

 

Thanks,

Danny

 

From: Josh Wisenbaker [mailto:dubs at apple.com] 
Sent: Friday, May 31, 2013 1:46 PM
To: Haynes, Dan
Cc: OVAL; scap-on-apple-dev at lists.macosforge.org
Subject: Re: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP
scanner?

 

Hi Danny,

 

I suppose a bit of an introduction from myself would help here.

 

I'm Josh Wisenbaker and I'm a peer of Shawn's at Apple on the CE team. I
cover the client management and deployment subject matter and do a bit of
Mac App Dev coverage as well.

 

So while I'm not a contractor, I have done plenty of work over the years
with gov and mil accounts.

 

Josh

 

-- 

Josh Wisenbaker

Consulting Engineer - Apple U.S. Commercial and Governmental Sales

dubs at apple.com

 

On May 31, 2013, at 12:30 PM, "Haynes, Dan" <dhaynes at mitre.org> wrote:





Hi Josh,

I guess I forgot to ask, are you supporting the U.S. government as a
contractor?


Thanks,

Danny

 

 

From: Haynes, Dan 
Sent: Friday, May 31, 2013 12:03 PM
To: 'Josh Wisenbaker';  <mailto:scap-on-apple-dev at lists.macosforge.org>
scap-on-apple-dev at lists.macosforge.org
Subject: RE: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP
scanner?

 

Hi Josh,

 

The SPAWAR SCC tool is limited to U.S. government agencies and supporting
contractors.  I will put you in touch with the SPAWAR team to see if you are
eligible.

 

If not, there are quite a few other tools available (some commercial and
some open source).  You can find them at the following links.

 

 <http://nvd.nist.gov/scapproducts.cfm> http://nvd.nist.gov/scapproducts.cfm

 

 <http://oval.mitre.org/adoption/productlist.html>
http://oval.mitre.org/adoption/productlist.html

 

Thanks,

Danny

 

From:  <mailto:scap-on-apple-dev-bounces at lists.macosforge.org>
scap-on-apple-dev-bounces at lists.macosforge.org [
<mailto:scap-on-apple-dev-bounces at lists.macosforge.org>
mailto:scap-on-apple-dev-bounces at lists.macosforge.org] On Behalf Of Josh
Wisenbaker
Sent: Friday, May 31, 2013 11:52 AM
To:  <mailto:scap-on-apple-dev at lists.macosforge.org>
scap-on-apple-dev at lists.macosforge.org
Subject: [SCAP-On-Apple-Dev] Anyone have access to the DISA SCAP scanner?

 

Does anyone have access to the SCC 3.1 that is posted on the DISA page here?
< <http://iase.disa.mil/stigs/scap/index.html>
http://iase.disa.mil/stigs/scap/index.html>