There are 1 repository under mitre-saf topic.
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark
eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).
(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements
STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3
Microsoft Windows Server 2019 STIG InSpec Profile
InSpec Profile to validate the secure configuration of aws-rds-infrastructure-cis-baseline, against CIS's Amazon Web Services Three-tier Web Architecture Benchmark V1.0.0
A micro InSpec baseline to check for insecure or public s3 buckets in your VPC
The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) Application Programming Interface (API) specification and executables.
InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.
The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE Security Automation Framework Training Classes.
Ansible role for Red Hat 7 STIG Baseline
Proof of Concept - Alpha - An exploration in a mega container to link up all the SAF security tools
This profile implements the CIS Amazon Elastic Kubernetes Service (EKS) Benchmark version 1.0.1 (Cluster requirements).
WIP Ansible playbook for hardening a tomcat instance to the CIS Tomcat Benchmark v1.0.1
(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark
InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.
Baseline InSpec profile testing configuration of Apache HTTPD Server per Apache site 2.2 STIG
An InSpec Profile for evaluating an AWS RDS Oracle 12c Database server to the STIG benchmark
(wip) InSpec profile for the Canonical Ubuntu 18.04 LTS CIS Benchmark
A Chef recipe to help harden your Ubuntu box to the STIG standards
ALPHA WIP This chef cookbook provides secure nginx configurations.
The MITRE InSpec Team's introduction to InSpec Execution
InSpec testing for baseline compliance with the Oracle 19c CIS Benchmark
RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.
(WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC
(WIP) (ALPHA) InSpec Profile for the CIS Apache Tomcat v7 Benchmark
(WIP) Ansible role for the Google Chrome Windows Security Technical Implementation Guide
(WIP) Google Chrome Windows Security Technical Implementation Guide
THIS CONTENT HAS BEEN MIGRATED TO https://github.com/mitre/saf-training. The MITRE InSpec Team's introduction to InSpec Profile Development
InSpec profile for automated STIG compliance testing of Oracle MySQL 8.0