SCAP and STIG Scan Demonstration

In this video, I demonstrate how to run SCAP scans using the SCC tool and how to create Windows 10 STIG checklists. Following I demonstrate how to import the SCAP scan results to the STIG Viewer.

During the video I did forget to tun the command "gpupdate /force" after running the LGPO tool. Please keep that in mind.

[segunshobayo]

Hello Tim,
You didn’t show how you packaged the gpo fix you applied. Was that also downloaded on DISA site?

[superjasim]

Thank you and god bless you for this tutorial. I have a couple of questions if you could please look into it:

1. So what you did in the video (by scanning the example stig benchmark file and opening it with Stig Viewer then fixing the vulnerabilities by using CMD) is that all what stigging & scapping for? Or are there different uses for the Stig & Scap programs?

2. Is there a job position in the IT field that basically ONLY requires the knowledge of using Stig and Scap? So basically all you gotta do in that job is scanning files for possible vulnerabilities and fixing them (like shown in the video) or you are still required to know and use more programs & solve different problems?

I would much appreciate the answer & thank you very much

[docsever]

Where is the GPO package downloaded from?