An open API service indexing awesome lists of open source software.

https://github.com/mvladislav/sca

SCA Script & SCA yml CIS Ubuntu 24.04 (in work)
https://github.com/mvladislav/sca

assessment cis conf security ubuntu ubuntu24

Last synced: 2 months ago
JSON representation

SCA Script & SCA yml CIS Ubuntu 24.04 (in work)

Awesome Lists containing this project

README

          

# SCA Tooling

```sh
MVladislav
```

---

- [SCA Tooling](#sca-tooling)
- [Test Script to run Wazuh-SCA-YAML files](#test-script-to-run-wazuh-sca-yaml-files)
- [Download other SCA-YAML files](#download-other-sca-yaml-files)
- [SCA :: in work :: CIS Ubuntu 24.04](#sca--in-work--cis-ubuntu-2404)
- [License](#license)
- [References](#references)

---

## Test Script to run Wazuh-SCA-YAML files

Dependencies install for `wazuh-regex` and `yq`+`jq`:

```sh
$wget https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.9.1-1_amd64.deb
$mkdir wazuh-manager && dpkg-deb -R wazuh-manager_4.9.1-1_amd64.deb wazuh-manager
$cp ./wazuh-manager/var/ossec/bin/wazuh-regex .
$mkdir wazuh-lib && cp -r ./wazuh-manager/var/ossec/lib/* ./wazuh-lib
$rm wazuh-manager* -rf
$chmod u+x wazuh-regex

$apt install yq jq
```

Examples how to run the script:

```sh
# Run all sca rules with file './cis_ubuntu24-04.yml'
$bash ./sca.sh -pdc

# Get help info
$bash ./sca.sh -h

# Run sca rule by ID from file './cis_ubuntu24-04.yml'
$bash ./sca.sh -soc -pdc -i
```

## Download other SCA-YAML files

```sh
$wget -O ./cis_ubuntu22-04.yml \
https://raw.githubusercontent.com/wazuh/wazuh/refs/heads/master/ruleset/sca/ubuntu/cis_ubuntu22-04.yml
```

## SCA :: in work :: CIS Ubuntu 24.04

- [x] Section1 (66) (63) (-3)
- [x] Section2 (43) (42) (-1)
- [x] Section3 (18) (17) (-1)
- [x] Section4 (29) (23) (-6)
- [x] Section5 (71) (68) (-3)
- [x] Section6 (62) (53) (-9)
- [x] Section7 (23) (18) (-5)

---

## License

MIT

## References

-
-
-
- Wazuh Docs
-
-
- Wazuh Issues
-
-