#oscap
Run OpenSCAP CIS Level 2 in CI and fail builds on high-severity rule hits. oscap evaluates XCCDF/OVAL, emits ARF+HTML. #openscap #cis-benchmark #ci-cd https://www.valtersit.com/vault/enforce-cis-benchmark-via-openscap-in-ci-pipeline-beb870/
Enforce CIS Benchmark via OpenSCAP in CI Pipeline
www.valtersit.com
November 2, 2026 at 9:40 PM
A walk through of how to build an industry grade automated compliance auditing system – from scan to notification. #oscap #OpenSCAP #CIS #Compliance #Auditing #VulnerabilityAssessment #Automation

Centralized Linux multi-server compliance auditing automation
drive.proton.me/urls/N1FB156...
October 10, 2026 at 9:11 AM
Automate OpenSCAP remediation on RHEL 9: run `oscap xccdf eval --results arf.xml`, then `oscap xccdf generate fix --fix-type ansible` to produce a playbook that applies all failed rule fixes,

https://www.valtersit.com/vault/remediate-openscap-findings-automatically-with-ansible-playb-9a1f18/
August 14, 2026 at 1:21 PM
What OSCAP XML content files are used for scanning Alpine Linux containers?
serverfault.com
October 31, 2025 at 7:38 PM
#hivemind I just spent a frustrating day trying to find a decent, open tool for automated STIG application on windows.

oscap for windows seems very beta. There's the PowerStig PS module, but that's really for scripting against, not a finished solution.

Any ideas?

#infosec #cybersecurity
October 31, 2025 at 9:52 PM
https://sysarmy.com/bofhle/

$ uv run bofhle --reset
New session started.
guess result
Candidates remaining: 338
Next guesses:
569 paste
569 tapes
553 strip
546 parec
543 oscap
541 ports
540 plser
536 pargs
535 split
533 […]
Original post on infosec.exchange
infosec.exchange
July 16, 2026 at 9:06 AM
https://sysarmy.com/bofhle/

https://github.com/isotopp/bofhle

$ uv run bofhle --reset
New session started.
guess result
Candidates remaining: 338
Next guesses:
569 paste
569 tapes
553 strip
546 parec
543 oscap
541 ports
540 plser […]
Original post on infosec.exchange
infosec.exchange
July 15, 2026 at 9:19 AM
Parts 1-3/3 — EFTA01335921.jpg
#epsteinweb #efta01335921
https://epsteinweb.org
February 18, 2026 at 4:37 AM
SCAP drift detection via timestamp-based differential scanning: compare current scan start-time to baseline ARF using oscap info. If delta > 24h, full scan; else quick OVAL delta check. Works

https://www.valtersit.com/vault/scap-timestampbased-differential-scanning-for-drift-detectio-8dbf83/
July 11, 2026 at 3:21 PM