Suggested Pre-Requisites

Basic familiarity with Ruby, RSpec and InSpec. InSpec is a DSL built on top of Ruby and RSpec. To become more familiar with Ruby, review the following this written ruby primer and or a basic video introduction to get started.

InSpec Developer Codespaces Lab

The MITRE SAF has setup a GitHub Codespace that can function as your lab and testing environment while you take this course.

https://github.com/mitre/inspec-profile-developer-course-lab-environment

Follow the instructions on the README or just follow along with your instructor as we will be walking the class through the setup process.

Describe the architecture of an InSpec profile

Understand InSpec and it's architecture

Describe the InSpec framework and its capabilities

Create components, connected components, modules - and their tests - right from the CLI

Run an InSpec profile against a component of an application stack

Learn how to utilize the profiles we build to run against an application stack

Build an InSpec profile to transform security policy into automated security testing

Understand how as well as hands on development of InSpec profiles

View and analyze InSpec results

Learn how to analyze outputs of InSpec profiles in more human readable format

Report results

Create outputs of files that can be shared and reported out based on InSpec results