Skip to main content

14. Normalize Other Data!

Emily RodriguezAbout 1 min

14. Normalize

Remember the "Normalize" pillar? We skipped over it when we were doing InSpec validation because InSpec results are automatically in HDF (or Heimdall Data Format).

The Normalize Capability
The Normalize Capability

However, other tools provide useful security data that is not inherently in HDF. So, to make a full picture of security, we have converters to convert third party data to HDF and HDF back into other forms.

14.1 Convert with SAF CLI

The SAF CLI has utilies to convert files from one output to another. Take a look at the ever-growing list of compatible file types at the SAF CLI READMEopen in new window.

14.2 Convert with Heimdall

However, you Heimdall can also auto-convert uploaded files in compatible formats, giving you another way to convert data and look at the whole picture at one time.

Test this out by adding sample files of other data in Heimdall.

The Samples View
The Samples View

Choose some sample data to add to the full security of a theoretical software stack.

Picking a Sample
Picking a Sample

14.3 Visualize the Big Picture

As you add all of this data into one view, you can see how the NIST 800-53 controls are more filled out as more items are covered by different types of security scans.

The Tree Map
The Tree Map

In this big picture view, you can see the whole security posture and filter down, for example, on high failures across all scans. Your results may look different than these pictures depending on what you have loaded in Heimdall

Loading Multiple Results Files
Loading Multiple Results Files

And in the results details, you can see what file - in other words what scan or part of the system, is causing the problem.

Results Details from Multiple Sources
Results Details from Multiple Sources

14.4 Export Data To Other Formats

This is a two-way street! There are other places security data needs to be - maybe in Splunk, eMASS, AWS Security Hub, or even just in an easy, high level diagram to show your boss. Because of this, Heimdall can also export data into different forms using the "Export" button in the top right. Try out some of these forms on your results!

The Export Menu
The Export Menu