Class Resources
About 2 min
Class Resources
Security Guidance
MITRE SAF InSpec Profiles
MITRE SAF Tools
- SAF CLI
- Heimdall Lite
- Heimdall Lite Github Repo
- Heimdall Server (with backend database, compare and trending)
Code Background & Primers
Ruby Tutorials and Documentation
InSpec Documentation
- InSpec Docs
- InSpec Profiles
- InSpec Resources
- InSpec Matchers
- InSpec Shell
- InSpec Reporters
- InSpec Profile Inheritance
InSpec Tutorials and Videos
- Introduction to InSpec Playlist
- What to Expect When You’re InSpec’ing
- Getting started with InSpec - The InSpec basics series
- Windows infrastructure testing using InSpec – Part I
- Windows infrastructure testing using InSpec and Profiles – Part II
- InSpec Cheat Sheet
rspec documentation
Codespaces and Git
Learning and Using Git
GitHub Codespaces
Tools and Applications
RHEL8 Baseline 'Stubs'
The RHEL8 Baseline Stubs were saf-cli generate command as documented in the Beginner Class . You can use this as a reference while you develop your controls.
Generating the Stubs
To create the RedHat Enterprise Linux 8 STIG Profile stubs, we used the saf-cli generate command:
saf generate:xccdf2inspec_stub -i U_RHEL_8_STIG_V1R6_Manual-xccdf.xml -r -o rhel8-baseline-stubs
This created a starter profile based of the RHEL8 STIG XCCDF Bechmark
Chef Community Slack
InSpec Community Partners
Many vendors and communities of interest have partnered with MITRE to develop security testing content. They have released this content on Github following in MITRE's footsteps.