Class Resources
May 22, 2022About 2 min
Class Resources
Security Guidance
MITRE SAF InSpec Profiles
MITRE SAF Tools
- SAF CLI
- Heimdall Lite
- Heimdall Lite Github Repo
- Heimdall Server (with backend database, compare and trending)
Vulcan Resources
Docs
- Vulcan full documentation
- Vulcan GitHub -- Feel free to leave us a feature request!
- Vulcan Project roadmap
STIG resources
- Vendor STIG Process Guide
- DISA's Vendor STIG Intent Form. Used to formally start the Vendor STIG process.
- VMWare's STIG Program Overview. A good primer on terms and process for STIGs.
Code Background & Primers
Ruby Tutorials and Documentation
InSpec Documentation
- InSpec Docs
- InSpec Profiles
- InSpec Resources
- InSpec Matchers
- InSpec Shell
- InSpec Reporters
- InSpec Profile Inheritance
InSpec Tutorials and Videos
- Introduction to InSpec Playlist
- What to Expect When You’re InSpec’ing
- Getting started with InSpec - The InSpec basics series
- Windows infrastructure testing using InSpec – Part I
- Windows infrastructure testing using InSpec and Profiles – Part II
- InSpec Cheat Sheet
rspec documentation
Codespaces and Git
Learning and Using Git
GitHub Codespaces
Tools and Applications
Chef Community Slack
InSpec Community Partners
Many vendors and communities of interest have partnered with MITRE to develop security testing content. They have released this content on Github following in MITRE's footsteps.