> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/auditing-fundamentals/scap-scan-and-stigviewer.md).

# SCAP Scan and Stigviewer

United States Department of Defense who orginally had the CMMC model for cyber maturity. And it includes 17 capability domains and 5 different maturity levels

The tools which is most commonly used is the Security Content Application Protocol (SCAP), which is part of Security Technical Implementation Guides(STIG)

Gudies are requirements and they actually map back to NIST 800-53. 

And then the SCAP is the protocol. its the scanning benchmark then are used to check and see if the requrirements are in 800-53 are completed or not.

#### SCAP Compliance checker

-> Open SCAP Compliance checker tool run as administrator.

-> We can see here the benchmark is already here 

-> We can now start the scan.

-> After scan results are complete click on view results

-> Right click -> Open Summary viewer in OS Default Web browser. -> Allow blocked content.

#### DSA Stigview

* We can use DSA stigview to view it. 
* Open the checklist.ckl which we already created.
* Category 1 - talks about how failure to comply can lead to exploitation of which will directly and immediately result in loss of CIA.
* Category 2 - talks about a potential to result in loss of CIA. 
* Category 3 - degrades measures to protect against loss of CIA.
* Import -> XCCDF Results File -> Desktop(SCAP Scan results, Sessions, one folder, results, SCAP, XML)

#### LGPO tool

-> Open a command prompt as administrator, we have this Group Policy here, with the LGPO tool. Copy the path and paste in CMD to change path.

```
LGPO.exe /g {some policy} 
LGPO.exe /g {some other policy}
```

-> You can go in and check what all changes were in the registry or open SCAP tool and start a new scan. 

-> After scan go to Stig viewer, import the new results back to sessions and pick the later session

-> fixed the catogery 1