DISA SCA Profile

[Ronald Simmons]

Does anyone know if it is possible to import DISA Benchmark xml files into Wazuh?

[Isaiah Daboh]

Hello,

Currently, it is not possible to directly import a DISA STIG benchmark as a raw XML file into Wazuh's Security Configuration Assessment (SCA) module. The SCA module expects the YAML (.yml ) file format. The only way to achieve this currently will be to convert the XML file to .yml and follow the structure for a typical wazuh SCA file as explained and illustrated in the documentation.

Note: Please note that the current available SCAs are based on the CIS benchmarks.

Regards,

[Ronald Simmons]

thank you so much for the information