HELP with cis-cat module!!!!!!!!!!!!

[Stephany A]

Hello please someone who can help me with the cis cat module, I have wazuh manager 4.3.10 wazuh indexer 4.3.10 and filebeat 7.10.2. I have doubts if I should have kibana and elasticsearch for cis cat?

I configured it as it says in the step by step and no response appears in the logs

https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/wodle-ciscat.html#scan-on-start

<wodle name="cis-cat"> <disabled>no</disabled> <timeout>1800</timeout> <interval>1d</interval> <scan-on-start>yes</scan-on-start> <java_path>/usr/lib/debug/usr/lib/jvm/java-1.8.0-openjdk-amd64</java_path> <ciscat_path>home/wazuh/Descargas/CIS-CAT-Lite-v4.28.0</ciscat_path> <ciscat_binary>Assessor-CLI.sh</ciscat_binary> <content type="xccdf" path="benchmarks/CIS_Ubuntu_Linux_20.04_LTS_Benchmark_v1.1.0-xccdf.xml"> <profile>"Level 2 - Server"</profile> </content> </wodle>

----------------------------------------------------------------------------------------------------------------------------------------

Can someone please clarify this question for me to see what I'm doing wrong, I'm new with wazuh, please and thank you

[Stephany A]

I attach the ossec file

[Federico Gustavo Galland]

Hi Stephany,

You can find our documentation's user guide pertaining to the CIS-CAT integration below (the link you shared points to the configuration reference):

• https://documentation.wazuh.com/current/user-manual/capabilities/policy-monitoring/ciscat/ciscat.html
  

However, and quoting the article:

>  This integration requires CIS-CAT Pro, which is proprietary software. You can learn more about this tool and how to download it at the official CIS website.

Because the CIS-CAT Pro package is proprietary, we recommend more open options:

• https://documentation.wazuh.com/current/user-manual/capabilities/policy-monitoring/openscap/index.html
  
• https://documentation.wazuh.com/current/user-manual/capabilities/sec-config-assessment/index.html
  

The second of which includes GPLv2 licensed benchmarks based on CIS Security Hardening Guides.

Let us know if this helps you.

Regards,

Federico Galland