DISA STIG Viewer

Overview

DISA STIG Viewer is a graphical user interface (GUI) application that enables easy viewing of SCAP-formatted Security Technical Implementation Guides (STIGs). OpenSCAP can generate results compatible with STIG Viewer even when evaluating SCAP content that uses different rule IDs than the official DISA STIG format, for example, content from the scap-security-guide package or third-party content.

What You'll Need

Requirements

• You will need to install the STIG Viewer package.
• You will need the compliance_output_report_stigviewer.xml file output by OpenSCAP

Install the STIG Viewer Package

The STIG Viewer package can be downloaded from the following sources:

• https://public.cyber.mil/stigs/srg-stig-tools/

How To

Download STIG results file

Download the STIG results file from the following sources:

• https://ironbank.dso.mil/repomap?page=1&sort=1&cardsPerPage=10 Using python3.11 as an example
• Go to https://ironbank.dso.mil/repomap/details;registry1Path=opensource%252Fpython
• Select the appropriate tag from the dropdown in the ui
• Scroll down on the page until you see "All Scans and Reports"
• Click on "All Scans and Reports"
• Untar the downloaded file -- tar -xvzf python311-v3.11.3-reports-signature.tar.gz
• The stigviewer results file will be located at reports/openscap/compliance_output_report_stigviewer.xml

Download STIG profile

Download STIG file of your choice from below sources and unzip the file. The version of the STIG must conform to the version of the xccdf_org.ssgproject.content_profile_stig profile. For example for Ubi8 profile, download this file.

• https://public.cyber.mil/stigs/downloads/
• https://www.stigviewer.com/stigs

Import STIG Profile

In STIG Viewer, click on File and then on Import STIG. Choose the STIG profile of the operating system. Then, select the STIG in STIGs panel on the left side. Click on Checklists menu and then select "Create Checklists - Check Marked STIG(s)" from drop down menu.

Import XCCDF result file

Import the OpenSCAP scan results by clicking on Import and then on XCCDF Results File. Locate the reports/openscap/compliance_output_report_stigviewer.xml file obtained in "Download STIG results file". STIG Viewer shows the results subsequently.