SCAP 1.3

Bug Fixes

• Reduced excessive Applicability Fixlet generation.
• Disabled the inline relevance comments.
• Fixed recurring UI script errors in Fixlets.
• Added error handling for all required command-line arguments.
• Fixed parameterization functionality in the Windows checklist.
• Incorporated source severity and category details.
• Fixed the Relevance logic associated with the applicability Fixlet.

SHA256 Checksums for SCAP 1.3 Tool Files (May, 2026)

New Components and Features

SCAP 1.3 Tool

• Built on a modernized Python-based architecture for faster and more reliable parsing of XCCDF, OVAL, and CPE files.
• Supports importing both CIS and DISA STIG benchmarks for Windows 10, Windows 11, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9 operating systems.
• Integrated Relevance Library and Relevance Generator for dynamic Fixlet creation.
• Produces standardized ARF (Asset Reporting Format) outputs for certification and reporting compliance.
• Provides complete accuracy and validation against SCAP 1.3 schemas and NIST benchmarks.

SCAP 1.3 Wizard

• Enhanced wizard interface now supports importing and executing SCAP 1.3 content directly from the BigFix Console.
• Processes CIS and DISA content structures.
• Streamlined benchmark and datastream selection workflow.

ARF Reporting Integration

• Generates SCAP-compliant ARF XML reports summarizing compliance results across multiple systems.
• Enables centralized compliance visibility by aggregating rule results per asset.
• Ensures interoperability with NIST tools, compliance dashboards, and external validation frameworks.
• Improves traceability and auditing through embedded benchmark metadata, evaluator details, and timestamps.
• Seamlessly integrates with BigFix Web Reports for SCAP result visualization.

SHA256 Checksums for SCAP 1.3 Tool Files (Oct, 2025)