Glossary: Vulnerability, Asset and Change Management
OpenSCAP
Also written: oscap, oscap xccdf eval, oscap info
The free SCAP scanner for Linux. `oscap xccdf eval --profile server` runs a checklist, reports pass or fail per rule and can save results and an HTML report as evidence.
Where the book teaches it
Related terms
SCAP (Security Content Automation Protocol)XCCDF (Extensible Configuration Checklist Description Format)OVAL (Open Vulnerability and Assessment Language)