sudo sh CIS-CAT-zonder-versie-check.sh -a -h
sudo sh CIS-CAT-zonder-versie-check.sh -a -h
------------------------------------------------------------------------
.d8888b. 8888888
.d8888b.
.d8888b. d8888
88888888888
d88P Y88b 888 d88P
Y88b d88P
Y88b
d88888 888
888 888 888
Y88b.
888 888
d88P888 888
888
888
Y888b.
888
d88P 888 888
888
888 Y88b. 8888
888
d88P 888 888
888 888
888 888
8888 888 888 d88P
888 888
Y88b d88P 888 Y88b
d88P Y88b d88P
d8888888888 888
Y8888PY 8888888
Y8888PY
Y8888PY d88P
888 888
------------------------------------------------------------------------
This is CIS-CAT-Pro Assessor version 3.0.55
Built on: 01/17/2019 21:38 PM
------------------------------------------------------------------------
usage: ./CIS-CAT.sh [OPTIONS]
Options
Tip
-----------------------------------------------------------------------------------
-a,--accept-terms
Accepts terms of use
-aa,--auto-assess
Perform auto-assessment of all applicable
benchmarks
-ap,--aggregation-period
<PERIOD>
The width of a dashboard aggregation, ex. 1M, 13W,
20D
-ar,--aggregate-reports
<DIRECTORY>
Create a CIS-CAT Dashboard by aggregating all the
XML reports in the specified directory
-arf,--report-arf
Creates an ARF report (SCAP 1.2 Only)
-as,--aggregation-status
Report Aggregation Status information is displayed
-b,--benchmark
<FILENAME>
Path to XCCDF Benchmark or Datastream Collection
-c,--reset
Reset preferences
-csv,--report-csv
Creates a CSV report
-D
<property=value>
Specifies a property/value pair
-d,--benchmark-dir
<DIRECTORY>
Override default location for benchmarks. Used
with --list and --find
-db,--database <JDBC
URL>
Test a database connection using a JDBC URL
-dbs,--database-sysdba
Test a database connection using a JDBC URL as
SYSDBA
-ds,--datastream
<DATASTREAM-ID>
Specifies a particular datastream to select (SCAP
1.2 Only)
-esxi,--esxi-connection
<ESXi_CONN>
Test a connection to an ESXi host using a
connection string formatted as user/password@host
-f,--find
Interactively select a benchmark
-h,--help
Prints help for this application
-l,--list
List all benchmarks in default benchmark location
-l2,--auto-assess-level2
Perform auto-assessment of all applicable
benchmarks using level-2 profiles
-n,--report-no-html
No HTML report will be created, by default an HTML
report is created
-od,--oval-definitions
<OVAL-DEFINITIONS-FILE> Specifies an OVAL
Definitions file to process
(SCAP 1.2 Only)
-or,--oval-results
Creates an OVAL Results HTML report (SCAP 1.2
Only)
-orx,--oval-results-xml
Creates an OVAL Results XML report (SCAP 1.2 Only)
-ov,--oval-variables
<OVAL-VARIABLES-FILE>
Specifies an OVAL Variables file to process (SCAP
1.2 Only)
-p,--profile
<PROFILE-ID>
Title of benchmark profile to evaluate
-props,--properties
<PROPERTIES-FILE>
Path to a properties file containing interactive
name/value pairs
-r,--results-dir
<DIRECTORY>
Directory in which results are saved
-rg,--report-gen
<XML-REPORT>
The path to a previously generated XML report or a
Directory containing multiple XML reports
-rn,--report-name
<NAME>
The base name of the report, no extension
-s,--status
Status information is displayed
-sr,--score
Creates a dashboard-only score report
-t,--report-txt
Creates a text report
-u,--report-upload
<URL>
Sends a HTTP POST with the XML report to the
specified URL. POST parameter name is
ciscat-report
-ui,--ignore-certificate-errors
Ignores any SSL certificate errors during report
upload
-up,--update
Update the vulnerability feeds for ALL platforms
to the latest version
-upo,--update-platform-only
Update the vulnerability feed for ONLY the current
platform to the latest version
-v,--version
Display CIS-CAT version and JRE information
-va,--vulnerabilities
Execute a Vulnerability Assessment and produce the
Vulnerability HTML report
-vac,--vulnerabilities-csv
Causes the Vulnerability Assessment CSV report to
be produced
-vax,--vulnerabilities-xml
Causes the Vulnerability Assessment XML report to
be produced
--verbose
Turns On Verbose Logging
-vs,--verify-signature
Verify that the XML benchmarks have valid
signatures
-x,--report-xml
Creates an XML report
-xc,--xccdf
<XCCDF-ID>
Specifies a particular XCCDF benchmark within a
datastream to select (SCAP 1.2 Only: -ds option
required)
-y,--report-all-tests
Causes the HTML and text reports to show all
tests. Only applicable tests are displayed by
default
Examples:
**** SCAP 1.2 ****
./CIS-CAT.sh -b <DS-COLLECTION-XML-FILE> -ds
<DATASTREAM-ID> [-xc <XCCDF-ID>] [-p <PROFILE-ID]
**** SCAP 1.1 and Prior ****
./CIS-CAT.sh -b <BENCHMARK-XML-FILE> [-p <PROFILE-ID>]
**** OVAL Definitions File ****
**** NOTE: When executing CIS-CAT against an OVAL Definitions file,
**** no HTML report should be
created (-n), and only the OVAL
**** Results report (-or) is
applicable...
./CIS-CAT.sh -od <OVAL-DEFINITIONS-FILE> -ov
<OVAL-VARIABLES-FILE> -s -n -or
CIS-CAT Terminated Successfully.
sudo sh CIS-CAT-zonder-versie-check.sh -a -s -r report-output -b
benchmarks/CIS_Oracle_Solaris_11.2_Benchmark_v1.1.0.xml -p "level 1"