DISA / Nessus / OpenSCAP / HBSS / Tanium SCAP Scans and Templates

When you upload a SCAP scan, that information in the XCCDF result file is parsed, matched to a template STIG type, and then merged into a new checklist in a system. There is information on creating checklists by uploading SCAP scans and matching them automatically to templates in the Checklist Help Area.

You can also name the template yourself on the upload page and skip benchmark matching entirely. Or, if the checklist already exists, start from its record and use its Upload button, which updates that record rather than matching one. Both are described in Uploading Checklists.

When a SCAP is uploaded without a template chosen, it is first matched to any checklist that shares the same hostname and STIG checklist type in the system it is being uploaded in. If that is not matched, then the STIG type is searched for templates by custom template, then CIS template, then DISA template in that order.

---