SCAP-based Audit Policies (FDCC/USGCB, NIST, and DISA STIG)

Audit policies that perform NIST FDCC/USGCB and DISA STIG SCAP configuration audits. These audit files test for the required settings specified by the DISA STIG SCAP and NIST FDCC/USGCB programs.

FDCC and USGCB Audit Policies

File OS Description
USGCB_IE8_v2_official.audit Windows This profile represents guidance outlined in US Government Configuration Baseline settings for Internet Explorer 8. (Last updated February 4, 2014.)
USGCB_IE7_v2.audit Windows This profile represents guidance outlined in US Government Configuration Baseline settings for Internet Explorer 7. (Last updated February 4, 2014.)
USGCB_Win7_Firewall_Desktops_v2_official.audit Windows 7 This profile represents guidance outlined in US Government Configuration Baseline Firewall settings for Windows 7 systems. (Last updated February 4, 2014.)
FDCC_XP_Desktops_v2_official.audit Windows XP This profile represents guidance outlined in Federal Desktop Core Configuration settings for Desktop systems. (Last updated January 28, 2011.)
USGCB_Vista_Desktops_v2.audit Windows Vista This profile represents guidance outlined in US Government Configuration Baseline settings for Windows Vista. (Last updated February 4, 2014.)
FDCC_Vista_Desktops_v2_official.audit Windows Vista This profile represents guidance outlined in Federal Desktop Core Configuration settings for Windows Vista Desktop systems. (Last updated January 28, 2011.)
USGCB_XP_Desktops_v2.audit Windows XP This profile represents guidance outlined in US Government Configuration Baseline settings for Windows XP. (Last updated February 4, 2014.)
FDCC_XP_Firewall_Desktops_v2_official.audit Windows XP This profile represents guidance outlined in Federal Desktop Core Configuration settings for Windows XP Desktop Firewall. (Last updated January 28, 2011.)
FDCC_Vista_Firewall_Desktops_v2_official.audit Windows Vista This profile represents guidance outlined in Federal Desktop Core Configuration settings for Windows Vista Desktop Firewall. (Last updated January 28, 2011.)
USGCB_XP_Firewall_Desktops_v2.audit Windows XP This profile represents guidance outlined in US Government Configuration Baseline Firewall settings for Windows XP. (Last updated February 4, 2014.)
USGCB_Vista_Firewall_Desktops_v2.audit Windows Vista This profile represents guidance outlined in US Government Configuration Baseline Firewall settings for Windows Vista. (Last updated February 4, 2014.)
FDCC_IE7_v2_official.audit Windows This profile represents guidance outlined in Federal Desktop Core Configuration settings for Windows systems running Windows Internet Explorer 7. (Last updated January 28, 2011.)
USGCB_Win7_Desktops_v2_official.audit Windows 7 This profile represents guidance outlined in US Government Configuration Baseline settings for Windows 7 systems. (Last updated May 29, 2014.)

Microsoft SCM Audit Policies

File OS Description
MSCM_v1.0_IE8_EC.audit Windows This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Internet Explorer 8 EC profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_7_SSLF_Domain.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 SSLF configuration Domain profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2008_SP2_EC_Domain.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 baseline configuration for EC profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_7_SSLF_Laptop.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 SSLF configuration Laptop profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2008_SP2_EC_Member_Server.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 member server configuration for EC profile. (Last updated February 22, 2011.)
MSCM_v1.0_Windows_2003_SP2_EC_Member_Server.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 EC Member Server Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_EC_Domain.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 baseline configuration for EC profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_SSLF_Domain_Controller.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 domain controller configuration for SSLF profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_SP2_SSLF_Domain.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 baseline configuration for SSLF profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_7_EC_Laptop.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 EC configuration Laptop profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2008_SP2_SSLF_Domain_Controller.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 domain controller configuration for SSLF profile. (Last updated February 24, 2011.)
MSCM_v1.0_Windows_2003_SP2_SSLF_Member_Server.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 SSLF Member Server Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2003_SP2_SSLF_Domain_Baseline.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 SSLF Domain Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_EC_Domain_Controller.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 domain controller configuration for EC profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2003_SP2_Domain_Controller.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 Domain Controller Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)
MSCM_v1.0_Windows_2003_SP2_EC_Domain_Controller.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 EC Domain Controller Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_IE8_SSLF.audit Windows This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Internet Explorer 8 SSLF profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_7_SSLF_Desktop.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 SSLF configuration Desktop profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2008_R2_SSLF_Domain.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 baseline configuration for SSLF profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_SSLF_Member_Server.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 member server configuration for SSLF profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_SP1_Member_Server.audit Windows 2008 R2 SP1 This audit file validates configuration guidance for a Windows 2008 R2 SP1 Member Server Policy from the Windows Server 2008 R2 SP1 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)
MSCM_v1.0_Windows_7_EC_Domain.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 EC configuration Domain profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2008_R2_EC_Member_Server.audit Windows 2008 R2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 R2 member server configuration for EC profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2003_SP2_EC_Domain_Baseline.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 EC Domain Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_SP2_EC_Domain_Controller.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 domain controller configuration for EC profile. (Last updated February 22, 2011.)
MSCM_v1.0_Windows_2008_SP2_Member_Server.audit Windows 2008 SP2 This audit file validates configuration guidance for a Windows 2008 SP2 Member Server Policy from the Windows Server 2008 SP2 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)
MSCM_v1.0_Windows_2003_SP2_SSLF_Domain_Controller.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 SSLF Domain Controller Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_2008_R2_SP1_Domain_Controller.audit Windows 2008 R2 SP1 This audit file validates configuration guidance for a Windows 2008 R2 SP1 Domain Controller Policy from the Windows Server 2008 R2 SP1 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)
MSCM_v1.0_Windows_2008_SP2_SSLF_Member_Server.audit Windows 2008 SP2 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 2008 SP2 member server configuration for SSLF profile. (Last updated February 10, 2011.)
MSCM_v1.0_Windows_7_EC_Desktop.audit Windows 7 This profile represents guidance outlined in SCAP files created using Microsoft Security Compliance Manager for Windows 7 EC configuration Desktop profile. (Last updated March 4, 2011.)
MSCM_v1.0_Windows_2003_SP2_Member_Server.audit Windows 2003 SP2 This audit file validates configuration guidance for a Windows 2003 Member Server Policy from the Windows Server 2003 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)
MSCM_v1.0_Windows_2008_SP2_Domain_Controller.audit Windows 2008 SP2 This audit file validates configuration guidance for a Windows 2008 SP2 Domain Controller Policy from the Windows Server 2008 SP2 Security Baseline available in the Microsoft Security Compliance Manager tool version 2.5. (Last updated May 2, 2012.)

DISA STIG Audit Policies

File OS Description
DISA_STIG_Windows_IE_benchmarks_SCAP_audits.zip IE9, IE8 This .zip bundle contains .audits generated from DISA STIG SCAP content for each profile of IE8 and IE9. (Last updated May 30, 2014.)
DISA_STIG_Windows_OS_benchmarks_SCAP_audits.zip XP, Vista, Windows 7, 2003, 2008, 2008 r2 This .zip bundle contains audits generated from DISA STIG SCAP content for each profile of Windows XP, Vista, Windows 7, 2003, 2008, and 2008 r2. (Last updated May 30, 2014.)