<div dir="ltr"><div><div>I guess I was thinking of this being the modernized version of the CMDB effort that keeps trying to live because, frankly, it literally is CM information.<br><br></div>This was the first FOSS-core thing that popped up in my search and seems reasonable at first glance.<br><br></div><div>I'd love to be part of this, I'd also love to not reinvent the wheel (again). That said, as an extendable platform, maybe iTop is horrible, there needs to be a global conversation about it (and FIPS, SSP, etc...)<br></div><div><br><a href="https://www.combodo.com/itop-193">https://www.combodo.com/itop-193</a><br><br></div>Trevor<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 1, 2018 at 11:41 AM, Shawn Wells <span dir="ltr"><<a href="mailto:shawn@redhat.com" target="_blank">shawn@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span class="">
<br>
<br>
<div class="m_2397561321756578016moz-cite-prefix">On 2/1/18 1:21 PM, Luke Salsich wrote:<br>
</div>
<blockquote type="cite">
<div class="gmail_default" style="font-size:small;color:rgb(68,68,68)">Thanks for the
comments guys. It helps me understand where things are and where
they might be going. <br>
<br>
</div>
<div class="gmail_default" style="font-size:small;color:rgb(68,68,68)">For me, I would
write a (initial) user story much along the lines of: <br>
<br>
</div>
<div class="gmail_default" style="font-size:small;color:rgb(68,68,68)">"I would like to be
able to parse oscap results into a MySQL database so that I can
compare specific aspects of these results to others from the
same server or from other servers."<br>
<br>
</div>
<div class="gmail_default" style="font-size:small;color:rgb(68,68,68)">I word it like this
because I (personally) am not looking for a larger application
framework (user interface, authentication, etc) that has to come
along with the central database. I also like the idea of not
being tied to one database engine and/or using a standardized
API, but an API sounds like a few stories down the road.<br>
<br>
</div>
<div class="gmail_default" style="font-size:small;color:rgb(68,68,68)">Anyway, I'm grateful
for the thoughts. I was initially just checking to make sure
that before I start working on converting the XML to SQL
(probably with xslt and Python) that someone else hasn't already
done that. I hate it when I build something only to find out
later that someone in the community has already built it (and
probably way better).</div>
</blockquote>
<br></span>
Imagine something like <a class="m_2397561321756578016moz-txt-link-freetext" href="https://osquery.io/" target="_blank">https://osquery.io/</a>, except with enriched
compliance data.<br>
<br>
<br>
</div>
<br>______________________________<wbr>_________________<br>
scap-security-guide mailing list -- <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.<wbr>fedorahosted.org</a><br>
To unsubscribe send an email to <a href="mailto:scap-security-guide-leave@lists.fedorahosted.org">scap-security-guide-leave@<wbr>lists.fedorahosted.org</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Trevor Vaughan<br>Vice President, Onyx Point, Inc<br></div><div>(410) 541-6699 x788<br></div><div><br>-- This account not approved for unencrypted proprietary information --</div></div></div></div></div>
</div>