Viewing imported SCAP objects

You can view summary level information about each of the imported SCAP objects in the TrueSight Server Automation console.

The following figure illustrates the hierarchy of SCAP 1.2 or 1.3 objects in the console:

The SCAP data stream collection can contain multiple SCAP data streams, and each data stream can contain multiple benchmarks.

In the example presented here, the imported SCAP data stream collection (the first-level node under the SCAP folder) contains two SCAP data streams (second-level nodes). Each of these SCAP data streams, in turn, contains a single SCAP benchmark (third-level nodes).

For SCAP 1.0, an SCAP benchmark is imported and only the SCAP benchmark object appears in the TrueSight Server Automation console.

To view summary information about an SCAP object

Do the following:

1. Log in to the TrueSight Server Automation console.

2. In the Depot, right-click the SCAP object (collection, data stream, or benchmark) and select Open.
   A tab opens in the Content panel, showing summary information about the SCAP object, as described in the following table. All information is derived from the imported SCAP content.

   Object	Tab	Details
   SCAP data stream collection	SCAP Collection Contents	Identifier — The globally unique identifier of the data stream collection. File Name — The name of the XML file that was used to import the data stream collection. SCAP Data Stream List —  A list of data streams contained in the collection, along with basic details for each one. For more information about the provided details, see the next row.
   SCAP data stream	SCAP Collection Contents	Identifier — The globally unique identifier of the data stream. Use Case — The use case represented by the data stream, one of the following values: Configuration Vulnerability Inventory Other SCAP Version — The targeted SCAP version Timestamp — The date and time when the data stream was created. Note: For the date when the data stream was last modified, select the data stream and consult the DATE_MODIFIED basic property in the Properties-view (typically at the bottom left). Benchmark List — A list of benchmarks contained in the data stream, along with basic details for each one. For more information about the provided details, see the next row.
   SCAP benchmark	XCCDF Content	Name — A short phrase that identifies the benchmark. Title — A more descriptive longer name. Description — The purpose of the benchmark. Platform — The CPE identifier that describes the operating system platform for which this benchmark is intended. Version — The benchmark version, as identified in the version tag in the XCCDF file. Profile identifiers and descriptions — A list of profiles included in the benchmark, along with the profile identifier and description for each one. These values are obtained from the XCCDF file.