Compliance / System Hardening - Free Security / Hardening / Standardization Tools & Guides

Security - Free Security / Hardening / Standardization Tools & Guides

Tools

1. MBSA (Microsoft Baseline Security Analyzer)

http://www.microsoft.com/en-us/download/details.aspx?id=7558

2. CIS Benchmark Tool (Center For Internet Security Benchmark Tools)

https://benchmarks.cisecurity.org/downloads/multiform/

3. SCAP (Security Content Automation Program)

4. Bastille Linux

http://bastille-linux.sourceforge.net/

5. DoD General Purpose STIG, Checklist, and Tool Compilation CD (aka, SRR Lite CD)

http://iase.disa.mil/stigs/Pages/index.aspx

6. TIGER - The Unix Security Audit and Intrustion Detection Tool

http://www.nongnu.org/tiger/

7. NSA - Security Configuration Guides - https://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtml

8. Web Based STIG Viewer - http://www.stigviewer.com/

9. Lynis - Linux Security Auditing Tool - http://cisofy.com/lynis/