Vulnerator 2.0 (v7.1.0)

Vulnerator 2.0 — 7.1.0

Two reports from Vulnerator 6 are back, rebuilt for 2.0: STIG Details and a PDF Summary. Tested on a real system as 7.1.0 beta 1.

STIG Details (Excel)

The successor of the Vulnerator 6 "STIG Details" tab.

• STIG Details sheet: every checklist (.ckl / .cklb / Evaluate-STIG) and SCAP / XCCDF rule result, one row per host
  and rule: STIG name and version, host, IP address, groups, Vuln ID, Rule ID, STIG ID, rule title, severity and
  override, status and mitigated status, NIST SP 800-53 Rev 5 controls, CCIs, discussion, check content, fix text,
  finding details, comments, finding type, source file and last observed date. Header row frozen, filter buttons on
  every column.
• Summary by STIG sheet: hosts, rules evaluated, open CAT I / II / III, Not a Finding, Not Applicable, Not
  Reviewed and compliance % for each STIG.
• The old DIACAP "IA Control" column is replaced by the Rev 5 controls.

PDF Summary

A printable overview (the Vulnerator 6 PDF only had a cover table): system name and who prepared it; totals; open
findings by source (ACAS, checklists, SCAP) and CAT; results by status; STIG compliance; the 20 assets with the most
open findings; the 20 most widespread open findings. The marking is printed at the top and bottom of every page.

Both use their own filters on the Reporting page (finding type, severity, status, group, or the Global values) and are
included in Launch Selected Reports. The group RMF override does not apply to them.

Fixes

• Help > Using the Software lists every report.

Verifying the download

Compare the SHA-256 below (also in the .sha256 file) with Get-FileHash .\Vulnerator-v7.1.0.zip.

SHA-256 Vulnerator-v7.1.0.zip: dad6d815eec1519a932a7d90534419d1aa8bb7fb700d3a0a9e2e0f467bc7681b

For application control (allow by hash): Vulnerator.exe 60085526acb24dd99180959ef25bccaab9d38ae6285aa60ede7aa0af9d76338b. Vulnerator ships no native DLLs (SQLite comes from Windows); every file's hash is in Vulnerator-v7.1.0-file-hashes.txt.