Vulnerator 2.0 (v7.1.0-beta.1)

Vulnerator 2.0 — 7.1.0 beta 1

Two reports from Vulnerator 6 are back, rebuilt for 2.0: STIG Details and a PDF Summary.

STIG Details (Excel)

The successor of the Vulnerator 6 "STIG Details" tab.

• STIG Details sheet: every checklist (.ckl / .cklb / Evaluate-STIG) and SCAP / XCCDF rule result, one row per host
  and rule: STIG name and version, host, IP address, groups, Vuln ID, Rule ID, STIG ID, rule title, severity and
  override, status and mitigated status, NIST SP 800-53 Rev 5 controls, CCIs, discussion, check content, fix text,
  finding details, comments, finding type, source file and last observed date. Header row frozen, filter buttons on
  every column.
• Summary by STIG sheet: hosts, rules evaluated, open CAT I / II / III, Not a Finding, Not Applicable, Not
  Reviewed and compliance % for each STIG.
• The old DIACAP "IA Control" column is replaced by the Rev 5 controls.

PDF Summary

A printable overview (the Vulnerator 6 PDF only had a cover table): system name and who prepared it; totals; open
findings by source (ACAS, checklists, SCAP) and CAT; results by status; STIG compliance; the 20 assets with the most
open findings; the 20 most widespread open findings. The marking is printed at the top and bottom of every page.

Both use their own filters on the Reporting page (finding type, severity, status, group, or the Global values) and are
included in Launch Selected Reports. The group RMF override does not apply to them.

Fixes

• Help > Using the Software lists every report.

Verifying the download

Compare the SHA-256 below (also in the .sha256 file) with Get-FileHash .\Vulnerator-v7.1.0-beta.1.zip.

SHA-256 Vulnerator-v7.1.0-beta.1.zip: 2fb8ad8ccb1def8352e7dd9e3a9953a06a3118149c7232b3dc651f0a00666c7c

For application control (allow by hash): Vulnerator.exe 503dd31681a5411dc3fe02786fc63873194a49ac578cf3b4579d6c9a0f979ed1. Vulnerator ships no native DLLs (SQLite comes from Windows); every file's hash is in Vulnerator-v7.1.0-beta.1-file-hashes.txt.