Tutorials.

Field-grade walkthroughs written from live runs — every command in them was executed on the estate lab before publication.

What you will find

• Generate a DISA STIG checklist from XCCDF — how the baseline checklists in stig-baselines are built from official DISA XCCDF sources, regenerated and validated offline, and opened in DISA STIG Viewer.
• Three ways to work a STIG checklist — manual assessment in STIG Viewer, OpenSCAP scans from committed datastreams, Nessus — plus bulk status application, offline fleet transfer, and scanning recipes.
• Using CISA KEV to prioritize STIG work — turn the CISA Known Exploited Vulnerabilities catalog into patch priorities with kevstig: what it routes, what it deliberately leaves uncovered, and the JSON API.
• Single-node Wazuh on Docker Compose — from a fresh clone of wazuh-stack to a running Wazuh 4.14 stack in one command: TLS, security users, and the dashboard config rendered from your own values.

Sources

Everything referenced here is open source and MIT-licensed — stig-baselines, kevstig, and wazuh-stack — and runs on the estate's four-node Proxmox lab that backs the Capabilities page. Where a tutorial states a limitation, it was hit, measured, and documented — the same honesty the rest of the site carries.