Name of Your Organization:

Altex-Soft

Web Site:

http://www.altx-soft.ru

Adopting Capability:

RedCheck

Capability home page:

http://www.altx-soft.ru/groups/page-392.htm

Adoption Capabilities

If the functionality is available now, indicate "Yes." If it has been implemented but not released, indicate "Beta". If planned but not currently available, indicate "Planned". If there are no plans for a specific category, that section(s) is not included as part of the questionnaire below.

OVAL Definition Evaluator – Yes

Product Accessibility <AR_1.9>

Provide a short description of how and where your capability is made available to your customers and the public.

RedCheck is available via commercial license through our official website: http://www.altx-soft.ru/groups/page-392.htm.

Language Version Indication <AR_1.10>

Describe how and where the capability indicates the version of the OVAL Language used to validate, create, or update its content.

RedCheck supports OVAL version 5.10.1.

Error Reporting <AR_2.1>

Indicate how a user who discovers an error in the capability’s use of OVAL can report the error.

We have technical support with email and phone channels.

Responding to Error Reports <AR_2.2>

Describe the approach to responding to the above error reports and how applicable fixes will be applied.

All reported potential errors and issues are investigated by the technical support team. If necessary, the defect will be fixed by the development team.

Adoption Documentation <AR_3.1>

Provide a copy, or directions to the location, of where the documentation describes OVAL and OVAL Adoption for any customers.

http://www.altx-soft.ru/groups/page-392.htm

Language Support <AR_3.2>

List each supported component schema and specific OVAL Tests in those component schemas that are supported. (AR_3.2)

independent-definitions-schema.xsd

• family_test
• environmentvariable58_test
• environmentvariable_test
• textfilecontent54_test
• textfilecontent_test
• sql57_test
• sql_test
• xmlfilecontent_test
• variable_test

windows-definitions-schema.xsd

• accesstoken_test
• auditeventpolicy_test
• auditeventpolicysubcategories_test
• file_test
• fileeffectiverights53_test
• fileeffectiverights_test
• lockoutpolicy_test
• metabase_test
• passwordpolicy_test
• port_test
• regkeyeffectiverights53_test
• regkeyeffectiverights_test
• registry_test
• sidsid_test
• service_test
• sid_test
• user_test
• usersid55_test
• usersid_test
• volume_test
• wmi57_test
• wmi_test

List any core constructs defined in the OVAL Language that are not supported. (AR_3.2)

• None

OVAL Content Error Reporting <AR_3.3>

List each supported assessment method if applicable. (AR_3.3)

Assessment of state by a host-based sensor.
Assessment of state by a remote-scanning sensor, for Windows to Windows only.

OVAL Content Error Reporting <AR_3.4>

Provide a copy, or directions to the location, of where the documentation describes the procedure by which errors in OVAL content may be reported for any OVAL content that is produced by the product.

Errors are reported through the support channels: support@altx-soft.ru.

Syntax Error Detection and Reporting <AR_4.1> <AR_4.2> <AR_4.3> <AR_4.4>

Indicate how the product or repository detects and reports syntax errors in any OVAL content that is consumed by the product or repository.

RedCheck logs all the syntax and other such errors.

Content Transparency <AR_8.1> <AR_8.2>

Indicate how the product allows users to determine which OVAL Definitions are being evaluated and examine the details of those definitions.

RedCheck logs all the definitions being evaluated.

Content Import Process Explanation <AR_8.3>

If the capability does not support consuming OVAL content at runtime, explain the documented process by which users can submit OVAL content for interpretation by the capability, including how quickly submitted content is made available to the capability.

RedCheck consumes OVAL content at runtime.

Content Evaluation <AR_8.4> <AR_8.5> <AR_8.6> <AR_8.7>

Indicate how users can review the detailed results of evaluating an OVAL Definition on a target system.

RedCheck logs detailed results of evaluating an OVAL Definition on a target endpoint.

Full OVAL Results <AR_8.8>

Indicate how users can review the full OVAL Results of the evaluation of an OVAL Definition on a target system.

RedCheck logs the full OVAL Results of evaluating an OVAL Definition on a target endpoint.

Adoption Signature

Statement of Adoption <AR_1.2>

"As an authorized representative of my organization I agree that we will abide by all of the mandatory adoption requirements as well as all of the additional mandatory adoption requirements that are appropriate for our specific type of capability."

NAME: Sergey Artykhov
TITLE: Director R&D

Statement of Accuracy <AR_1.2>

"As an authorized representative of my organization and to the best of my knowledge, there are no errors in the correctness of our capability’s use of the OVAL Language and the interpretation of the logic."

NAME: Sergey Artykhov
TITLE: Director R&D

Statement on Follow-On Correctness Testing Support <AR_1.7>

"As an authorized representative of my organization, we agree to support the Review Authority in follow-on correctness testing activities, where appropriate types of OVAL documents might need to be exchanged with other organizations attempting to prove the correctness of their capabilities."

NAME: Sergey Artykhov
TITLE: Director R&D