[Verse 1] Lab two is done but work's not through Ten findings wait for me and you They're marked "Not Reviewed" in red Manual assessment lies ahead Pull up the checklist, grab your guide The Check Content is our roadside [Chorus] Manual STIG, dig deeper in Find the truth that tools can't win Check Content shows the way to go Document what you need to know Evidence clear, status defined Satisfy the assessor's mind [Verse 2] Start with finding number one Read the Check Content, here we come Follow steps exactly right Look for clues in plain sight Is it compliant, yes or no Mark the status, let it show [Chorus] Manual STIG, dig deeper in Find the truth that tools can't win Check Content shows the way to go Document what you need to know Evidence clear, status defined Satisfy the assessor's mind [Bridge] Write the details crystal clear Make your reasoning appear Screenshots, logs, and config files Evidence that goes for miles Not a Finding or it fails Your documentation tells the tales [Verse 3] Nine more findings wait in line Take your time, the work is fine Registry keys and service states Policy settings, don't be late Each one needs your careful eye Manual checks will verify [Chorus] Manual STIG, dig deeper in Find the truth that tools can't win Check Content shows the way to go Document what you need to know Evidence clear, status defined Satisfy the assessor's mind [Outro] Ten findings done, the work complete Manual assessment can't be beat When automation falls behind Your human skills will always find The truth that matters in the end STIG compliance you defend
← 2 Lab 2 — Automated SCAP Scanning | 4 Common Implementation Pitfalls →