SCAP checklists are available via NIST. Valid packages should be described as:
Other package types such as Standalone XCCDF or Automated Content packages are unsupported.
SCAP packages may contain individual XML files, but most typically contain a single XML data stream file with the following components:
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center