@mitre/hdf-converters

OHDF Converters

"OASIS Heimdall Data Format (OHDF)" is our common data exchange format to preserve and transform security data.

OHDF Converters supplies several methods to convert various types of security tool data to and from the OHDF standard. OHDF Converters can be used in a variety of tools, and is currently well integrated with Heimdall itself, and the SAF CLI.

Supported Formats

1. [asff-mapper] - AWS Security Finding Format JSON file, Prowler-derived AWS Security Finding Format results from concatenated JSON blobs, and Trivy-derived AWS Security Finding Format results from concatenated JSON blobs
2. [aws-config-mapper] - AWS Config
3. [burpsuite-mapper] - BurpSuite Pro XML file
4. [caat-mapper] - Compliance Assessment and Audit Tracking (CAAT) file
5. [checklist-mapper] - Checlist Mapper format
6. [conveyor-mapper] - Conveyor JSON file
7. [dbprotect-mapper] - DBProtect report in "Check Results Details" XML format
8. [fortify-mapper] - Fortify results FVDL file
9. [ionchannel-mapper] - SBOM data from Ion Channel
10. [jfrog-xray-mapper] - JFrog Xray results JSON file
11. [nessus-mapper] - Nessus XML results file
12. [netsparker-mapper] - Netsparker XML results file
13. [nikto-mapper] - Nikto results JSON file
14. [prisma-mapper] - Prisma Cloud Scan Report CSV file
15. [sarif-mapper] - SARIF JSON file
16. [scoutsuite-mapper] - ScoutSuite results from a Javascript object
17. [snyk-mapper] - Snyk results JSON file
18. [sonarqube-mapper] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
19. [splunk-mapper] - Splunk instance
20. [twistlock-mapper] - Twistlock CLI output file
21. [veracode-mapper] - Veracode Scan Results XML file
22. [xccdf-results-mapper] - SCAP client XCCDF-Results XML report
23. [zap-mapper] - OWASP ZAP results JSON

NOTICE

© 2022 The MITRE Corporation.

Approved for Public Release; Distribution Unlimited. Case Number 18-3678.

NOTICE

MITRE hereby grants express written permission to use, reproduce, distribute, modify, and otherwise leverage this software to the extent permitted by the licensed terms provided in the LICENSE.md file included with this project.

NOTICE

This software was produced for the U. S. Government under Contract Number HHSM-500-2012-00008I, and is subject to Federal Acquisition Regulation Clause 52.227-14, Rights in Data-General.

No other use other than that granted to the U. S. Government, or to those acting on behalf of the U. S. Government under that Clause is authorized without the express written permission of The MITRE Corporation.

For further information, please contact The MITRE Corporation, Contracts Management Office, 7515 Colshire Drive, McLean, VA 22102-7539, [phone].