<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Conducting Configuration Audit

## lynis — Linux security auditing tool

```bash
# Quick system audit
lynis audit system --quick

# Audit authentication only
lynis audit system --tests-from-group authentication

```

## oscap — OpenSCAP compliance scanner

```bash
# CIS benchmark scan
oscap xccdf eval --profile cis --results results.xml DATASTREAM

# OVAL vulnerability check
oscap oval eval --results oval_results.xml OVAL_DEF

```

## inspec — Infrastructure compliance testing

```bash
# Remote compliance check
inspec exec PROFILE -t ssh://user@host

# JSON output
inspec exec PROFILE --reporter json:results.json

```
