Skip to content
ATO Pathways
  Log In

Tanium 7.3 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Tanium documentation identifying recognized and trusted Intel streams must be maintained.

    <VulnDiscussion>An IOC stream is a series or stream of IOCs that are imported from a vendor based on a subscription service. An IOC stream ca...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000211

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000340

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Tanium application must provide an immediate warning to the SA and ISSO (at a minimum) when allocated audit record storage volume reaches 75% of repository maximum audit record storage capacity.

    &lt;VulnDiscussion&gt;If security personnel are not notified immediately upon storage volume utilization reaching 75%, they are unable to plan for ...
    Rule Medium Severity
    Show

  • SRG-APP-000360

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000246

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000111

    <GroupDescription></GroupDescription>
    Group
    Show

  • Tanium endpoint files must be protected from file encryption actions.

    &lt;VulnDiscussion&gt;Similar to any other host-based applications, the Tanium Client is subject to the restrictions other System-level software ma...
    Rule Medium Severity
    Show

  • Tanium must centrally review and analyze audit records from multiple components within the system.

    &lt;VulnDiscussion&gt;Successful incident response and auditing relies on timely, accurate system information and analysis in order to allow the or...
    Rule Medium Severity
    Show

  • Tanium endpoint files must be excluded from on-access antivirus actions.

    &lt;VulnDiscussion&gt;Similar to any other host-based applications, the Tanium Client is subject to the restrictions other System-level software ma...
    Rule Medium Severity
    Show

  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000379

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Tanium Client Deployment Tool (CDT) must not be configured to use the psexec method of deployment.

    &lt;VulnDiscussion&gt;When using the Tanium Client Deployment Tool (CDT), using psexec represents an increased vulnerability as the NTLM hash and c...
    Rule Medium Severity
    Show

  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
    Show

  • Tanium must implement organization-defined automated security responses if baseline configurations are changed in an unauthorized manner.

    &lt;VulnDiscussion&gt;Unauthorized changes to the baseline configuration could make the system vulnerable to various attacks or allow unauthorized ...
    Rule Medium Severity
    Show

  • SRG-APP-000386

    <GroupDescription></GroupDescription>
    Group
    Show

  • Tanium must employ a deny-all, permit-by-exception (whitelist) policy to allow the execution of authorized software programs.

    &lt;VulnDiscussion&gt;Utilizing a whitelist provides a configuration management method for allowing the execution of only authorized software. Usin...
    Rule Medium Severity
    Show

  • SRG-APP-000414

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules