The Tanium SQL server must be dedicated to the Tanium database.
An XCCDF Rule
Description
Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.
- ID
- SV-93353r1_rule
- Version
- TANS-DB-000002
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Move the Tanium SQL database from the SQL server hosting multiple databases to a dedicated SQL server or remove other databases co-located with Tanium on the existing SQL server.