Skip to content

The Tanium documentation identifying recognized and trusted folders for IOC Detect Folder streams must be maintained.

An XCCDF Rule

Description

<VulnDiscussion>An IOC stream is a series or "stream" of IOCs that are imported from a vendor based on a subscription service or manually downloaded and placed in a folder. IOC Detect can be configured to retrieve the IOC content on a regularly scheduled basis. The items in an IOC stream can be separately manipulated after they are imported.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-93437r1_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

Prepare and maintain documentation identifying the Tanium IOC Folder stream maintainers.