The Tanium documentation identifying recognized and trusted folders for IOC Detect Folder streams must be maintained.
An XCCDF Rule
Description
An IOC stream is a series or "stream" of IOCs that are imported from a vendor based on a subscription service or manually downloaded and placed in a folder. IOC Detect can be configured to retrieve the IOC content on a regularly scheduled basis. The items in an IOC stream can be separately manipulated after they are imported.
- ID
- SV-93437r1_rule
- Version
- TANS-SV-000048
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Prepare and maintain documentation identifying the Tanium IOC Folder stream maintainers.