The Tanium documentation identifying recognized and trusted folders for Detect Local Directory Source must be maintained.
An XCCDF Rule
Description
<VulnDiscussion>An IOC stream is a series or "stream" of IOCs that are imported from a vendor based on a subscription service or manually downloaded and placed in a folder. Detect can be configured to retrieve the IOC content on a regularly scheduled basis. The items in an IOC stream can be separately manipulated after they are imported.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-234114r612749_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Prepare and maintain documentation identifying the Tanium IOC Local Directory Source maintainers.