Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • The Tanium Action Approval feature must be enabled for two-person integrity when deploying actions to endpoints.

    The Tanium Action Approval feature provides a two-person integrity control mechanism designed to achieve a high-level of security and reduce the possibility of error for critical operations. When ...
    Rule Medium Severity
  • SRG-APP-000039

    Group
  • The Tanium documentation identifying recognized and trusted IOC streams must be maintained.

    Using trusted and recognized IOC sources may detect and prevent systems from becoming compromised. An IOC stream is a series or stream of IOCs that are imported from a vendor based on a subscriptio...
    Rule Medium Severity
  • SRG-APP-000039

    Group
  • Tanium Threat Response must be configured to receive IOC streams only from trusted sources.

    Using trusted and recognized IOC sources may detect and prevent systems from becoming compromised. An IOC stream is a series or stream of intel that is imported from a vendor based on a subscriptio...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules