Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
  • The Tanium documentation identifying recognized and trusted folders for Threat Response Local Directory Source must be maintained.

    &lt;VulnDiscussion&gt;Using trusted and recognized indicator of compromise (IOC) sources may detect and prevent systems from becoming compromised. ...
    Rule Medium Severity
  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
  • The Tanium Threat Response Local Directory Source must be configured to restrict access to only authorized maintainers of threat intel.

    &lt;VulnDiscussion&gt;Using trusted and recognized indicator of compromise (IOC) sources may detect and prevent systems from becoming compromised. ...
    Rule Medium Severity
  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
  • The Tanium documentation identifying recognized and trusted Security Content Automation Protocol (SCAP) sources must be maintained.

    &lt;VulnDiscussion&gt;SCAP XML documents validated by the National Institute of Standards and Technology (NIST) are provided from several possible ...
    Rule Medium Severity
  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
  • The Tanium documentation identifying recognized and trusted Open Vulnerability and Assessment Language (OVAL) feeds must be maintained.

    &lt;VulnDiscussion&gt;OVAL XML documents are provided from several possible sources such as the Community Intercomparison Suite (CIS) open-source r...
    Rule Medium Severity
  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
  • Tanium Comply must be configured to receive Security Content Automation Protocol (SCAP) content only from trusted sources.

    &lt;VulnDiscussion&gt;SCAP XML documents validated by the National Institute of Standards and Technology (NIST) are provided from several possible ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules