Tanium 7.3 Security Technical Implementation Guide

The Tanium 7.3 Security Technical Implementation Guide (V2 R3) has 102 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

102STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Wed Apr 02 2025

The Tanium documentation identifying recognized and trusted Intel streams must be maintained.

Tanium 7.3 Security Technical Implementation Guide

Assessment Title

Rule Text

The Tanium documentation identifying recognized and trusted Intel streams must be maintained.

Description

Discussion Text

An IOC stream is a series or stream of IOCs that are imported from a vendor based on a subscription service. An IOC stream can be downloaded manually or on a scheduled basis. The items in an IOC stream can be separately manipulated after they are imported.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234083

Rule

SV-234083r960804_rule

Severity

medium

Rule Version

TANS-SV-000007

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Consult with the Tanium System Administrator to determine if the "Tanium Detect" module is being used, if not this is Not Applicable.

Review the documented list of IOC trusted stream sources.

If the site does use an external source for IOCs and the IOC trusted stream source is not documented, this is a finding.

Implementation Procedure

Fix Text

Consult with the Tanium System Administrator to determine if the "Tanium Detect" module is being used, if not this is Not Applicable.

Prepare and maintain documentation identifying the Tanium Detect IOC trusted stream sources.

STIG check 53 of 102 in the Tanium 7.3 STIG checklist

← Previous · V-234082The Tanium Action Approval feature must be enabled for two-person integrity when deploying actions to endpoints.Next · V-234084 →The Tanium Detect must be configured to receive IOC streams only from trusted sources.