Tanium Threat Response
This pack includes Cortex XSIAM content.
Use the Tanium Threat Response integration to manage endpoints processes, evidence, alerts, files, snapshots, and connections.
This pack includes Cortex XSIAM content.
This pack includes Cortex XSIAM content.
You need to configure a Socket Receiver on the Tanium side.
Perform the following steps to configure the Socket Receiver:
More information can be found here
Note:
Make sure to send the log in UTC time.
Don't modify the value type of the Timestamp field. This field is set to UTC by default.
The supported time format is yyyy-MM-ddThh:mm:ss.nnnZ (2022-01-01T10:00:00.000Z).
In order to use the collector, use the Broker VM option.
To create or configure the Broker VM, use the information described here.
You can configure the specific vendor and product for this instance.
Name | Description |
---|---|
Tanium Threat Response |
Name | Description |
---|---|
Tanium Threat Response Scan Config Revision Id | |
Tanium Threat Response GUID | |
Tanium Threat Response Type | |
Tanium Threat Response Scan Config Id | |
Tanium Threat Response Intel Doc Revision Id | |
Tanium Threat Response Event Id | |
Tanium Threat Response Priority | |
Tanium Threat Response Intel Doc Id |
Name | Description |
---|---|
Tanium TR Incident |
Name | Description |
---|---|
Tanium Threat Response | Use the Tanium Threat Response integration to manage endpoints processes, evidence, alerts, files, snapshots, and connections. This Integration works with Tanium Threat Response version below 3.0.159. In order to use Tanium Threat Response version 3.0.159 and above, use Tanium Threat Response V2 Integration. |
Tanium Threat Response v2 | Use the Tanium Threat Response integration to manage endpoint processes, evidence, alerts, files, snapshots, and connections. This integration works with Tanium Threat Response version 3.0.159 and above. |
Name | Description |
---|---|
Tanium Threat Response |
Name | Description |
---|---|
Tanium Threat Response - Request File Download | Request file download from Tanium Threat Response. |
Tanium Threat Response - Request File Download v2 | Request file download from Tanium Threat Response v2. |
Tanium Threat Response - Create Connection | Creates a connection to a remote destination from Tanium Threat Response. |
Tanium Threat Response - Create Connection v2 | Creates a connection to a remote destination from Tanium Threat Response v2 v2 |
Name | Description |
---|---|
Tanium Threat Response |
Name | Description |
---|---|
Tanium Threat Response Intel Doc Revision Id | |
Tanium Threat Response Type | |
Tanium Threat Response GUID | |
Tanium Threat Response Event Id | |
Tanium Threat Response Intel Doc Id | |
Tanium Threat Response Scan Config Id | |
Tanium Threat Response Scan Config Revision Id | |
Tanium Threat Response Priority |
Name | Description |
---|---|
Tanium TR Incident |
Name | Description |
---|---|
Tanium Threat Response v2 | Use the Tanium Threat Response integration to manage endpoint processes, evidence, alerts, files, snapshots, and connections. This integration works with Tanium Threat Response version 3.0.159 and above. |
Tanium Threat Response | Use the Tanium Threat Response integration to manage endpoints processes, evidence, alerts, files, snapshots, and connections. This Integration works with Tanium Threat Response version below 3.0.159. In order to use Tanium Threat Response version 3.0.159 and above, use Tanium Threat Response V2 Integration. |
Name | Description |
---|---|
Tanium Threat Response |
Name | Description |
---|---|
Tanium Threat Response |
Name | Description |
---|---|
Tanium Threat Response - Create Connection | Creates a connection to a remote destination from Tanium Threat Response. |
Tanium Threat Response - Create Connection v2 | Creates a connection to a remote destination from Tanium Threat Response v2 v2 |
Tanium Threat Response - Request File Download | Request file download from Tanium Threat Response. |
Tanium Threat Response - Request File Download v2 | Request file download from Tanium Threat Response v2. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Common Playbooks | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Common Types | By: Cortex XSOAR |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Rasterize | By: Cortex XSOAR |
Common Playbooks | By: Cortex XSOAR |
Cortex REST API | By: Cortex XSOAR |
Filters And Transformers | By: Cortex XSOAR |
Certification | Certified | Read more |
Supported By | Cortex | |
Created | September 23, 2020 | |
Last Release | September 8, 2024 |