Tanium Intel
Filigranの提供による
Detection & Response Enablement
概要
Tanium Intel connector streams OpenCTI threat intelligence to Tanium Threat Response in real time for endpoint detection and hunting.
The Tanium Intel connector streams OpenCTI threat intelligence to Tanium Threat Response for endpoint detection and hunting. It consumes the OpenCTI events stream in real time and creates detection and hunting intel in the Tanium platform.
Key features:
- Real-time streaming of indicators to Tanium
- Hash management in Reputation shared service
- Automatic quickscan triggering on intel insertion
- Intel deployment to specified computer groups
- Support for create, update, and delete operations