Tanium
Product Overview
The Tanium Reputation Service and Recorded Future integration gives users real-time threat intelligence data on process hash values found on Tanium endpoints. Users can expect to improve response times while also identifying more security threats before impact.
Challenges Overcome Through Integration
Recorded Future connects the dots between the broadest range of sources across every language. Elite security intelligence layered on top of internally discovered hashes in Tanium Reputation gives analysts visibility into which indicators should be prioritized based on a real-time Recorded Future risk score.
Recorded Future’s integration with Tanium enables users to detect and gain context on hashes seen across any Tanium protected device, all from within the Tanium Reputation service.
Integration Description
Workflows within Tanium allow users of the Recorded Future for Tanium Reputation Service integration to quickly view all SHA256 hashes returned by the endpoints.
By navigating the Tanium Reputation module, users can also see the returned hashes that have been processed by Recorded Future by selecting Melicious Reputations from the sub-navigation. Hashes listed under Melicious Reputations can each be selected to view all Recorded Future context including:
- Reputation
- Risk Level
- Risk Score
- Risk Rules
- Evidence Details