Posted: 15th April 2022

Product Overview

The Tanium Reputation Service and Recorded Future integration gives users real-time threat intelligence data on process hash values found on Tanium endpoints. Users can expect to improve response times while also identifying more security threats before impact.

Challenges Overcome Through Integration

Recorded Future connects the dots between the broadest range of sources across every language. Elite security intelligence layered on top of internally discovered hashes in Tanium Reputation gives analysts visibility into which indicators should be prioritized based on a real-time Recorded Future risk score.

Recorded Future’s integration with Tanium enables users to detect and gain context on hashes seen across any Tanium protected device, all from within the Tanium Reputation service.

Integration Description

Workflows within Tanium allow users of the Recorded Future for Tanium Reputation Service integration to quickly view all SHA256 hashes returned by the endpoints.

By navigating the Tanium Reputation module, users can also see the returned hashes that have been processed by Recorded Future by selecting Melicious Reputations from the sub-navigation. Hashes listed under Melicious Reputations can each be selected to view all Recorded Future context including:

  • Reputation
  • Risk Level
  • Risk Score
  • Risk Rules
  • Evidence Details
This data helps organizations take advantage of faster “speed to no” while also enhancing existing data within Tanium.