Incident Response ”Determining MD5 Hash”

Threat countermeasures on the endpoint side using the Tanium Platform. For example, even if some devices identify suspicious files, there are challenges. It is in the point that "I do not know which terminal has it". A delay in countermeasures leads to the success of the attacker's attack. The Tanium Platform can detect threats on the endpoint side in real time.

Incident response “threat handling”

Endpoint threat countermeasures using the Tanium Platform. For example, as a result of checking, we found a malicious application called AppX. As mentioned above, speedy incident response is required, but with the Tanium Platform, it is possible to visualize hundreds of thousands of terminals in real time, and complete actions from threat detection to countermeasures. increase.

* Below is the screen to kill the “AppX” process.

application hunting

IT command and control using the Tanium Platform. With the Tanium Platform, you can visualize in real time who in your organization has installed what kind of applications. If a user seems to be using an application that is not allowed by your organization, you can detect it immediately. In addition, you can uninstall or isolate the terminal as necessary. It is also used to improve ROI. How many devices and how many applications are there? Since this is visualized, it is possible to visualize devices that are used infrequently and work to improve ROI.

Real-time patch application conditions

As endpoint environments get larger, patching usually requires hours, days, and scheduled maintenance maintenance. However, considering the current security situation, real-time patch application is required. The Tanium Platform uses the Windows Server Update Services (WSUS) API to diagnose patches for 100% compliance with Microsoft's standard patch validation parameters, and can force deployments as needed.