The Tanium Platform app for ThreatConnect Playbooks allows users to ask questions and retrieve results in Tanium as part of an automated threat intelligence or incident response process in ThreatConnect Playbooks. A Playbook template exists “Get Hostnames Communicating To Specified IP Address with Tanium,” which allows users to query the Tanium Platform for endpoints that have communicated to a specific Address IOC. The following actions are available in the app:
- Create Question (with option to Save Question)
- Get Question Results By ID
- Get Saved Question Results By ID
- Get Saved Question Results By Name
This app creates and save questions in the Tanium Platform and retrieves results for questions.
This listing can be found in the ThreatConnect App Catalog under the name Tanium Platform.