Tanium Reviews

We primarily use Tanium for patching, focusing on vulnerabilities. Our major goal with Tanium is to patch based on vulnerabilities detected by our other vulnerability tools.

It's a little difficult, however, I get results immediately once I start patching something. When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes. This is a pro because most patching tools take a while to reflect changes, but Tanium updates quickly.

We use Tanium as an EDR solution for managing end-user devices and servers.

The product is granular and can build complex roles compared to other EDR vendors.

We use Tanium to deploy applications and for third parties, like Google Chrome which is already in-built in Tanium. We have deployed some packages which we are already using through SCCM, and those packages are what we are using in Tanium to attach those files and make a command line. Installation, uninstallation part, and detection methods are the things that we are using in Tanium.

I would say Tanium is the best tool for vulnerability management. If there is any issue, Tanium is a good tool.

I use Tanium to run all the security operations, threat intelligence, vulnerability management, threat hunting, red teaming, purple teaming, and everything within the vulnerability management space.

Server message block communication is one of the platform's strengths that tells how quickly it can get all the data. However, when we first deployed it, we were told to remove it immediately because it was causing issues along those lines. Within our system, we use the solution for the instant discovery and visibility aspect instead of using it to scan for vulnerability management. We have another solution for regular scanning. We use Tanium to collect the data from endpoints for the live response functions for looking at anomalous behaviors. When we had a specific targeted attack against it, a specific process was running, and we could identify and stop all of those.

Tanium's most valuable feature is its instant discovery aspect. You can have a look and see the processes running on the machine when looking for specific indicators. We use the solution within the threat-hunting and vulnerability-management space.

There are some very compelling use cases. A value proposition.

The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps. 

Things that are sometimes overlooked within an IT support, operational, and security model framework, and all of that being consolidated into a multi-view and multi-windows dashboard.

We use the tool as an infrastructure operational management solution. 

The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization.