Unauthorized Change Detection - ServiceNow Integration - Tanium Tech Talks #93

Unauthorized Change Detection - ServiceNow Integration - Tanium Tech Talks #93

Jun 19, 2024

See how Tanium and ServiceNow can alert you when someone changes a critical server outside a change window. Is it legit? Is it a threat actor? Track these changes and find out.

Regulated customers routinely shell out big bucks for file integrity monitoring solutions. Now with Tanium and ServiceNow you can pass audit in a short amount of time and customize the process to your needs, all with unmatched industry capabilities.

Key Points

  • Simplify and automate compliance and audit reporting
  • Tanium Integrity Monitor identifies Windows/Linux file/registry changes
  • Send this data to ServiceNow for comparison against change controls
  • Alert on the deltas outside change windows

RESOURCES
RUNBOOK
Tanium Integrity Monitor and ServiceNow together
https://help.tanium.com/bundle/integrity-monitor-unauthorized-change/page/ServiceNow_Integrations/Integrity_Monitor_and_Unauthorized_Change/SN_IM_Overview.htm
RELEASE ANNOUNCEMNT
New Tanium Security Operations for ServiceNow Gives Organizations a Powerful Cybersecurity Solution
https://www.tanium.com/blog/tanium-security-operations-for-servicenow-cybersecurity-solution/

#ServiceNow #secops #changemanagement #fim #informationsecurity #informationtechnology #integritymonitoring

CHAPTERS

00:00 Intro

01:15 Meet Saqib

01:40 What is the problem?

03:00 Tanium Integrity Monitor

05:00 ServiceNow Prerequisites

07:18 DEMO Tanium IM configuration

11:00 DEMO ServiceNow Store solution

11:30 DEMO Tanium Saved Question

15:17 DEMO ServiceNow configuration

22:32 DEMO Event data

25:00 DEMO Alerts

27:52 Troubleshooting

33:18 What customers say

34:48 Closing thoughts