Unauthorized Change Detection - ServiceNow Integration - Tanium Tech Talks #93
See how Tanium and ServiceNow can alert you when someone changes a critical server outside a change window. Is it legit? Is it a threat actor? Track these changes and find out.
Regulated customers routinely shell out big bucks for file integrity monitoring solutions. Now with Tanium and ServiceNow you can pass audit in a short amount of time and customize the process to your needs, all with unmatched industry capabilities.
Key Points
- Simplify and automate compliance and audit reporting
- Tanium Integrity Monitor identifies Windows/Linux file/registry changes
- Send this data to ServiceNow for comparison against change controls
- Alert on the deltas outside change windows
RESOURCES
RUNBOOK
Tanium Integrity Monitor and ServiceNow together
https://help.tanium.com/bundle/integrity-monitor-unauthorized-change/page/ServiceNow_Integrations/Integrity_Monitor_and_Unauthorized_Change/SN_IM_Overview.htm
RELEASE ANNOUNCEMNT
New Tanium Security Operations for ServiceNow Gives Organizations a Powerful Cybersecurity Solution
https://www.tanium.com/blog/tanium-security-operations-for-servicenow-cybersecurity-solution/
#ServiceNow #secops #changemanagement #fim #informationsecurity #informationtechnology #integritymonitoring
CHAPTERS
00:00 Intro
01:15 Meet Saqib
01:40 What is the problem?
03:00 Tanium Integrity Monitor
05:00 ServiceNow Prerequisites
07:18 DEMO Tanium IM configuration
11:00 DEMO ServiceNow Store solution
11:30 DEMO Tanium Saved Question
15:17 DEMO ServiceNow configuration
22:32 DEMO Event data
25:00 DEMO Alerts
27:52 Troubleshooting
33:18 What customers say
34:48 Closing thoughts