STIGQter: STIG Summary: Tanium 7.x Application on TanOS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Tanium application must provide an immediate warning to the SA and ISSO (at a minimum) when allocated audit record storage volume reaches 75 percent of repository maximum audit record storage capacity.

DISA Rule

SV-254935r961398_rule

Vulnerability Number

V-254935

Group Title

SRG-APP-000359

Rule Version

TANS-AP-000870

Severity

CAT II

CCI(s)

• CCI-001855 - Provide a warning to organization-defined personnel, roles, and/or locations within an organization-defined time period when allocated audit log storage volume reaches an organization-defined percentage of repository maximum audit log storage capacity.

Weight

10

Fix Recommendation

1. Access the Tanium Server interactively.

2. Log on to the TanOS console as the user "tanadmin".

3. Enter "3" to access the "Tanium Support" menu.

4. Enter "5" to Run a Health Check.

Check Contents

1. Access the Tanium Server interactively.

2. Log on to the TanOS console as the user "tanadmin".

3. Enter "3" to access the "Tanium Support" menu.

4. Enter "6" to display last scheduled health check results.

If none exists, then this is a finding.

Vulnerability Number

V-254935

Documentable

False

Rule Version

TANS-AP-000870

Severity Override Guidance

1. Access the Tanium Server interactively.

2. Log on to the TanOS console as the user "tanadmin".

3. Enter "3" to access the "Tanium Support" menu.

4. Enter "6" to display last scheduled health check results.

If none exists, then this is a finding.

Check Content Reference

M

Target Key

5492