Go-Tanium Tech Talks | Episode 31: "The 411 on Log4j: Tanium Reveal"

Опубликовано: 13 Октябрь 2024
на канале: Tanium
1,345
20

How do you crawl files in the enterprise looking for a single string like "Log4j" in seconds? See how a free trial of @Tanium can grant you rapid visibility into the latest threats on today's Go-Tanium Tech Talk.

Today's episode features Tanium Reveal, the module that makes this hunting possible.

Tanium gives you the real-time visibility and control to scope and remediate #Log4j/#Log4Shell and other vulnerabilities like it. Find and fix at speed and scale across Windows, MacOS, and Linux. Not only can you find the files in question, you can also look inside them to see the exact relevant strings, even inside nested files.

How Tanium helps with a complete Log4j solution:
-Tanium Index - Find files by name, extension, date, hash, etc.
-Tanium Reveal - Find affected files by looking inside them
-Tanium Threat Response & Interact - Scope exposure, detect exploitation, quarantine suspicious endpoints
-Tanium Deploy & Interact - Uninstall, upgrade, patch applications; apply custom remediations
-Tanium Comply - Report security configuration exposure for all endpoints
-Tanium Risk - Contextualize exposure relative to other factors

CONTENTS
00:00 Intro
00:25 Intro
02:15 What is Tanium Reveal?
04:10 What is Tanium Index? Demo
06:03 Reveal Quick Search and Live Connect demo
08:27 Reveal Rules demo
11:00 File types and nesting
12:25 Handling false positives
13:45 Reveal sensors
15:00 Performance impact on endpoint
16:32 Install & configure
17:49 Other Tanium modules for Log4j
19:07 Final remarks
20:08 Resources
20:45 Takeaways
22:45 Free trial
23:50 Holiday toast

BONUS RESOURCES

[INFO] Tanium Log4j resources and free trial: https://bit.ly/TaniumLog4j

[DOCS] Reveal user guide https://docs.tanium.com/reveal/reveal...

[LINKS] Reveal Central community hub https://community.tanium.com/s/reveal...

[STEP-BY-STEP] Community: How Tanium Can Help with CVE-2021-44228: Log4Shell https://community.tanium.com/s/articl...

[VIDEO] Log4j Vulnerability: How Tanium Can Help    • Log4j Vulnerability: How Tanium Can Help  

[VIDEO] Go-Tanium Endpoint Explorers | Episode 8: Log4j and How to Secure an Enterprise    • Video  

[DEV/TECHNICAL] Tanium Reveal: A Federated Search Engine for Querying Unstructured File Data on Large Enterprise Networks    • Industry 2025  

Follow the latest CVEs and solutions on the Tanium Emerging Issues Blog: https://bit.ly/TaniumEIB

Find links to like and subscribe the Tanium Podcast, YouTube, and Twitch shows here: http://bit.ly/Go-Tanium-Show

Interact with the host and guests of the show on the Go-Tanium discussion board: http://bit.ly/Go-Tanium-Discussions
View other episodes: http://bit.ly/Go-Tanium-Episodes
Customer-only Endpoint Security discussion group: http://bit.ly/Tanium-ES-Group
Customer-only Endpoint Management discussion group: http://bit.ly/Tanium-EM-Group

#Log4j #Log4Shell #CyberSecurity #InformationTechnology #Tanium