Insights
Technical deep-dives on Tanium, PowerShell automation, and endpoint management.
-
Investigating Windows Events at Scale
A client was recently encountering an issue at scale that required a lot of Windows Event log sleuthing. More sleuthing than I was comfortable with, honestly. Windows Event Logs are…
-
Gathering Tanium Provision Cache Status with a Sensor
I was reviewing the Provision Quick Start: Install, Configure, and Test article for a client engagement when I noticed an interesting little tidbit: Currently, checking if bundle content has downloaded…
-
PowerShell Deployment Automation Toolkit 0.5.5
Hello Again All, The PowerShell Deployment Automation Toolkit has now been updated to 0.5.5. Update 0.5.5 brings support for Tanium Patch automation and a new class; SinglePatchlistWithPost. Each Tanium Patch…
-
Conversing with TanREST Part III: Going to the Max
This post is the third entry of a multi-part series that will teach users how to dynamically target endpoints for administrative activity by leveraging questions and actions issued via the…
-
Conversing with TanREST Part II: Taking Action
This post is the second entry of a multi-part series leading toward dynamically targeting endpoints for administrative activity by leveraging questions and actions issued via the Tanium API. The plan…
-
Conversing with TanREST Part I: Starting the Conversation
This post is the first entry of a multi-part series leading toward dynamically targeting endpoints for administrative activity by leveraging questions and actions issued via the Tanium API. Each new…
-
Wake-on-LAN with Tanium
Ops teams perpetually exist between a rock (Users) and a hard place (InfoSec). Workstations require ongoing deployments to receive new configurations, software, and updates but doing so too aggressively causes…
-
Assess Windows 11 Fleet Readiness with Tanium
Performing in-place upgrades on the Windows operating system is routine now. Many of us have bemoaned the 2-year support cycle for Windows 10 but upgrades became a regular event. Windows…
-
Hijack the Tanium End User Notification Tools
Let’s face it; interacting with user space from the System context is not always the easiest thing to do in the Windows world. There are a lot of hacky, inconsistent,…
-
PowerShell Deployment Automation Toolkit 0.5.1
Hello Again All, It has been a while since I updated the toolkit so I wanted to make this a good one. 0.0.1 was a decent start but it was…