Deployments go out in the evening, and by then many workstations are switched off. Tanium had no native way to wake them, but its peer architecture means another endpoint on the same subnet is almost always online. A parameterized sensor asks which endpoints have the target MAC address in their ARP cache, and a package has those peers build and send the magic packet with PowerShell and .NET. It supports a single machine, a whole subnet, or every cached neighbor, with no relay servers or extra infrastructure.
