Tanium Connect Manual Upload Guide

Summary: How to manually upload Tanium data to Ivanti Neurons RBVM/ASOC/VULN KB.

Overview

The Ivanti Neurons platform supports the manual upload of findings data for endpoints in CSV format created from the Tanium Comply and Data modules. Tanium users can use some of the predefined reports in the Tanium Comply module and generate findings data files for their endpoints that provide information on existing endpoint vulnerabilities (CVEs) along with CVE details.

Below is the definition of the accepted columns for each dataset; additional information about naming requirements is provided below with the specific source.

Tanium Comply Data - Exported from Tanium Data

Name Tanium Column Name Required?
Computer Name hostname Yes
Operating System Generation os_family Optional
Operating System os_product Yes
Tanium Client IP Address ip address Yes
CVE plugin/title/cve Yes
First Found Date first discovered date Yes
Last Seen Date last discovered on Yes
MAC Address mac_address - optional Optional
Computer ID tanium_computer_id Yes

 

Tanium Comply Data - Exported from Tanium Connect

The platform can recognize a Tanium file as long as the name contains one of these terms: “tanium_comply”, “taniumcomply”, or “tanium-comply”. Term matching is case insensitive.

Tanium Comply data exported from Tanium Connect currently (changing in a future release) requires the file to be named “tanium_comply.csv”.

Name Tanium Column Name Required?
Computer Name hostname Yes
IP Address ip address (IPv4) Yes
Operating System Generation os_family Optional
Operating System os_product Yes
CVE plugin/title/cve Yes
First Found Date first discovered date Yes
Last Found Date last discovered on Yes
Title title Yes
Remediation solution Optional
Details description Optional

Manual Upload Steps

Once logged into the platform, navigate to the Configuration (Settings Menu - Gear - Small) > Uploads page.

In the Get Started window, enter the Upload Name and click Next.

Select an assessment to associate with this scan. Either select an available assessment or create a new one. To create a new assessment, click the Create Assessment button. Fill out the fields in the Add a New Assessment window and click Submit. You can now select the new assessment from the list. Select the assessment to associate with this scan from the list and click Next.

Select a network for this scan. Either select an available network or create a new one. To create a new network, click the Create Network button. Fill out the fields in the Add a New Network window and click Submit. You can now select the new network from the list. Select a network from the list (use the search field to find a network) and click Next.

There are two ways to add scan files on the Upload Files page. Either drag and drop the file in the gray Drag files here or click the Select Files button and search for the scan file on your computer. Once the file has been added, click Upload.

To start the upload, verify all information is correct and click Start. When parsing succeeds, the status changes to Operation Complete. Once the data successfully parses, Tanium data can be found on the Manage > Hosts and Manage > Host Findings pages in Ivanti Neurons RBVM/ASOC/VULN KB.