Check: TANS-DB-000002
Tanium 6.5 STIG:
TANS-DB-000002
(in versions v1 r3 through v1 r2)
Title
The Tanium SQL server must be dedicated to the Tanium application database. (Cat II impact)
Discussion
Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.
Check Content
With the Tanium administrator's assistance, access the server on which the Tanium SQL database is installed. Review the databases hosted by that SQL server. If more databases exist on the SQL server than the Tanium database, this is a finding.
Fix Text
Move the Tanium SQL database from the SQL server hosting multiple databases to a dedicated SQL server or remove other databases co-located with Tanium on the existing SQL server.
Additional Identifiers
Rule ID: SV-81515r1_rule
Vulnerability ID: V-67025
Group Title: SRG-APP-000323
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-002346 |
The organization employs organization-defined data mining prevention techniques for organization-defined data storage objects to adequately protect against data mining. |
Controls
| Number | Title |
|---|---|
| AC-23 |
Data Mining Protection |