Check: TANS-DB-000001
Tanium 7.3 STIG:
TANS-DB-000001
(in versions v2 r2 through v1 r1)
Title
The Tanium database(s) must be installed on a separate system. (Cat II impact)
Discussion
Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries, limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases, and notifying organizational personnel when atypical database queries or accesses occur.
Check Content
Consult with the Tanium System Administrator to determine the server to which the database has been installed and is configured. If the customer is using a Tanium Appliance, this is Not Applicable. If the database is installed on the same server as the Tanium Server or Tanium Module Server, this is a finding.
Fix Text
Move the Tanium database from the Tanium Server or Tanium Module Server to a separate server.
Additional Identifiers
Rule ID: SV-234071r612749_rule
Vulnerability ID: V-234071
Group Title: SRG-APP-000323
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-002346 |
The organization employs organization-defined data mining prevention techniques for organization-defined data storage objects to adequately protect against data mining. |
Controls
| Number | Title |
|---|---|
| AC-23 |
Data Mining Protection |