STIGUI
V-234072CAT II — Medium severitySV-234072r612749_rule

The Tanium application database must be dedicated to only the Tanium application.

Rule version TANS-DB-000002 · STIG v2 · 2021-12-20

Discussion

Failure to protect organizational information from data mining may result in a compromise of information.

Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Check

With the Tanium System Administrator's assistance, access the server on which the Tanium database(s) is installed.

Review the Tanium database(s).

If databases related to products other than Tanium exist in the Tanium database, this is a finding.

Fix

Move the Tanium database from the server hosting multiple databases for products other than Tanium or remove other product databases co-located with Tanium database(s).

Identifiers

Group ID
V-234072
Group title
SRG-APP-000323
Rule ID
SV-234072r612749_rule
Check ID
C-37257r610716_chk
Fix ID
F-37222r610717_fix