Folders and files Name Name Last commit message
Last commit date
parent directory
View all files
Custom Integration: Tanium
Tanium API URL (e.g., https://<your-tanium-instance>/plugin/products/gateway/graphql).
API Token with permissions to access endpoint and compliance data via the Tanium GraphQL API.
Obtain the API Token from your Tanium instance:
Follow the Tanium API Documentation for guidance on generating an API token.
Ensure the token has permissions to query endpoint data and compliance findings.
Note down your Tanium API URL.
(OPTIONAL) - Make any necessary changes to the script to align with your environment.
Modify API queries as needed to filter endpoint data or compliance findings.
Adjust data parsing or mappings to suit your organizational needs.
Create the Credential for the Custom Integration .
Select the type Custom Integration Script Secrets.
Use the access_secret field for your Tanium API Token.
For access_key, input a placeholder value like foo (unused in this integration).
Create the Custom Integration .
Add a Name and Icon for the integration (e.g., "tanium").
Toggle Enable custom integration script to input the finalized script.
Click Validate to ensure it has valid syntax.
Click Save to create the Custom Integration.
Create the Custom Integration task .
Select the Credential and Custom Integration created in steps 2 and 3.
Update the task schedule to recur at the desired timeframes.
Select the Explorer you'd like the Custom Integration to run from.
Click Save to kick off the first task.
You will see the task kick off on the tasks page like any other integration.
The task will retrieve endpoint, software, and vulnerability data from your Tanium instance and upload it to runZero.
Assets in runZero will be updated or created based on the data retrieved from Tanium.
Ensure that your Tanium GraphQL API endpoint is accessible from the system running the runZero Explorer.
You can monitor task execution and check for any errors or issues in the tasks page.
Customize the build_assets function to include additional fields or mappings as needed for your organization.
Search for assets enriched by this integration using the runZero search query custom_integration:tanium.
You can’t perform that action at this time.