In‑Person Labs

Below is a list of the In‑Person Labs that are offered at Converge 2025. Peruse the list and reach out to [email protected] with any questions.

Description Session Tag Difficulty More Info
1, 2, 3, 4... I Declare: A New Patch Workflow

Does your patch workflow keep calling you back to your desk? Do you have to jump into your consoles on a regular basis to push moar buttons? Don’t you wish you could go outside and touch more grass? Jump into Tanium’s new patch management of Apple devices where we dive through how to set it and forget it. All built on top of Tanium AEM promise. Pre-Req(s): Basic Understanding of Tanium and MDM

Tanium CoreBeginner-Intermediate
Beyond Detection: Leveraging Tanium Automate for Vulnerability Management and Remediation

In this lab, participants will create and modify workflows which will automatically remediate endpoint vulnerabilities. Starting from dashboards which highlight issues, participants will both create and modify Automate runbooks to address these issues. Patching operating systems, deploying updated 3rd Party software, replacing certificates, and setting an Applocker policy are some of the options we will explore in the runbooks for this lab. Pre-Req(s): Basic understanding of Tanium Comply, Patch, Deploy, Enforce, Certificate Manager, and Reporting

Risk & ComplianceIntermediate
Boost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale

This lab will teach participants to build a ServiceNow AI agent using Tanium AEM agent integration. Participants will develop a use case with real-time data and standard skills. Additionally, participants will learn how this integration helps ServiceNow investigate similar issues across endpoints and achieve fully autonomous processes confidently.   Pre-Req(s): Administrative knowledge of Tanium, Administrative knowledge of ServiceNow

Tanium CoreIntermediate
Breaching the Gap: Tanium + OpenCTI + OpenBAS for Actionable Intelligence with Attack Simulation

This lab will cover the Tanium integration with Filigran, an open-source extended threat management suite, to ingest threat reports applicable to an organization, pass those observables into Threat Response for detection, and execute an attack simulation to validate security controls. Following the simulation, this lab will explore the ability within Threat Response to highlight the gaps in existing EDR capability to identify all the stages of a Breach Attack Scenario. Pre-Req(s): Practical understanding of Tanium Threat Response, Basic understanding of Threat Intelligence, Basic concept of a Breach Attack Simulation Platform

Endpoint Management, Tanium CoreIntermediate-Advanced
From Reactive to Proactive: Automating Endpoint Management with AEM

For decades, endpoint management meant chasing problems, reacting to incidents, maintaining fragile workflows, and wrestling with change across a sprawling, ever-evolving environment. But that era is over. This isn't just a feature release -- it's a fundamental shift in how endpoint management is done. In this immersive, hands-on lab, you'll experience a world where endpoints take action driven by intelligence and governed by your intent. Tanium's Autonomous Endpoint Management (AEM) marks a seismic shift in how IT operates, delivering real-time decisions, intelligent automation, and policy-driven resilience at scale. Be part of the movement. Lead the change. And never manage endpoints the old way again. Pre-Req(s): Basic understanding of Tanium Experience with Endpoint Management

Endpoint ManagementBeginner
How to Gain Visibility and Control Over Your OT Devices using Tanium

This lab demonstrates a recent extension of the Tanium AEM platform that enables customers to manage a range of new endpoint types, including their OT (Operational Technology) devices. Using Tanium AEM, customers can achieve enhanced, real-time visibility, asset inventory, and vulnerability assessments of OT devices, and improve their security posture across all endpoints. Pre-Req(s): Operational knowledge of Tanium, Basic Understanding of OT

Endpoint Management, Risk & Compliance, Tanium CoreIntermediate-Advanced
HuntIQ: Agentic Threat Management with Tanium

With the proliferation of cloud environments, organizations are increasingly exposed to external threats such IngressNightmare. In this session, participants will be focusing on how an organization can use Tanium to continually assess their entire cloud ecosystem to identify and mitigate exposures and weaknesses. Participants will learn about cloud security best practices, as well as how to leverage Tanium modules such as Asset, Comply, and Enforce to build a Continuous Threat and Exposure Management program for their cloud estate. Pre-Req(s): Basic understanding of Tanium, Interest in learning about Cloud and Container Security

Risk & ComplianceIntermediate
PART 1: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium

This immersive 3-hour workshop – split into two 90-minute sessions, will equip you with the knowledge and skills to identify, design, and implement impactful automation using Tanium Automate. Participants will explore core concepts through live demonstrations and gain hands-on experience in building automation playbooks. Small group sessions will challenge you to brainstorm compelling use cases, and participants will turn those ideas into actionable playbooks in the second half. Ideal for teams ready to transform manual processes into scalable, repeatable automation. Pre-Req(s): Working knowledge of Tanium, Completion of "What Does Tanium Do" training, "Tanium Basics: Leveraging the Power of Certainty" Converge attendance prior to session

Endpoint Management, Risk & Compliance, Tanium CoreBeginner-Intermediate
PART 2: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium

This immersive 3-hour workshop – split into two 90-minute sessions, will equip you with the knowledge and skills to identify, design, and implement impactful automation using Tanium Automate. Participants will explore core concepts through live demonstrations and gain hands-on experience in building automation playbooks. Small group sessions will challenge you to brainstorm compelling use cases, and participants will turn those ideas into actionable playbooks in the second half. Ideal for teams ready to transform manual processes into scalable, repeatable automation. Pre-Req(s): Working knowledge of Tanium, Completion of "What Does Tanium Do" training, "Tanium Basics: Leveraging the Power of Certainty" Converge attendance prior to session

Endpoint Management, Risk & Compliance, Tanium CoreBeginner-Intermediate
Signal Before the Storm: Proactive Alerting in Tanium Guide

This interactive, lab-based session introduces you to Tanium Guide’s newly enhanced alerting features, purpose-built to deliver actionable insight in real time. You’ll learn how to construct effective reports and configure alert workflows that deliver timely emails and console notifications to the right people. Designed for users with some familiarity with Tanium and TDS, this lab takes a deep dive into optimizing visibility for client and endpoint health, tenant anomalies, and operational risk. Real-world use cases and exercises will give you the confidence to implement and extend reporting solutions within your environment—improving uptime, compliance, and peace of mind.

Pre-Req(s): A practical use of Tanium, Some familiarity with the concept of Reporting and TDS

Risk & Compliance, Tanium CoreBeginner
Strengthen Your Cryptography: Tanium's Guide to Certificate Management and Post-Quantum Readiness

Learn how to use Tanium Certificate Manager to spot weaknesses in your cryptography and remediate. Participants will learn how to replace expiring certificates and address weak ciphers using Tanium. Plus, get a preview of what Tanium is doing to prepare customers for a post-quantum world amidst new regulations. Pre-Req(s): Administrative knowledge of Tanium, Familiarity with x.509 certificates

Risk & ComplianceIntermediate
Tactical Advantage: Engaging the Users and Help Desk

In this lab we will explore how IT teams can trigger user notifications based on everyday use cases, specifically uptime greater than thirty days, or reboot required. We will pop up an alert prompting the user to reboot, allowing them to keep their computer secure. If they agree, we initiate the reboot, but if they decline, we redirect them to a URL explaining the urgency and need for the reboot. Pre-Req(s): Tanium console user with practical experience, Knowledge of Tanium Connect and Tanium Reporting

Endpoint Management, Tanium CoreIntermediate-Advanced
Tanium and Microsoft Intune for Unified Endpoint Management

In this lab, participants will dive into the dynamic duo of endpoint management and security. This year, we’re answering the age-old question of “Why do I need both?”. Participants will see how Intune and Tanium can join forces to create the ultimate platform for managing and securing their endpoints that tend to spend a lot of time outside their four walls. Discover how Tanium’s real-time data and remediation capabilities can complete Intune’s robust management features.   Pre-Req(s): Basic understanding of Tanium and Intune, 6 months experience with Tanium and Intune recommended

Tanium CoreIntermediate
Tanium Basics: Leveraging the Power of Certainty

Intended for both new users and those looking to increase their Tanium knowledge, this lab introduces learners to the Tanium Platform and core functions including questions, sensors, packages, saved questions, dashboards, categories, analyzing trends, actions, and more. Pre-Req(s): N/A

Tanium CoreBeginner
Tanium's Secret Sauce: Navigating Endpoint

In this lab, you'll be cooking up success by learning about common errors and mistakes that new users often encounter on the Tanium platform, specifically in autonomous endpoint management. We'll guide you through the best practices to prevent unwanted outcomes and demonstrate how these errors can affect your environment. Additionally, you'll get a taste of various Tanium modules related to endpoint management. By the end, you'll have the perfect recipe for leveraging Tanium's capabilities effectively. Pre-Req(s): Tanium Operator, New User

Endpoint ManagementBeginner
Trigger, Transform, Automate: API-Driven Playbook Execution with Tanium

In this lab, participants will go from a quick overview of Automate, learn how to manage it using Tanium Gateway, and finally initiate Automate Playbooks via the API. The API can be used to call Tanium Playbooks from other systems such as Microsoft Sentinel, ServiceNow or even an endpoint being imaged using Provision. Pre-Req(s): Practical use of Tanium, Knowledge of code scripting, Knowledge of Powershell or Python preferred

Tanium CoreAdvanced
Unified IT Operations: Maximizing Value with Tanium and ServiceNow

In this lab, Tanium administrators who have little to no experience with ServiceNow are quickly able to leverage the power of both platforms using Tanium’s Integration Gallery. The focus will be on configuring multiple ServiceNow integrations as well as common customizations that most customers make to unlock additional value. Pre-Req(s): IT Operations knowledge (ITAM, ITOM,ITSM), Holds one or more Tanium Certifications (TCA or TCPEM, TCPRS), Some exposure to ServiceNow or strong desire to learn

Endpoint Management, Risk & Compliance, Tanium CoreIntermediate
Use AI Agents to Accelerate Your Endpoint Management

Hunt, triage and neutralise threats in real time in this hands-on lab where you dive into Tanium’s integrations bringing Security Copilot, Agentic AI and Tanium together. You will explore the Tanium plugin in Security Copilot, build playbooks for repeatable investigations and tackle a scenario end to end using Tanium skills and Agentic AI. Pre-Req(s): Practical use of Tanium, Awareness of Microsoft Products

Risk & Compliance, Tanium CoreBeginner
Use Data From Anywhere To Drive Action Everywhere: Import, Visualize, and Utilize External Data with Tanium Gateway

This lab will guide participants through a real-world scenario using Tanium Gateway to import external data into Tanium and leverage that data to drive workflows across Tanium modules. Participants will use Tanium Gateway API to import contractor information from an HR system into Tanium Asset and build a custom report in Tanium Reporting that enumerates the endpoints used by end-of-contract users. Participants will then deploy a Retirement action in Tanium Provision directly from the Report. Taking this a step further, participants will again use Tanium Gateway to automatically schedule device Retirement for these endpoints. Pre-Req(s): Practical use of Tanium, Familiar with scripting in Python or Powershell and using APIs

Tanium CoreAdvanced
Time Name More Info
Monday, November 17, 2025
8:30 AM - 10:00 AM1, 2, 3, 4... I Declare: A New Patch Workflow
8:30 AM - 10:00 AMBoost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale
8:30 AM - 10:00 AMFrom Reactive to Proactive: Automating Endpoint Management with AEM
8:30 AM - 10:00 AMHuntIQ: Agentic Threat Management with Tanium
8:30 AM - 10:00 AMSignal Before the Storm: Proactive Alerting in Tanium Guide
8:30 AM - 10:00 AMStrengthen Your Cryptography: Tanium's Guide to Certificate Management and Post-Quantum Readiness
8:30 AM - 10:00 AMTactical Advantage: Engaging the Users and Help Desk
8:30 AM - 10:00 AMTanium and Microsoft Intune for Unified Endpoint Management
8:30 AM - 10:00 AMTanium Basics: Leveraging the Power of Certainty
8:30 AM - 10:00 AMTanium's Secret Sauce: Navigating Endpoint
8:30 AM - 10:00 AMUnified IT Operations: Maximizing Value with Tanium and ServiceNow
8:30 AM - 10:00 AMUse AI Agents to Accelerate Your Endpoint Management
10:30 AM - 12:00 PMBeyond Detection: Leveraging Tanium Automate for Vulnerability Management and Remediation
10:30 AM - 12:00 PMBoost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale
10:30 AM - 12:00 PMBreaching the Gap: Tanium + OpenCTI + OpenBAS for Actionable Intelligence with Attack Simulation
10:30 AM - 12:00 PMFrom Reactive to Proactive: Automating Endpoint Management with AEM
10:30 AM - 12:00 PMHow to Gain Visibility and Control Over Your OT Devices using Tanium
10:30 AM - 12:00 PMSignal Before the Storm: Proactive Alerting in Tanium Guide
10:30 AM - 12:00 PMTanium and Microsoft Intune for Unified Endpoint Management
10:30 AM - 12:00 PMTanium Basics: Leveraging the Power of Certainty
10:30 AM - 12:00 PMTrigger, Transform, Automate: API-Driven Playbook Execution with Tanium
10:30 AM - 12:00 PMUnified IT Operations: Maximizing Value with Tanium and ServiceNow
10:30 AM - 12:00 PMUse AI Agents to Accelerate Your Endpoint Management
10:30 AM - 12:00 PMUse Data From Anywhere To Drive Action Everywhere: Import, Visualize, and Utilize External Data with Tanium Gateway
1:00 PM - 2:30 PM1, 2, 3, 4... I Declare: A New Patch Workflow
1:00 PM - 2:30 PMBeyond Detection: Leveraging Tanium Automate for Vulnerability Management and Remediation
1:00 PM - 2:30 PMBreaching the Gap: Tanium + OpenCTI + OpenBAS for Actionable Intelligence with Attack Simulation
1:00 PM - 2:30 PMHow to Gain Visibility and Control Over Your OT Devices using Tanium
1:00 PM - 2:30 PMPART 1: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium
1:00 PM - 2:30 PMStrengthen Your Cryptography: Tanium's Guide to Certificate Management and Post-Quantum Readiness
1:00 PM - 2:30 PMTactical Advantage: Engaging the Users and Help Desk
1:00 PM - 2:30 PMTanium's Secret Sauce: Navigating Endpoint
1:00 PM - 2:30 PMUnified IT Operations: Maximizing Value with Tanium and ServiceNow
1:00 PM - 2:30 PMUse AI Agents to Accelerate Your Endpoint Management
1:00 PM - 2:30 PMUse Data From Anywhere To Drive Action Everywhere: Import, Visualize, and Utilize External Data with Tanium Gateway
3:00 PM - 4:30 PMBoost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale
3:00 PM - 4:30 PMHuntIQ: Agentic Threat Management with Tanium
3:00 PM - 4:30 PMPART 2: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium
3:00 PM - 4:30 PMSignal Before the Storm: Proactive Alerting in Tanium Guide
3:00 PM - 4:30 PMStrengthen Your Cryptography: Tanium's Guide to Certificate Management and Post-Quantum Readiness
3:00 PM - 4:30 PMTactical Advantage: Engaging the Users and Help Desk
3:00 PM - 4:30 PMTanium and Microsoft Intune for Unified Endpoint Management
3:00 PM - 4:30 PMTanium Basics: Leveraging the Power of Certainty
3:00 PM - 4:30 PMTanium's Secret Sauce: Navigating Endpoint
3:00 PM - 4:30 PMTrigger, Transform, Automate: API-Driven Playbook Execution with Tanium
3:00 PM - 4:30 PMUse Data From Anywhere To Drive Action Everywhere: Import, Visualize, and Utilize External Data with Tanium Gateway
Wednesday, November 19, 2025
1:00 PM - 2:30 PM1, 2, 3, 4... I Declare: A New Patch Workflow
1:00 PM - 2:30 PMBeyond Detection: Leveraging Tanium Automate for Vulnerability Management and Remediation
1:00 PM - 2:30 PMFrom Reactive to Proactive: Automating Endpoint Management with AEM
1:00 PM - 2:30 PMHuntIQ: Agentic Threat Management with Tanium
1:00 PM - 2:30 PMPART 1: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium
1:00 PM - 2:30 PMStrengthen Your Cryptography: Tanium's Guide to Certificate Management and Post-Quantum Readiness
1:00 PM - 2:30 PMTanium Basics: Leveraging the Power of Certainty
1:00 PM - 2:30 PMTrigger, Transform, Automate: API-Driven Playbook Execution with Tanium
3:00 PM - 4:30 PMBoost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale
3:00 PM - 4:30 PMBreaching the Gap: Tanium + OpenCTI + OpenBAS for Actionable Intelligence with Attack Simulation
3:00 PM - 4:30 PMHow to Gain Visibility and Control Over Your OT Devices using Tanium
3:00 PM - 4:30 PMPART 2: Mastering Tanium Automate: Real-World Use Cases and Playbook Creation with Tanium
3:00 PM - 4:30 PMTanium's Secret Sauce: Navigating Endpoint
3:00 PM - 4:30 PMUnified IT Operations: Maximizing Value with Tanium and ServiceNow
3:00 PM - 4:30 PMUse Data From Anywhere To Drive Action Everywhere: Import, Visualize, and Utilize External Data with Tanium Gateway
Thursday, November 20, 2025
10:00 AM - 11:30 AMBeyond Detection: Leveraging Tanium Automate for Vulnerability Management and Remediation
10:00 AM - 11:30 AMBoost ServiceNow AI Workflows with Tanium Real-Time Intellegence to Improve IT Security Operations with Certainty at Scale
10:00 AM - 11:30 AMBreaching the Gap: Tanium + OpenCTI + OpenBAS for Actionable Intelligence with Attack Simulation
10:00 AM - 11:30 AMFrom Reactive to Proactive: Automating Endpoint Management with AEM
10:00 AM - 11:30 AMHow to Gain Visibility and Control Over Your OT Devices using Tanium
10:00 AM - 11:30 AMHuntIQ: Agentic Threat Management with Tanium
10:00 AM - 11:30 AMTactical Advantage: Engaging the Users and Help Desk
10:00 AM - 11:30 AMTanium and Microsoft Intune for Unified Endpoint Management
10:00 AM - 11:30 AMTrigger, Transform, Automate: API-Driven Playbook Execution with Tanium
10:00 AM - 11:30 AMUse AI Agents to Accelerate Your Endpoint Management