Enriching Tanium Comply with Asset Inventory Data using Extract, Transform, and Load (ETL) Pipelines to Enhance Detection Visibility within Elasticsearch

Native Tanium Asset sensors lacked the capability to gather metadata from AWS EC2 and Oracle Cloud Infrastructure (OCI) compute instances. The primary challenge was building a dataflow which accurately enriched Tanium Comply scan information with compute instance metadata across disparate cloud architectures to drive remediation activities and provide visibility of detection metrics and solutions to system owners. Join this session to learn how Oracle used Tanium Comply and Connect to construct an accurate inventory index in Elasticsearch with the ability to build dashboards for analytics, metrics, remediation burndown visualization, and reporting functionality across all segmented organizational stakeholders.

Additional Details:

Unique ID
C-E-SESSIONS148
Location
Asia Pacific
Pass Type
Converge, Converge + Labs, Converge (Fed/Public Sector), Converge + Labs (Fed/Public Sector)
Session Type
Breakout
Tanium Pillars
Control, Speed, Truth, Visibility
Session Track
Risk & Compliance Management
Products & Solutions
Comply, Connect, Interact
Difficulty
Beginner, Beginner/Intermediate, Intermediate, Intermediate/Advanced, Advanced
Focus
Security, Administrator, Operations, Risk
Industry
Agriculture%2C Mining & Raw Materials, Construction, Education, Energy%2C Utilities & Waste, Entertainment, Facilities%2C Lodging & Resorts, Financial Services, Government - Federal, Government - Local, Healthcare & Life Sciences, Holding Companies & Conglomerates, Hospitals & Physicians Clinics, Insurance, Law Firms & Legal Services, Manufacturing%2C Construction & Wholesale Trade, Media & Internet, Media & Telecommunications, Non-Profit & Charitable Organizations, Professional & Business Services, Real Estate, Retail & Hospitality, Software & Technology, Transportation Services, Other