Tanium adds endpoint behavior detection and AI-assisted threat hunting
Tanium relaunched Security Operations with behavioral endpoint detection, fleet-wide response, and plain-language AI hunting.
Tanium relaunched Tanium Security Operations to catch attackers who sign in with stolen credentials and use legitimate administrative tools rather than detectable malware. Endpoint Drift ranks abnormal endpoint behavior, while a new Insights Engine replaces process-injection detection to find activity hidden in trusted processes. Tanium Atlas lets analysts ask plain-language questions across endpoints and then stop a process, collect forensics, or isolate hosts. A Federated SOC model keeps each team's suppressions and automated actions separate, and HuntIQ pairs Tanium hunters with the platform.
- Relaunch targets attackers using stolen credentials and admin tools.
- Endpoint Drift ranks machines whose behavior looks abnormal.
- Insights Engine detects attackers hiding inside trusted processes.
- Atlas supports plain-language hunts with immediate endpoint actions.
- Responses include process stops, forensics, and host isolation.
- Vendors
- Tanium
From the original article
3 min read at helpnetsecurity.comTanium has relaunched Tanium Security Operations to address AI-assisted attacks in which adversaries use legitimate administrative tools to blend into normal activity and spread across endpoints. The platform is designed to detect this behavior, support response across affected endpoints and help analysts investigate threats. With AI, attackers no longer need malware that a scanner can catch.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.