Tanium Demo Playbook Deprecated

Deprecated. No available replacement. This playbook shows how to use automation scripts to interact with Tanium.

Tanium · 8 tasks · 0 inputs · 0 outputs

Details

IDplaybook15
From Version5.0.0
Tasks8

README

Deprecated. No available replacement. This playbook shows how to use automation scripts to interact with Tanium.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Tanium_v2
  • Tanium

Scripts

This playbook does not use any scripts.

Commands

  • tn-deploy-package
  • tn-ask-question
  • tn-get-saved-question-metadata

Playbook Inputs

There are no inputs for this playbook.

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Tanium Demo Playbook

Commands used

tn-ask-question tn-deploy-package tn-get-saved-question-metadata

Flowchart

Start Start Ask questions - tn-ask-question Ask questions tn-ask-question Run a complex Tanium query to find all machines with processes starting with "EC" - tn-ask-question Run a complex Tanium quer... tn-ask-question Get saved question - Tanium Client Versions - tn-get-saved-question-metadata Get saved question - Tani... tn-get-saved-question-metadata Get saved question - Running Applications - tn-get-saved-question-metadata Get saved question - Runn... tn-get-saved-question-metadata Querying Tanium Querying Tanium Deploying Actions Deploying Actions Deploy a Tanium action to enable USB write protect for all hosts - tn-deploy-package Deploy a Tanium action to... tn-deploy-package

Source

playbook-Tanium_Demo.yml
Download History Raw 
id: playbook15
deprecated: true
version: -1
name: Tanium Demo Playbook
description: Deprecated. No available replacement. This playbook shows how to use automation scripts to interact with Tanium.
fromversion: 5.0.0
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 18219156-ab84-4e03-8a5d-eaf3f2b5d402
    type: start
    task:
      description: ""
      id: 18219156-ab84-4e03-8a5d-eaf3f2b5d402
      version: -1
      name: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "7"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 54
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "2":
    id: "2"
    taskid: 3533d2be-a90d-4f93-8630-c169d790254d
    type: regular
    task:
      id: 3533d2be-a90d-4f93-8630-c169d790254d
      version: -1
      name: Ask questions
      description: Asks the server to parse the question text and choose the first parsed result as the question to run.
      script: '|||tn-ask-question'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "3"
    scriptarguments:
      question-text:
        complex:
          root: Tanium.SavedQuestion
          accessor: QueryText
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 669
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "3":
    id: "3"
    taskid: d7609125-e21f-4871-8d72-518017ea0b93
    type: regular
    task:
      id: d7609125-e21f-4871-8d72-518017ea0b93
      version: -1
      name: Run a complex Tanium query to find all machines with processes starting with "EC"
      description: Asks the server to parse the question text and choose the first parsed result as the question to run.
      script: '|||tn-ask-question'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "8"
    scriptarguments:
      question-text:
        simple: Get all machines with processes starting with "EC"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 830
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "4":
    id: "4"
    taskid: 6553c9ee-e178-4084-8718-5e2fdc549fed
    type: regular
    task:
      id: 6553c9ee-e178-4084-8718-5e2fdc549fed
      version: -1
      name: Get saved question - Tanium Client Versions
      description: Returns a saved question object based on name or ID.
      script: '|||tn-get-saved-question-metadata'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "6"
    scriptarguments:
      question-name:
        simple: Tanium Client Versions
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 338
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "6":
    id: "6"
    taskid: a4aaa5eb-3724-43fe-86e5-c8e7363743ed
    type: regular
    task:
      id: a4aaa5eb-3724-43fe-86e5-c8e7363743ed
      version: -1
      name: Get saved question - Running Applications
      description: Returns a saved question object based on name or ID.
      script: '|||tn-get-saved-question-metadata'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "2"
    scriptarguments:
      question-name:
        simple: Running Applications
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 508
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "7":
    id: "7"
    taskid: 474a6415-eb35-4137-8977-c60db94ac520
    type: title
    task:
      description: ""
      id: 474a6415-eb35-4137-8977-c60db94ac520
      version: -1
      name: Querying Tanium
      type: title
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "4"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 198
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "8":
    id: "8"
    taskid: c6202d75-3923-44df-86e6-a685195739c8
    type: title
    task:
      description: ""
      id: c6202d75-3923-44df-86e6-a685195739c8
      version: -1
      name: Deploying Actions
      type: title
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "9"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 998
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "9":
    id: "9"
    taskid: b05fd6d0-3e6d-40a9-81b3-58888214b896
    type: regular
    task:
      id: b05fd6d0-3e6d-40a9-81b3-58888214b896
      version: -1
      name: Deploy a Tanium action to enable USB write protect for all hosts
      description: Deploy a package and get the results back
      script: Tanium|||tn-deploy-package
      type: regular
      iscommand: true
      brand: Tanium
    scriptarguments:
      action_filters: {}
      action_options: {}
      get_results: {}
      package:
        simple: USB Write Protect - Set to On
      package_args: {}
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 450,
          "y": 1152
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
system: true
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 1193,
        "width": 380,
        "x": 450,
        "y": 54
      }
    }
  }
inputs: []
outputs: []
tests:
- No test