7.6. Execution modesΒΆ

Tanium HAT has three execution modes:

  • Getting Tanium Data (Configuration option get_tanium_data):

    • Requires a connection to a Tanium Platform Server.
    • Utilizes PyTan under the hood to connect to and interact with the Tanium Platform Server.
    • For every enabled plugin, ask questions of the Tanium Platform.
    • Exports the results for every question asked to a csv file under tanium_hat\data.
    • Requires Administrator privelages to ask questions.

  • Getting Internet Data (Configuration option get_internet_data):

    • Requires a connection to the Internet.
    • For every enabled plugin, runs the get_internet_data defined steps, which fetch data from various sites (such as http://www.cvedetails.com), parse the HTML down to extract a value, and return that value.
    • Stores all the results from plugins into a csv file under tanium_hat\data.

    Note

    Tanium HAT provides support for using an Internet Proxy. You can set proxy settings during by configuring the Internet Proxy inside the Tanium HAT configuration file, or if said file is not being used Tanium HAT will prompt you in case a Proxy should be configured.

    Proxy format example: https://username:password@host:port (for proxies with http basic auth)

  • Analyzing Data (Configuration option analyze_data)

    • For every enabled plugin, load ncessary CSV raw question data from tanium_hat\data.
    • Performs calculations on the data from the loaded files.
    • Reads in a layout definition file, which defines the source PowerPoint file to use, what layout slides exist in the source file and which layout slides should be added as master slides, and also which place holders on which master slide should be updated with results from the calculations.
    • Saves the output PowerPoint file to tanium_hat\data.

Each one of those modes can be enabled individually or together in the configuration file or at run time. See Configuration for more details on the configuration file.