Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Tanium Intel] YARA rule not added to Tanium with silent fail (no log) #3592

Open
SamuelHassine opened this issue Mar 8, 2025 · 0 comments
Open

[Tanium Intel] YARA rule not added to Tanium with silent fail (no log) #3592

SamuelHassine opened this issue Mar 8, 2025 · 0 comments
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team

Comments

@SamuelHassine
Copy link
Member

Description

Given this stream (Tanium):

https://filigran.octi.filigran.io/dashboard/data/sharing/streams?orderAsc=true&searchTerm=&sortBy=name

This YARA rule:

https://filigran.octi.filigran.io/dashboard/observations/indicators/d233649f-d522-4f08-88a6-b5f9b70e1cb6

Adding the label has no effect. No log in the connector, the YARA rule is never created in the Tanium Threat Response Intel.
@SamuelHassine SamuelHassine added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Mar 8, 2025
@SamuelHassine SamuelHassine changed the title YARA rule not added to Tanium with silent fail (no log) [Tanium Intel] YARA rule not added to Tanium with silent fail (no log) Mar 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@SamuelHassine