The computer's Active Directory Site Name Prefacing the Group input with 'regex:' will cause a RegEx compare to be performed.Įx: regex:name:domain.* (compare the Name attribute for a match on the provided regex)Įx: regex:domain.* (compare the Well Known Name attribute for a match on the provided regex) RegEx based comparisons are also supported. Multiple groups may be specified if separated by a comma. The group name may be specified as groupname or domain\groupname syntax. This may be overridden by prefacing the Group input with 'name:' - causing a compare to be performed on the group's non-translated name. The default comparison is performed on the group's Well Known Name. Returns True if the computer is a member of the Active Directory group. Searches the computer's group inventory for membership in the specified group(s). The group is returned from the memberOf attribute and is in RFC 1779 format (CN=TestGroup,OU=Sales,DC=MyDomain,DC=com). Also returns the computer's Primary Group. The distinguishedName of any Active Directory groups the computer is explicitly a member of (no nested groups). The sensor returns the group's Well Known Name. The group is returned in NT format (SomeDomain\SomeGroup). It will only return data after the Collect Active Directory Info package has completed an inventory.Īll Active Directory group memberships the computer is a member of -both explicitly and implicitly. This sensor is part of the Core AD Query Content solution. The value of the specified attribute of the computer's Active Directory object. The Active Directory organizational unit (OU) where the machine is located. This may produce the same value that the Sensor named AD Domain produces. Returns the name of the Active Directory Forest that a machine is a member of. The Active Directory domain name (if any) that the computer is joined to. The full Active Directory distinguished name for the computerĮxample: CN=Win8-test5,CN=Computers,DC=corp,DC=com The table below is a list of all Sensors you can read from the Tanium API and the Content Set it is included with.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |