Open
Description
Description
After having installed the Tanium Client to use it as an agent in OpenBAS, it doesn't seem possible to send payloads through openbas to it.
Environment
- OS: MacOS
- OpenBAS version: 1.14
- OpenBAS client: 1.14
- Other environment details:
Reproducible Steps
Steps to create the smallest reproducible scenario:
- Install TaniumClient on MacOS by following documentation from Tanium (Shared Services -> Client Management -> Install the Tanium Client externally)
- Make sure OpenBAS is configured to use Tanium correctly (application.properties data filled in) and that the TaniumClient is registered on your mac
- Through Tanium UI: send payload (select your mac -> Deploy Action -> Select OpenBas Unix package and send a command: it should work
- Through OpenBAS: launch an atomic test on your mac asset: it will not work
Expected Output
Payload should be executed on macos as well
Actual Output
Nothing
Additional information
By default, Tanium Client is installed in /Library/Tanium/TaniumClient.
Logs are available in /Library/Tanium/TaniumClient/Logs
action-history0.txt log is the best one to check that an action has been performed. Action IDs can be matched with Tanium's UI Administration -> Action History