Tanium Attribute Reference

Table of Contents

Tanium Attribute Reference

This reference lists the attributes that Device Security collects from Tanium, their names as stored in Device Security, and the Device Security fields they map to.

When Device Security integrates with Tanium, it imports endpoint management data to enrich the device inventory. The attributes in this reference cover device identification, hardware, OS, and vulnerability findings from Tanium-managed endpoints.

The third-party attribute name in Device Security refers to the attribute name as it appears in the Assets Inventory table and in Query Engine. This follows the format of third-party-name.attribute-name. When viewing the attribute name in the Assets Inventory table column selector or on a Device Details page, where the third-party name can be found as a header for the attributes section, then the third-party name is removed from the attribute name.

For example, micrsoft_defender_xdr.macAddress would appear in the Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.

Plugin Products Gateway Graphql Device Attributes

Device Security collects plugin products gateway graphql device attributes from Tanium. The following table lists each Tanium attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).

Tanium Attribute	Device Security Attribute Name	Device Security Common Attribute*	Description
domainName	tanium.domainName	AD Domain	DomainName
"Tanium"	—	Endpoint Protection Vendor	"Tanium"
name	tanium.name	hostname	Name of the device
macAddress	tanium.macAddress	id; MAC	MacAddress
ipAddress	tanium.ipAddress	IP Address	IpAddress
model	tanium.model	Model	Model of the device
os.platform	tanium.os.platform	OS Group	Platform
os.name	tanium.os.name	OS Name	Name of the device
os.windows.majorVersion	tanium.os.windows.majorVersion	OS Version	MajorVersion
serialNumber	tanium.serialNumber	Serial Number	SerialNumber
installedApplications	—	third_party_learned_installed_software	InstalledApplications
networking.adapters	—	third_party_learned_network_interfaces	Adapters
entityType	tanium.entityType	user_defined_device_type	EntityType
manufacturer	tanium.manufacturer	Vendor	Manufacturer of the device
isWireless	tanium.isWireless	Wired - Wireless	IsWireless
chassisType	tanium.chassisType	—	ChassisType
computerID	tanium.computerID	—	ComputerID
disks.free	tanium.disks.free	—	Free
disks.usedPercentage	tanium.disks.usedPercentage	—	UsedPercentage
disks.usedSpace	tanium.disks.usedSpace	—	UsedSpace
entityProviderName	tanium.entityProviderName	—	EntityProviderName
isEncrypted	tanium.isEncrypted	—	IsEncrypted
isEndpoint	tanium.isEndpoint	—	IsEndpoint
isVirtual	tanium.isVirtual	—	IsVirtual
lastLoggedInUser	tanium.lastLoggedInUser	—	LastLoggedInUser
memory.ram	tanium.memory.ram	—	Ram
memory.total	tanium.memory.total	—	Total
os.windows.releaseId	tanium.os.windows.releaseId	—	ReleaseId
os.windows.type	tanium.os.windows.type	—	Type
primaryUser.country	tanium.primaryUser.country	—	Country
primaryUser.department	tanium.primaryUser.department	—	Department
primaryUser.email	tanium.primaryUser.email	—	Email
primaryUser.name	tanium.primaryUser.name	—	Name of the device
primaryUser.phoneNumber	tanium.primaryUser.phoneNumber	—	PhoneNumber
processor.architecture	tanium.processor.architecture	—	Architecture
processor.cacheSize	tanium.processor.cacheSize	—	CacheSize
processor.consumption	tanium.processor.consumption	—	Consumption
processor.cpu	tanium.processor.cpu	—	Cpu
processor.family	tanium.processor.family	—	Family
processor.logicalProcessors	tanium.processor.logicalProcessors	—	LogicalProcessors
processor.manufacturer	tanium.processor.manufacturer	—	Manufacturer of the device
systemUUID	tanium.systemUUID	—	SystemUUID

Plugin Products Gateway Graphql Vulnerability Attributes

Device Security collects plugin products gateway graphql vulnerability attributes from Tanium. The following table lists each Tanium attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).

Tanium Attribute	Device Security Attribute Name	Device Security Common Attribute*	Description
cveId	tanium.cveId	cve	CveId
cvssScore	tanium.cvssScore	cvss_base_score	CvssScore
summary	tanium.summary	Description	Summary
lastFound	tanium.lastFound	detected_time	LastFound
macAddress	—	id	MacAddress
ipAddress	—	IP Address	IpAddress
severityV3	tanium.severityV3	risk_level	SeverityV3
cveYear	tanium.cveYear	—	CveYear
firstFound	tanium.firstFound	—	FirstFound

* Only some attributes map to a Device Security Common Attribute.

SolarWinds UDT Attribute Reference

Tenable IO Attribute Reference

Device Security Docs

Tanium Attribute Reference

Device Security Docs

Tanium Attribute Reference

Plugin Products Gateway Graphql Device Attributes

Plugin Products Gateway Graphql Vulnerability Attributes

Activation & Onboarding

Next-Generation Firewalls

SASE