Document Purpose and Conventions

This document has the following aims:

• To provide instructions to delegates to enable completion of the practical training labs
• Where relevant, provide guidance which can be used during real world implementations

The following conventions are used to highlight important information.

Lab Information
The lab environment consists of the following computers:

Unless otherwise indicated, logon to the lab VMs using the following accounts

Tachyon Advanced v5.0

This lab will teach you how to create some complex Instructions using SCALE. You will also learn how to create some advanced fragments for use in Guaranteed State. The final exercise will walk you through some real-world examples for using Guaranteed State in production environments.

Exercise Overview

In this lab you will carry out the following exercises (Ex):

Ex 1 - TCN Adv 5.0 - TIMS Explained

• Configuring TIMS prerequisites
  • Enrolling a code signing certificate on the Tachyon server
  • Validate the certificate
  • Enrolling the Code Signing certificate on a workstation
• TIMS
  • Install TIMS on a workstation
  • Navigating TIMS
• Creating a Basic Instruction
  • Create Basic Instruction
  • Validating the Instruction
  • Uploading the instruction in Tachyon
  • Running the newly created Instruction

Ex 2 - TCN Adv 5.0 - TIMS Functions

• The Basics
  • Basic SQL
• String Manipulation
  • Splitlines
  • SUBSTR
  • INSTR
• Regular Expression
  • REGEXP
  • REGEXCAPTURE
  • REGEXREPLACE
  • Time Formatting
• Other Functions
  • FOREACH Loop
  • UNION
  • File Path
  • CASE
  • REPLACE
  • EVALUATE
  • String Escaping
  • String Concatenation

Ex 3 - TCN Adv 5.0 - SCALE The Relational Model

• Thinking Relationally
• Basic Relational Operators
  • Project
  • Restrict
  • JOIN
  • LEFT JOIN
  • Sub Queries
  • Aggregation
  • IN
  • Common Table Expressions

Ex 4 - TCN Adv 5.0 - Creating an Instruction: Critical Services

• Logged on User
  • Capture Logged on User
• Defining Critical Services
  • Define Critical Services
• Defining Parameters
  • Define Parameters
• Determining State of Critical Services and taking action based on Parameters
  • Determine the State
  • For loop for each of the 4 scenarios
  • Select statement using CASE
  • Using UNION for Services not installed
• Remediate
  • Start Service and set it to Automatic
  • Get the FQDN of the Computer
  • Creating a File With Information For Opening a Ticket
• Create an Instruction
  • Schema
  • Aggregation
  • Instruction Definition
• Running the Instruction
  • Uploading the Instruction
  • Stop the SMS Agent Host service
  • Run the Instruction

Ex 5 - TCN Adv 5.0 - Creating an Instruction that executes a Script

• Create an Instruction
  • Create a Query
  • Creating an Action Instruction that Contains a Script
  • Upload Instructions to Tachyon
  • Running Instructions

Ex 6 - TCN Adv 5.0 - Visualization and Aggregation

• Visualization and Aggregation
• Vizualization
  • Create the Basic Tabular Data
  • Create the Aggregation
  • Create the Response Template
  • Uploading the Instruction
  • Run the Instruction
• Aggregation
  • Device Centric Aggregating Instructions
  • Create the Aggregation
  • Uploading the Instruction
  • Run the Instruction

Ex 7 - TCN Adv 5.0 - Extending Guaranteed State

• Creating a Product Pack for Guaranteed State
  • Creating the Fragment
  • Viewing the Contents of an Integrated Product Pack
  • Creating the Product Pack
  • Importing into Guaranteed State
  • Creating the Rule
  • Creating the Policy
  • Assign and Deploy the Policy
  • View the Results
• RansomWare Attack
  • Create the Fragments
  • Edit the Manifest File
  • Create the Product Pack
  • Upload to Guaranteed State
  • Create the Rule
  • Create the Policy
  • Deploy the Policy
  • Set the Stage for the Outbreak
  • View the Results of the Policy
  • Remove the Device from Quarantine

Ex 8 - TCN Adv 5.0 - Real World Examples for Guaranteed State

• Application Health Check
  • Create the Missing Rule
  • Create the Service Rule
  • Create the Version Rule
  • Create the Policy
  • Deploy the Policy
  • Set the Stage for Broken Application
• Service Desk Ticket Symptom
  • Create the Rule
  • Create the Policy
  • Assign and Deploy the Policy
  • Viewing the Initial Results
  • Set the Stage
• Removing Unauthorized Software
  • Create the Fragment
  • Upload into Guaranteed State
  • Create the Rule
  • Create the Policy
  • Assign and Deploy the Policy
  • View the Results

Ex 9 - TCN Adv 5.0 - Tachyon Activity Record

• Reviewing the Historical Data
  • Review Historical Data
• Establishing processes delta
  • Processes run in the past 7 days
  • Summarize execution over past 7 days
  • Identify Processes that have run in the past month but not in the past 7 days
  • Getting the delta between the two data sets
• Getting more process details
  • FOREACH loop for each process in the list
  • Changing the ExecutablePath to friendly name
  • FileSystem.GetFileDetails
  • FileSystem.GetVersionInfo
  • FileSystem.GetDigitalSignature
• Final Output
  • Final Output

Next Page

Ex 1 - TCN Adv v5.0 - TIMS Explained