Document Purpose and Conventions

This document has the following aims:

• To provide instructions to delegates to enable completion of the practical training labs
• Where relevant, provide guidance which can be used during real world implementations

The following conventions are used to highlight important information.

Lab Information

The lab environment consists of the following computers:

Unless otherwise indicated, logon to the lab VMs using the following accounts

Tachyon Advanced v8.1

This lab will teach you how to create some complex Instructions using SCALE. You will also learn how to create some advanced fragments for use in Guaranteed State. The final exercise will walk you through some real-world examples for using Guaranteed State in production environments.

Exercise Overview

In this lab you will carry out the following exercises (Ex):

Ex 1 - Tachyon v8.1 Advanced - TIMS Explained

• Configuring TIMS prerequisites
  • Enrolling a code signing certificate on the Tachyon server
  • Validate the certificate
  • Enrolling the Code Signing certificate on a workstation
• TIMS
  • Install TIMS on a workstation
  • Navigating TIMS
• Creating a Basic Instruction
  • Create Basic Instruction
  • Validating the Instruction
  • Uploading the instruction in Tachyon
  • Running the newly created Instruction

Ex 2 - Tachyon v8.1 Advanced - TIMS Functions

• The Basics
  • Basic SQL
• String Manipulation
  • Splitlines
  • SUBSTR
  • INSTR
• Regular Expression
  • REGEXP
  • REGEXCAPTURE
  • REGEXREPLACE
  • Time Formatting
• Other Functions
  • FOREACH Loop
  • UNION
  • File Path
  • CASE
  • REPLACE
  • EVALUATE
  • String Escaping
  • String Concatenation

Ex 3 - Tachyon v8.1 Advanced - SCALE The Relational Model

• Thinking Relationally
• Basic Relational Operators
  • Project
  • Restrict
  • JOIN
  • LEFT JOIN
  • Sub Queries
  • Aggregation
  • IN
  • Common Table Expressions

Ex 4 - Tachyon v8.1 Advanced - Creating an Instruction: Critical Services

• Logged on User
  • Capture Logged on User
• Defining Critical Services
  • Define Critical Services
• Defining Parameters
  • Define Parameters
• Determining State of Critical Services and taking action based on Parameters
  • Determine the State
  • For loop for each of the 4 scenarios
  • Select statement using CASE
  • Using UNION for Services not installed
• Remediate
  • Start Service and set it to Automatic
  • Get the FQDN of the Computer
  • Creating a File With Information For Opening a Ticket
• Create an Instruction
  • Schema
  • Aggregation
  • Instruction Definition
• Running the Instruction
  • Uploading the Instruction
  • Stop the SMS Agent Host service
  • Run the Instruction

Ex 5 - Tachyon v8.1 Advanced - Creating an Instruction that executes a Script

• Create an Instruction
  • Create a Query
  • Creating an Action Instruction that Contains a Script
  • Upload Instructions to Tachyon
  • Running Instructions

Ex 6 - Tachyon v8.1 Advanced - Visualization and Aggregation

• Visualization and Aggregation
• Vizualization
  • Create the Basic Tabular Data
  • Create the Aggregation
  • Create the Response Template
  • Uploading the Instruction
  • Run the Instruction
• Aggregation
  • Device Centric Aggregating Instructions
  • Create the Aggregation
  • Uploading the Instruction
  • Run the Instruction

Ex 7 - Tachyon v8.1 Advanced - Extending Guaranteed State

• Creating a Product Pack for Guaranteed State
  • Creating the Fragment
  • Viewing the Contents of an Integrated Product Pack
  • Creating the Product Pack
  • Importing into Guaranteed State
  • Creating the Rule
  • Creating the Policy
  • Assign and Deploy the Policy
  • View the Results
• RansomWare Attack
  • Files that will be used by our fragment
  • Create the Fragments
  • Edit the Manifest File
  • Create the Product Pack
  • Upload to Guaranteed State
  • Create the Rule
  • Create the Policy
  • Set the Stage for the Outbreak
  • View the Results of the Policy
  • Remove the Device from Quarantine

Ex 8 - Tachyon v8.1 Advanced - Real World Examples for Guaranteed State

• Application Health Check
  • Create the Missing Rule
  • Create the Service Rule
  • Create the Version Rule
  • Create the Policy
  • Deploy the Policy
  • Set the Stage for Broken Application
• Service Desk Ticket Symptom
  • Create the Rule
  • Create the Policy
  • Assign and Deploy the Policy
  • Viewing the Initial Results
  • Set the Stage
  • View the Results
• Removing Unauthorized Software
  • Create the Fragment
  • Upload into Guaranteed State
  • Create the Rule
  • Create the Policy
  • Assign and Deploy the Policy
  • View the Results

Ex 9 - Tachyon v8.1 Advanced - Tachyon Activity Record

• Reviewing the Historical Data
  • Review Historical Data
• Establishing processes delta
  • Processes run in the past 7 days
  • Summarize execution over past 7 days
  • Identify Processes that have run in the past month but not in the past 7 days
  • Getting the delta between the two data sets
• Getting more process details
  • FOREACH loop for each process in the list
  • Changing the ExecutablePath to friendly name
  • FileSystem.GetFileDetails
  • FileSystem.GetVersionInfo
  • FileSystem.GetDigitalSignature
• Final Output
  • Final Output

Next Page

Ex 1 - Tachyon v8.1 Advanced - TIMS Explained