Yep, we had the misfortune to have both Mcaffee and Tanium installed. And then after they got ransomwared, they added even more endpoint crap onto every endpoint.

From the time Windows started, my laptop fans would spin like an aircraft taking off. Utterly ludicrous amount of wasted CPU time and energy.

To be clear, I think AV and EDR are valuable tools - but Mcaffee is just shit, and Tanium has really high CPU usage.

Aside from the above, all the security crapware made actually doing work difficult. Want to install software? Nah, nobody gets admin rights, instead submit a request on our shitty help desk, and if you're lucky and very perceivent, you'll get it in a month. Need to run something elevated? Nope!

And the worst of it was that Mcaffee, Tanium, PAM etc was all just glitter on a turd - general, more mundane stuff was a security joke. For example, at least 10 internal spam emails would be sent each day, to let you know about boring and irrelevant shit going on around the company - and every one looked like an actual spam email! Full of spelling errors, silly subject lines, and often the whole body was text rendered as an image. Internal web apps were hacked together by shit devs, and stuffed with security vulnerabilities. The general theme was "more shit on endpoints". Bah.

> At my last job IT had tanium installed on our machines. It would make your computer nearly unusable for hours. Sometimes I felt like we had computers that were completely consumed by the overhead it took just for us to have them.

Trend Micro is the same way. The only thing that eventually made it bearable was getting an SSD, but it still sucks.

Then Tanium needed tuning. There's no reason any of it's processing should have taken 1 core for more than 2 minutes...and that's the highest load task. Mostly it sits in the background, capped at 5% cpu.

But there's only so much you can do with a 7th gen dual core mobile i7

Now...McAfee? a)Was a pig, but b)did we really need to scan the entire disk every Friday afternoon?

No tuning of Tanium will make it not garbage.

I shouldn't take that personally, but I manage Tanium and my experience doesn't mirror yours.

That said, I know they have some HUGE deployments in the Military and my piddly little 25000 client install may not be comparable.

I used to help Tanium manage their stuff for the US Navy on NMCI. I stand by my statement.

But it’s not personal at all. Neither you nor I made Tanium, and I’m sure your deployment is the gold standard of Tanium deployments that would change my mind.

Noooo, Tanium gets blamed here for everything, all the time. We call it “Tanium got my dog pregnant”

99% of the time it’s not Tanium, but 1% of the time is very much is.

Oh God I totally know how you feel. Anything that touches everything like that gets blamed a lot.

On the upside, you learn every part of the stack as you have to defend yourself at each and every turn.

But be honest, it was Tanium that got my dog knocked up, wasn’t it?! Just admit it!