Tanium integration orchestration workflow and activities The base system includes workflow activities you can use to integrate Tanium with your instance. Tanium - Get Running Processes workflow This workflow creates an audit trail, and the Tanium: Get-Processes Question activity takes the IPV4 address of the CI as input and runs a query on the Tanium server. The output is a list of all the running processes on the affected CI. Tanium - Get File Details workflowThis workflow queries the Tanium server for the existence of files with a specific hash value or file name. The activities collect the results and store them as enrichment data on a security incident.