Release Notes Core AD Query Content (Version 2.6)

Thank you for choosing Tanium. This article documents changes between releases of Core AD Query Content, formerly known as "Active Directory Query"

Core AD Query Content 2.6.0.0001

Release Date: February 18, 2020

Previously collected inventory is now re-used. A retention policy is applied to influence resolving SIDs which were previously resolved.
Support pre-staged SIDsWellKnown SID to name mapping file.
Set an object's domain to Unknown if no domain was found when inventorying the object.
Improve messaging for non-domain joined systems.
Error output for an unresolved SID now includes the SIDs domain.
Enable reading group SIDs from user profile if no group SIDs were returned from Active Directory.
Allow disabling user group inventory.
Enable regex user and group matching for parameterized sensors.
Sensors now return dates in ISO-8601 format.
Enable Primary User and Logged In User Details sensors to use custom override xml file.
Improve messaging and method used to determine if inventory was attempted and failed prior to the action completing.

Improve parameter input validation on Sensors.
Correct Collect Active Directory Info command line parameter.
Set variable folding object's domain to Null within processing loop.
Do not use user's domain during group name resolution when the group's SID is outside the user's domain.
Save domain computer/user groups even if their SID cannot be resolved to a valid name.
The Last Run Status sensor will no longer report "Script failed..." when not enough time has elapsed since previous inventory collection.
Do not process Active Directory properties having a type of Byte or Object.

If Tanium Asset is installed, ensure Tanium Asset is at least version 1.7 before installing this version of AD Query.
In prior versions, inventory was saved across three xml files. This release combines all of that data in a single file named Inventory.xml. Previously collected inventory files will not be deleted automatically. Any custom content referencing any of the original three xml files from the previous releases should be updated to read out of the single Inventory.xml file.
Public documentation is forthcoming.

Tanium Server 7.2, 7.3, 7.4