Release Notes Core AD Query Content (Version 3.0)

Thank you for choosing Tanium. This article documents changes between releases of Core ADQuery Content, formerly known as "Active Directory Query"

Core AD Query Content 3.0.1.0005

Release Date: August 11, 2020

The inventory script no longer fails if all users are excluded from inventory.
The inventory script no longer fails if critical WMI queries return empty collections.
An incorrect Primary User is no longer reported when no successful user logons have been recorded.

If Tanium Asset is installed, ensure Tanium Asset is at least version 1.7 before installing this version of AD Query.
When importing this version of AD Query check the "Include content set overwrite" checkbox to ensure the solution content is placed into the correct Content Set. Please work with your TAM to understand the implications of using this setting during content import.
This solution should remove the Verification Query from the "Collect Active Directory Info" package. If the Verification Query still exists after import, it should be removed by manually editing the package.

Release Date: May 19, 2020

Only return current objects from sensors.
Improve group member reporting from the "AD Query - Local Administrators" and "AD Query - Local Group Members" sensors.

Improve name resolution processes used during inventory collection.
Improve detection of users who should be included in the inventory.
Enable inventory to be collected when not connected to a DC. This will use historical data found locally on the endpoint.
Include minimal inventory of Azure management data (Please ask your TAM for details).
Increase inventory collection timeout to 10 minutes.
Update domains previously listed as BUILTIN to now be the domain of the object.

If Tanium Asset is installed, ensure Tanium Asset is at least version 1.7 before installing this version of AD Query.
When importing the content, please check the "Include content set overwrite" checkbox to ensure the solution content is placed into the correct Content Set. Please work with your TAM to understand the implications of using this setting during content import.
This solution should remove the Verification Query from the Collect Active Directory Info package. If the Verification Query still exists after import, it should be removed by manually editing the package.

Tanium Server 7.2, 7.3, 7.4