Release Notes Core Content (Version 1.3)
Thank you for choosing Tanium. This article documents changes between releases of Core Content.
Core Content is a collection of the following Tanium Solutions:
- Initial Content - AD
- Initial Content - File System
- Initial Content - Hardware
- Initial Content - Network
- Initial Content - Operating System
- Initial Content - Registry
- Initial Content - Security
- Initial Content - Software
- Initial Content - Tags
- Initial Content - Cloud
On Tanium Server 7.2 these solutions are still individually installable. On Tanium Server 7.3, 7.4, and above they are consolidated into the Core Content solution. Customers are encouraged to upgrade to the Tanium 7.4 server version.
Installation Notes:
Customers who use Tanium Core Platform 7.4 should ensure that the Tanium Console is at least version 1.4.2.0038 before importing Core Content. Importing Core Content on a Tanium Console version that is earlier than 1.4.2.0038 may result in the content set assigned to each sensor being overwritten on import, regardless of your preference at import time.
Installing Core Content updates all sensors, packages, saved questions, scheduled actions, and potentially dashboards that were previously included in any of the solutions listed above. If you install Core Content when one or more of the solutions listed above are installed, consider leaving the "Include Content Set Overwrite" checkbox on the import screen unchecked to preserve RBAC content set and role associations. Checking the box creates a new content set named Core Content for all items in the solution, and all of the items in the Core Content solution will be assigned to the Core Content content set.
If you install Core Content on a server without any of the solutions listed above, the installation creates a Core Content content set, and all items in the Core Content solution are assigned to the Core Content content set by default.
Core Content 1.3.106
Release Date: April 19, 2022
Fixes
- Custom Tags can now be set and read correctly on 64 bit Windows clients with a Tanium Path variable
- Custom Tagging - Remove Tags package now handles backslashes correctly
- Reboot Windows Machines package now works properly
Core Content 1.3.100
Release Date: February 22, 2022
Improvements
- Last Logged In User sensor accuracy improved on Windows
- Enhanced Hosts File - Modify Entry and Hosts File - Add Entry packages to allow for multiple aliases and comments
- PST Information sensor searches possible locations outside of user profiles
- Custom Tags sensor no longer modifies the endpoint registry on Windows
- Modify Tanium Client Setting package helper text updated for newer Consoles
- Custom Tags package adds the date and time as registry metadata on Windows
- Custom Tags packages can optionally support non-space delimiters on Windows
- Registry - Set Value package can now set an empty value (creating a key)
- Added Edge Extensions and Edge Extensions Summary sensors with support for Microsoft Edge browser
- Performance improvements in Windows sensors that lookup Tanium Client directory or registry
- Cloud EC2 Instance IAM Role, Cloud EC2 Instance VPC ID, Cloud Instance Account, Cloud Instance ID, Cloud Instance Image, Cloud Instance Provider, Cloud Instance Public IP, Cloud Instance Public Keys, Cloud Instance Region, Cloud Instance Tags, Cloud Instance Type, and Cloud Instance Zone sensors can now use AWS IMDSv2 if IMDSv1 is unavailable
- Operating System Generation sensor supports Alma Linux and Rocky Linux
- Kernel Version sensor now accounts for live updated Linux kernels
- CPU Manufacturer sensor now works on ARM CPUs with Linux operating systems
- improvements to cmd.exe usage
- Trailing null removed from the end of binary data strings returned by Registry Key Value Names with Data and Registry Value Data sensors
Fixes
- Corrected result types in Domain Role, Tanium Client Folder Size, sensors
- Corrected "Key/Value not found" error in Registry Key Value Names sensor
- Corrected time out in Operating System sensor
- Restart Service action no longer allows restarting Tanium Client
- Service Details sensor will not terminate when encountering a null value
- USB Write Protected Sensor now reflects GPO enforced protection
- Tanium Client Neighborhood sensor now returns the full IPv6 address on Windows
- PST Information sensor now handles multiple versions of Office on the same endpoint
- Reboot Windows Machine package now verifies confirmation text correctly
- Fixed incorrect description text in Browser Extensions sensors
- Registry Data sensor now properly returns No Results for an empty registry value
- BitLocker Details sensor now returns non-null results in all cases
- Running Applications sensor no longer writes to 64bit registry
- USB Device sensor no longer limits to HID devices
- CPU Manufacturer sensor shows correct values on MacOS now
- AnyConnect VPN Status fixed
Core Content 1.3.62
Release Date: January 25, 2022
Fixes
- RPM sensors updated to avoid issues with login banners
Security Updates
- This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.
Core Content 1.3.47
Release Date: November 16, 2021
New Features
- New sensor: "RPM Database Details" gives insight into the RPM database state on endpoints that manage software with RPM.
- New sensor: "Kernel Version" returns the running kernel version on Unix based endpoints.
- New package: "Repair RPM Database" triggers RPM database repair via native tools.
Fixes
- Sensors that call "rpm" now do so with reduced permissions to prevent corruption of rpm databases.
- The "reboot required" sensor would false negative on RHEL 8 based systems, and is now fixed.
- The AIX "Installed Applications" sensor was attempting to call an include that is not present on AIX.
- The Linux "Installed Application Version" sensor was not reliably determining the version of rpm packages.
Updated sensors
- Installed Application Exists - Installed Application Version - Installed Applications - Installed RPMs - Reboot Required
Known Issues
- The updated sensors above can have some activities denied by SELinux policy, which will cause a timeout. Updating Tanium Recorder to 2.5.358 (included in Threat Response 3.4.364) will set an SELinux policy to avoid this.
Core Content 1.3.26
Release Date: August 17, 2021
Fixes
- Reboot Required sensor fixed for Ubuntu/Debian OSes
Security Updates
- This release includes security updates. Details of the issues, including affected versions and mitigation information, can be obtained within Tanium's Support Portal or by contacting your TAM.
Core Content 1.3.17
Release Date: July 20, 2021
Improvements
- The "Chrome Extensions Summary" and "Firefox Extensions Summary" sensors now have a Linux version
Fixes
- Improve reliability of Azure Cloud endpoint detection
- The Browser sensors no longer attempt to load an unavailable Python
Core Content 1.3.9
Release Date: May 24, 2021
Improvements
- Builds of this solution now generate an audit file of dependencies (no impact)
- New sensors for Chrome and Firefox Extensions
- New sensor for AnyConnect VPN Status
Core Content 1.3.1
Release Date: May 8, 2021
Improvements
- Reboot Required sensor support for MacOS
- Core Content Tools action targeting excludes Tanium Client 6.0.*
- Double-character delimiter removed from IIS Website Details sensor
Fixes
- WMI queries against Win32_PerfRawData_PerfProc_Process now match the OS architecture
- ModuleNotFoundError resolved in Cloud Provider sensors
- Computer Serial Number sensor now removes tabs within the serial number
Supported Tanium Platforms
Tanium Core Platform 7.3 or later
Product Documentation and Resources
- Please work with your Tanium TAM to most effectively use this content.
- Tanium Product Documentation
- Tanium User Research
- Software Updates and Announcements Signup