Release Notes Core Content (Version 1.4)

Thank you for choosing Tanium. This article documents changes between releases of Core Content.

Core Content replaces the deprecated Initial Content Tanium Solutions.

Important

Any Scheduled Actions associated with these packages will need to have targeting updated after each update to the Core Content package. The default action group targeting will change to No Computers.

Installation Notes:

Customers who use Tanium Core Platform 7.4 should ensure that the Tanium Console is at least version 1.4.2.0038 before importing Core Content. Importing Core Content on a Tanium Console version that is earlier than 1.4.2.0038 may result in the content set assigned to each sensor being overwritten on import, regardless of your preference at import time.

Installing Core Content updates all sensors, packages, saved questions, scheduled actions, and potentially dashboards that were previously included in the deprecated Initial Content Tanium Solutions. If you install Core Content when one or more of the deprecated IC solutions are installed, consider leaving the "Include Content Set Overwrite" checkbox on the import screen unchecked to preserve RBAC content set and role associations. Checking the box creates a new content set named Core Content for all items in the solution, and all of the items in the Core Content solution will be assigned to the Core Content content set.

If you install Core Content on a server without any of the deprecated Initial Content Tanium Solutions, the installation creates a Core Content content set, and all items in the Core Content solution are assigned to the Core Content content set by default.

Core Content 1.4.33

Release Date: July 12, 2022

Fixes

• Registry Key Value Names with Data sensor no longer errors on empty strings
• Fixed an error in handling Tanium custom tags on windows containing dot characters. Affected packages: Custom Tagging - Add Tags, Custom Tagging - Remove Tags
• File Version sensor logic corrected to handle 32-bit redirected paths on Windows
• Disk Free Space Below Threshold sensor no longer returns "Variable is undefined: 'IngFreeGB'" error
• Mac implementation of Folder Contents sensor
• Registry Key Value Exists could report a false negative

Core Content 1.4.28

Release Date: May 31, 2022

Improvements

• Folder Contents sensor now works for Linux and Unix operating systems
• Linux filesystem sensors now attempt to exclude network drive mounts. Affected sensors: File Exists, File Modification Date, File Size, File Modification Date, File Size, Folder Contents, and Folder Exists
• CPU Details and x64/x86? sensors now support Apple M1 processors
• x64/x86? sensor now supports AWS Graviton processors
• Number of Logged In Users sensor rewritten to use sessions for more accurate results
• Improved parameter decoding, affects Reboot Windows Machine and Reset User Session packages, Application Crashes in Last X Days, Number of Application Crashes in Last X Days, High CPU Processes, and High Memory Processes sensors
• Faster 64 bit detection on Windows, expected to reduce "TSE-Error:Can not locate client registry area" messages. Affects Registry Key Exists, Registry Key Subkeys, Registry Key Value Exists, Registry Key Value Names, Registry Key Value Names with Data, Registry Value Data, Process Count, Running Processes, CPU, CPU Cache Size, CPU Details, CPU Family, CPU Manufacturer, CPU Speed Mhz, CPU Consumption, CPU by Process, High CPU Consumption, High CPU Processes, Hyperthreading Enabled, Number of Processor Cores, Revision of CPU, Used Memory, Established Connections, IP Connections, Listen Ports, Network Throughput Inbound, Network Throughput Percentage, Network Throughput Total, Packet Loss, Recently Closed Connections, Disk IOPS, Free Memory, High Memory Processes, Memory Consumption, Installed Application Exists, Installed Applicaiton Version, Internet Explorer Version, Firewall Status, Outlook Version, PST Information, Reboot Required, Run Keys, Run Once Keys, Startup Programs, No Screen Saver Password, File Creation Date, File Exists, File Modification Date, File Size, File Version, Folder Contents, Folder Exists, Folder Size, Path Permissions, Hosted Wireless Ad-Hoc Networks, Unencrypted Wireless Networks, Wireless Network Connected SSID/windows, Wiress Network Details, Wireless Network SSID Strength, Wireless Network Used by Tanium, Wireless Network Using WEP, Wireless Network Visible, Boot Time, Driver Details, Number of Logged in Users, User Sessions, and Default Web Browser sensors
• Windows Sensor performance optimization. Affects Active Devices, Application Crashes Yesterday, Application Crashes In Last X Days, BIOS Release Date, BitLocker Details, Boot Time, CD-ROM Drive Loaded, CPU, CPU Cache Size, CPU Details, CPU Family, CPU Manufacturer, CPU Speed MHz, Custom Tag Exists, Data Execution Prevention Enabled, Disk Drive Details, Disk Drive Serial Number, Disk Free Space Below Threshold, Disk Free Space, Disk IOPS, Disk Total Size Of System Drive, Disk Total Space, Disk Used Percentage, Disk Used Space, Driver Details, File Creation Date, File Exists, File Modification Date, File Size, File Version, Firewall Status, Folder Content, Folder Exists, Folder Size, Free Memory, High CPU Processes, High Memory Consumption, High Memory Processes, High Uptime, Hosts File Entries, Hyperthreading Enabled, Installed Application, Installed Application Exists, Installed Application Version, IP Routes, IP Route Details, Last System Crash In X Days, Local User Password Change Dates, Manufacturer, Memory Consumption, Model, Monitor Details, Monitor Resolution, Motherboard Manufacturer, Motherboard Version, Network Adapter Details, Network Link Speed, Network Throughput Inbound, Network Throughput Outbound, Network Throughput Percentage, Number of Application Crashes In Last X Days, Number of Logged In Users, Number of Processor Cores, OS Boot Time, Outlook Version, Packet Loss, Page File Details, Path Permissions, Power Plans Active, Power Plans Available, PST Information, Predicted Disk Failures, RAM, RAM Max Capacity, RAM Slots Unused, RAM Slots Used and Unused, Reboot Required, Registry Key Exists, Registry Key Subkeys, Registry Key Value Exists, Registry Key Value Names With Data, Registry Key Value Names, Registry Value Data, Revision of CPU, Run Keys, Run Once Keys, Running Processes, Running Service, Running Service Short Name, Screen Saver Active, Service, Service Details, Service Pack, Shared Network Printer Details, Startup Programs, Stopped Service, Stopped Service Short Name, Storage Encryption Status, System Disk Free Space, System Environment Variables, System Slots Available, System Slots in Use, System UUID, Total Memory, UAC Status, Uptime, USB Storage Devices, Used Memory, Video Graphics Card RAM, Windows Features, Windows Security Center Registered Antivirus Software, and Workgroup sensors
• Added SELinux Status sensor
• Cloud sensors bypass proxy configuration. Affected sensors: Cloud EC2 Instance IAM Role, Cloud EC2 Instance VPC ID, Cloud Instance Account, Cloud Instance ID, Cloud Instance Image, Cloud Instance Provider, Cloud Instance Public IP, Cloud Instance Public Keys, Cloud Instance Region, Cloud Instance Tags, Cloud Instance Type, Cloud Instance Zone
• Installed Application Exists, Installed Application Version, and Installed Applications sensors now handle Cloud Linux distributions (improved detection)
• Manufacturer, Model, and Motherboard Manufacturer sensors now support BHYVE and oVirt hypervisors

Fixes

• BREAKING CHANGE: Operating System Install Date sensor now returns correct installation date on Windows 10, Solaris; returned Linux format has changed to be the same as Windows
• BREAKING CHANGE: Tanium Client Version, Windows OS Major Version, and Outlook Version sensors now correctly return the Version data type instead of Text
• BREAKING CHANGE: Corrected errors in Last Logged In User sensor on non-English language Windows endpoints. This sensor will no longer work properly on XP or 2003.
• BitLocker Details sensor updated to include newer encryption methods
• FileVault Details sensor now recognizes MacOS 11 (Big Sur)
• CPU Architecture sensor no longer shows x86_64 for arm64 machines
• Custom Tagging - Remove Tag (Non-Windows) now handles backslashes
• Modify Tanium Client Setting package updated for hardened installs
• Custom Tagging - Add Tag package now works if the Tags registry key is missing
• Linux - Reboot Required sensor now properly returns No on debian-based machines
• Memory Consumption sensor now returns correct data on Linux endpoints with very large memory
• Typo fixes in DHCP Enabled sensor
• Service Details sensor updated to prevent returning '*'
• Open Share Details sensor now supports share names containing a single quote character
• File Modification Date sensor now resolves %WINDIR% variable correctly
• Cloud Instance Tags and Cloud Instance Public Keys sensors now handle empty keys
• Chrome Extensions and Chrome Extensions Summary sensors now handle errors better and return results more reliably

Supported Tanium Platforms

Tanium Core Platform 7.3 or later

Product Documentation and Resources

• Please work with your Tanium TAM to most effectively use this content.
• Core Content Documentation
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup