IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.

Release Notes Core Content (Version 1.5)

From Tanium Knowledge Base
Jump to navigation Jump to search

Thank you for choosing Tanium. This article documents changes between releases of Core Content.

Core Content replaces the deprecated Initial Content Tanium Solutions.

Important

Any Scheduled Actions associated with these packages will need to have targeting updated after each update to the Core Content package. The default action group targeting will change to No Computers.

Installation Notes:

Customers who use Tanium Core Platform 7.4 should ensure that the Tanium Console is at least version 1.4.2.0038 before importing Core Content. Importing Core Content on a Tanium Console version that is earlier than 1.4.2.0038 may result in the content set assigned to each sensor being overwritten on import, regardless of your preference at import time.

Installing Core Content updates all sensors, packages, saved questions, scheduled actions, and potentially dashboards that were previously included in the deprecated Initial Content Tanium Solutions. If you install Core Content when one or more of the deprecated IC solutions are installed, consider leaving the "Include Content Set Overwrite" checkbox on the import screen unchecked to preserve RBAC content set and role associations. Checking the box creates a new content set named Core Content for all items in the solution, and all of the items in the Core Content solution will be assigned to the Core Content content set.

If you install Core Content on a server without any of the deprecated Initial Content Tanium Solutions, the installation creates a Core Content content set, and all items in the Core Content solution are assigned to the Core Content content set by default.

Core Content 1.5.57

Release Date: September 27, 2022

Improvements

  • Ported sensors into the “Core Content” content set and renamed them, removing Asset - prefix. Affected sensors: Logical Disk, Physical Disk

Core Content 1.5.55

Release Date: September 13, 2022

Improvements

  • Ported sensors from Asset to reduce duplicate data collection. Affected sensors: Asset - Logical Disk, Asset - Physical Disk

Fixes

  • Registry Key Exists sensor could false negative for 32 bit queries on 64 bit systems
  • Update to prevent unnecessary network traffic from Linux endpoints. Affected sensors: Motherboard Manufacturer, Model, Manufacturer


Core Content 1.5.49

Release Date: August 9, 2022

Improvements

  • BREAKING CHANGE: IP Route Details, Used Swap, CPU Consumption sensors are now blocked from TDS harvest.
  • BREAKING CHANGE: CPU Architecture, CPU Cache Size, CPU Family, CPU Speed MHz are now automatically harvested by TDS.
  • BREAKING CHANGE: Established Connections sensor now supports IPv6 and works properly on non-English Windows. This sensor will no longer work properly on XP or 2003.
  • Cloud sensors no longer use network unnecessarily. Affected sensors: Cloud EC2 Instance IAM Role, Cloud EC2 Instance VPC ID, Cloud Instance Account, Cloud Instance ID, Cloud Instance Image, Cloud Instance Provider, Cloud Instance Public IP, Cloud Instance Public Keys, Cloud Instance Region, Cloud Instance Tags, Cloud Instance Type, Cloud Instance Zone
  • Service Details sensor now supports Windows Service Mode - Automatic (Delayed)
  • A new Service - Start Mode Set package supports setting a Windows service to Manual, Disabled, Automatic, or Automatic (Delayed)
  • NET Version sensor now supports Microsoft .Net Framework and .Net Core versions 5 and 6
  • File Permissions parameterized sensor added for Windows endpoints. This allows an administrator to check the permissions of a file in real time.
  • Start Service [Non-Windows] and Stop Service [Non-Windows] packages updated to support AIX and Solaris
  • Installed Application, Installed Application Version, and Installed Application Exists sensors will now check QuietDisplayName and HiddenDisplayName if the DisplayName is empty for Windows applications
  • Service Details sensor updated to remove dependency on a Python library no longer included in newer MacOS distributions
  • Windows sensors rewritten to use native data sources instead of the netstat binary. Affected sensors: Listen Ports, IP Connections, Recently Closed Connections, Established Ports by Application
  • Installed Application Version and Installed Application Exists sensors can now accept a prepended modifier, allowing "left", "right", "regex", or "contains" matching on Windows. For non-windows the sensors continue to only offer "contains" matching.
  • Short Hostname sensor reimplemented to remove Python requirement
  • Added sensors for reporting status of Kaspersky endpoint tools: Kaspersky Client Version, Kaspersky DAT Days Old, Kaspersky DAT Version

Fixes

  • BREAKING CHANGE: Data Execution Prevention Enabled sensor now returns True or False instead of a localized string
  • Data Execution Prevention Enabled sensor description updated to reflect its behavior
  • NET Version sensor description updated to reflect its behavior
  • Computer Serial Number sensor no longer returns No Serial Number when WMI calls generate errors
  • Data Execution Prevention Enabled sensor now works on 64 bit Windows
  • Established Connections sensor no longer filters TaniumClient.exe on Windows, for behavior parity with unix versions of the sensor
  • Restart Service [Non-Windows] package now works on AIX and Solaris
  • Operating System Generation and Operating System sensors work on XP/2003 again
  • Custom Tag Exists is no longer case sensitive on non-Windows
  • CPU Consumption and High CPU Consumption sensor performance improved on Windows
  • The Registry - Delete Value package can now delete (Default) key values
  • BitLocker Details and Storage Encryption Status sensors no longer error when WMI returns -1 for ConversionStatus or EncryptionPercentage
  • Installed Application and Installed Application Exists sensors can now return Windows applications with no Uninstall String in the registry
  • Custom Tagging - Add Tags package help text moved from input field to help text field
  • Fixed incorrect variable typing for binary values in Registry Value Data sensor
  • File Exists and File Version sensors now support use of the %windir% variable

Known Issues

  • Computer Serial Number sensor can fail on Windows if the BIOS serial number is absent

Supported Tanium Platforms

Tanium Core Platform 7.3 or later

Product Documentation and Resources

Retrieved from "https://kb.tanium.com/wiki/index.php?title=Release_Notes_Core_Content_(Version_1.5)&oldid=42672"