Release Notes Incident Response (Version 3.3.1)

Thank you for choosing Tanium. These notes are intended to document changes between releases of the Tanium Incident Response module.

Tanium Incident Response 3.3.1

Release Date March 30, 2017

Incident Response Official Version 3.3.1.0002

Features

• Sensor Tagging

Sensor Tags were added to support Trace Enterprise Hunting

Minor Enhancements and Bug Fixes

• The Scheduled Tasks sensor was updated to prevent endpoints from querying Active Directory and to recurse through task subfolders. This sensor is now deprecated on Windows 2K3 and Windows XP.

New Known Issues and Workarounds

• For organizations that want to retain the ability to run the Scheduled Tasks sensor across Windows XP and Windows 2K3 systems, we recommend making of a copy of the existing sensor and adding 2K3 and XP to the name before importing this release of the IR solution. On systems that contain tasks created by domain accounts, the old version of the sensor may cause systems to query Active Directory simultaneously upon sensor execution, and therefore could adversely impact domain controllers.

New Binaries

• No new binaries in this release

Deprecated Content

• No deprecated content in this release

Notes for future releases

• grep will be removed from IR Tools
• yara will be removed from IR Tools

Additional Information

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup