Release Notes Incident Response (Version 3.3.5)

Thank you for choosing Tanium. These notes are intended to document changes between releases of the Tanium Incident Response module.

Tanium Incident Response 3.3.5

Release Date June 13, 2017

Incident Response Official Version 3.3.5.0005

Features

• No new features

Minor Enhancements and Bug Fixes

• Autorun Files and Autoruns by Category sensors were updated to fix an issue where temporary files were not always being removed.

Details: Previous versions of these sensors would create .dat files with globally unique names. Under some conditions, these sensors failed to delete the .dat files they created. With this update, the call to delete these files happens immediately after the data is read, improving the reliability of file deletion. Additionally, the globally unique element in the filename has been replaced with static values, putting an upper-bound on the number of .dat files that these sensors can create adding an additional layer of protection. Customers should consult with their TAMs for assistance to see if they are impacted by this issue and for assistance with removing orphaned .dat files.

New Known Issues and Workarounds

• No new issues

New Binaries

• No new binaries in this release

Deprecated Content

• No deprecated content in this release

Notes for future releases

• Alternate Data Stream related content will be removed in a future release
• yara will be removed from IR Tools
• grep will be removed from IR Tools

Additional Information

• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup