IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Integrity Monitor (Version 1.1.0)
Thank you for choosing Tanium. This document is intended to document the release of Tanium Integrity Monitor.
Tanium Integrity Monitor 1.1.0.0021
Release Date: August 1, 2017
Feature Improvements
- Add notes to labeled events.
- Add notes to existing labeled events with event-label's new add_note REST API.
- Add notes while labeling events with the improvements to the event-labels REST API.
- Add notes while labeling current events.
- Manage notes in the label history.
- Send data including notes to Tanium Connect.
- Generate weekly reports including notes.
- Add a description to labels.
- Use improved label menu in the current results view.
- When applying a label, find your label faster with new search and filter.
- Create a new label and immediately apply it to events in a single action.
- Redesign look and feel of labels.
- Filter label history
Resolved Issues
- Fixed issue where the workbench would timeout waiting for deploy monitors action to complete.
- Fixed issue where monitors were being flagged as needing deployment mistakenly.
- Fixed issue on Windows where watchlist would be exported without a file extension.
- Fixed issue on where the audit.rules was getting corrupt on some versions of Linux.
- Fixed issue where the Integrity Monitor Endpoint Tools Removal [Linux] Action did not properly remove files or update audit rules in some cases.
- Updated Windows Event Recorder to v1.0.20.62.
- Fixed issue in the Windows Event Recorder where file delete events were not being recorded in some cases.
- Fixed issue in the Windows Event Recorder where processes were being miscorrelated in some cases.
- Fixed issue in the Windows Event Recorder where file appends where not being recorded in some cases.
- Update Linux Event Recorder to v0.2.21.30.
- Fixed several issues with the management of audit rules for Trace on Linux endpoints.
- Fixed issue in the Linux Event Recorder where the full process tree was not being recorded in some cases.
- Fixed issue in the Linux Event Recorder where it did not stop in some cases.
- Fixed issue in the Linux Event Recorder where driver events were not being recorded in some cases.
- Fixed issue in the Linux Event Recorder where events for very short-lived processes were not being recorded in some cases.
Additional Information
Known Issues and Workarounds
- For Window endpoints only, Tanium Integrity Monitor events can be turned off if Tanium Trace file events are turned off.
- When deleting a monitor using the all events connection with Tanium Connect v4.0.7, the remaining all events connection will not show the delete option in the workbench. Workaround is to delete the remaining all events connection using delete connection Tanium Connect API.
Requirements
- Tanium Platform 7.0.314.6422 and above
- For older 7.0 builds please consult your Technical Account Manager for assistance.
- Tanium Connect 4.0 and above