IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Integrity Monitor (Version 1.2.0)
Thank you for choosing Tanium. This document is intended to document the release of Tanium Integrity Monitor.
Tanium Integrity Monitor 1.2.0.0059
Release Date: October 10, 2017
Feature Improvements
- Added legacy mode, monitoring support of Windows NT 6.0 (Windows Server 2008 / Windows Vista) or older.
- Requires Tanium Index v1.6.0 or higher.
- Added new sensors to support legacy mode.
- Integrity Monitor Is Legacy Supported
- Integrity Monitor Is Recorder Supported
- Integrity Monitor Legacy File Events Details
- Integrity Monitor Legacy File Events Overview
- Added monitoring of permission change events.
- Updated OSSEC config import to support finding and importing permission changes.
- Updated LCE Client policy config import to support finding and importing permission changes.
- Updated CSV import to support finding and importing permission changes.
- Added Details column to event. This column contains metadata about some some events.
- Added Details column to generated reports and to data sent to Tanium Connect.
- Updated workbench to be packed into a single file to reduce browser load time.
Resolved Issues
- Fixed issue where deploy monitors would stop the linux recorder in some cases.
- Fixed issue where monitors are not marked as Needs Deployment after product upgrade.
- Fixed issue where adding or removing a watchlist from a monitor did not mark that monitor as Needs Deployment.
- Fixed issue where label notes were not being sent to Tanium Connect.
- Fixed issue where monitor's reports were not properly escaping comma and double quote characters.
- Changed all console references of Operation to Change Type.
- Updated Windows Event Recorder from v1.0.21.66 to v1.0.21.70.
- Updated Linux Event Recorder from v0.2.21.33 to v0.2.21.35.
- Improved documentation of event label REST API.
Additional Information
Known Issues and Workarounds
- For Window endpoints only, Tanium Integrity Monitor events can be turned off if Tanium Trace file events are turned off.
- When deleting a monitor using the all events connection with Tanium Connect v4.0.7, the remaining all events connection will not show the delete option in the workbench. Workaround is to delete the remaining all events connection using delete connection Tanium Connect API.
- For Linux endpoints only, when upgrading from Integrity Monitor v1.1.1 or older to this release, the deploy monitors action could encounter the fixed issue where the linux recorder stops in some cases. The issue will resolve once the latest tools are deployed to the endpoint. To avoid this issue, deploy the Integrity Monitor tools manually before deploy monitors.
Requirements
- Tanium Platform 7.0.314.6422 and above
- For older 7.0 builds please consult your Technical Account Manager for assistance.
- Tanium Connect 4.0 and above
- Legacy Windows support requires Tanium Index 1.6.0 and above
- Monitoring permission change events
- Windows NT 6.1 (Windows 7 / Windows Server 2008 R2) or above requires enabling System Audit Policies.
- Windows NT 6.0 (Windows Server 2008 / Windows Vista) or below requires setting Tanium Index config setting
ScanFilePermissions=on.