Release Notes Interact (Version 2.7)

Tanium Interact Version 2.7.217

Release Date: July 27, 2021

Fixed an issue where cached data could be duplicated when Threat Response 3.2 or 3.3 is installed and endpoints return a non-unique result for an endpoint identification sensor.
Fixed an issue where sensor definition column changes could result in a cached data service failure.
Fixed an issue where errors were incorrectly reported in the service logs when no endpoints were connected.

Release Date: July 13, 2021

Fixed an issue where endpoints might not be uniquely identified for cached result collection. This could lead to cached results from an impacted endpoint not being available.
Fixed an issue where modifying the column structure of a sensor might not reflect in the cached results.
Fixed an issue where the Question Builder would allow an OR filter with an empty group which resulted in all endpoints responding to the question.
Fixed an issue where duplicate parameter values could be created when copying to the Question Builder or loading an expired question.
Fixed an issue where $substring() function could be incorrectly applied to multicolumn sensors.
Fixed an issue where Total Count was not displayed for cached results.
Fixed an issue where cached result queries could time out early for large result sets.

Automatically remove duplicate columns when merging results.
Included message on the Tanium Home page when no endpoints are connected to the Tanium Server.
Improved performance of cached result queries.
A noticeable reduction in the Tanium Module Server CPU and memory resources required for collecting and querying cached results.
Added support for Comply 2.10 reporting.

Threat Response 3.2 and higher may lose visibility into certain alert and saved evidence artifacts. Threat Response 3.2 provides the capability to restrict alert and saved evidence artifact visibility based on a user’s computer group access. This visibility relies on the unique endpoint identification provided by Interact. Interact 2.7 introduces improvements to unique endpoint collision detection and remediation. This resolves an issue where certain endpoints could be incorrectly tracked as new unique endpoints creating duplicate endpoint. On upgrade, Interact 2.7 performs a one-time cleanup of any duplicate endpoint records. This cleanup could restrict the visibility of certain Threat Response artifacts for users that don’t have access to All Computers or the Threat Response Alert Visibility Bypass permission. If impacted please contain Tanium support for remediation.