Release Notes Map (Version 1.0)

Thank you for choosing Tanium. This article documents changes between releases of Tanium Map.

Tanium Map 1.0.7.0011

Release Date: 19 February 2019

Enhancements

• Improves the Map - Tools [Windows-Mac-Linux] packages that distribute and manage the Tanium Recorder on the endpoints.
• Includes new Enable Tanium Recorder [Windows-Mac-Linux] and Disable Tanium Recorder [Windows-Mac-Linux] packages.
  • Adds new "Tanium Recorder Administrator" RBAC role that needs to be assigned to use these packages (if not Administrator).
• Upgrades the Windows recorder to v1.0.31.1898, with the following improvements:
  • Fixes issue that prevents permission events from being recorded in some cases. (Note: Permission events are not used by Map.)
  • Fixes issue where processes were occasionally assigned incorrect parent processes. (Note: Parent processes are not used by Map.)
• Upgrades the Linux and Mac recorders to v1.0.34.9, with the following improvements:
  • Improves audit message parsing on macOS.
  • Tanium Recorder binary on macOS is now signed.
  • Fixes an issue that caused a memory leak.
  • Uses "<unknown>" if process path is missing or can't be determined.
  • Removes audit rules when event recorder exits on error.
  • Fixes issue where unexpected processes are reporting as having network activity.
  • Improves configuration on macOS.
  • Improves event close handling.

Resolved Issues

• Fixes issue where a user assigned to computer groups that are more limited than the full set in the Map action group could not view a map.
• Fixes issue where map would not load or render due to state of selected nodes on previous map not being cleared.
• Fixes issue where Update Endpoint Data actions fail if there is an existing but empty or invalid database file.
• Fixes issue where an updated map_filters.json was not being properly deployed to endpoints.
• Fixes issue where Tanium Integrity Monitor did not function with Map installed on the same endpoint.

Known Issues and Workarounds

• The Max Endpoint Database Size in MB setting in "Settings" -> "Configuration Settings" is only applied to Windows endpoints. For Linux and Mac endpoints, the size used for database pruning is always the default of 1024 MB regardless of the setting.
• Starting with this version, installing Map on Tanium Server 7.0.314.6319 is no longer supported.

Tanium Map 1.0.6.0003

Release Date: 22 January 2019

Resolved Issues

• Fixes issue where the Distribute Map - Tools [Windows] action can cause the Tanium Client to stop in certain cases.

Known Issues and Workarounds

Beside the resolved issue above, there is no functional difference between Map 1.0.5 and 1.0.6.

Tanium Map 1.0.5.0095

Release Date: 8 January 2019

Enhancements

• Improves performance by adding processing to the Tanium Module Server.
• Adds setting for limiting the size of groups that can be expanded on the maps.
• Groups endpoints targeted on an endpoint map by default.
• Updates Health section of the home page for the Map Database Last Updated field to more closely align to Map - Status sensor results.
• Improves user interface to work correctly with Internet Explorer 11.

Resolved Issues

• Fixes an issue that prevented Map from getting network event data from the Tanium Event Recorder if Integrity Monitor solution was also installed.
• Fixes an issue with handling non-English strings when gathering data from Tanium Event Recorder.

Known Issues and Workarounds

The Distribute Map - Tools [Windows] action can cause the Tanium Client to stop in certain cases.

Tanium Map 1.0.4.0007

Release Date: 6 November 2018

Enhancements

• Requires authorization before importing an application definition from a saved JSON file.
• Increases efficiency of Tanium Event Recorder if Map is the only solution using the recorder on the endpoint.

Resolved Issues

• Fixes an issue where caching of map data in the Map service could result in stale or incorrect map data being returned for a period of time.
• Fixes an issue where nodes on the map would appear "disconnected" from other nodes.

Known Issues and Workarounds

• Compatibility issues in Internet Explorer 11 may prevent saving or loading Maps.

Tanium Map 1.0.3.0001

Release Date: 26 October 2018

Resolved Issues

• Fixes an issue with the python framework for Map sensor execution that can cause python-sensors to return erroneous results on Windows endpoints in some cases. This issue was recently introduced and impacts Map 1.0.2.0054. Other than this fix, 1.0.3.0001 is functionally identical to 1.0.2.00054.

Security Update

This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM.

Known Issues and Workarounds

• Compatibility issues in Internet Explorer 11 may prevent saving or loading Maps.

Tanium Map 1.0.2.0054

Release Date: 23 October 2018

New Features

• You can now pan and zoom maps.
• You can now use the following operations in application definitions:
  • Port "Does not Equal"
  • Process Path "Does not Equal", "Does Not Contain", or "Any"
• You can now import multiple Gallery Applications at one time.
• You can now drill down into health check charts on the home page.
• You can now use a setting to control the size of the endpoint database for Map.
• You can now view detailed information about inferred nodes that are managed Tanium endpoints.
• Upgrades the Windows recorder to v1.0.31.1358, with the following improvements:
  • Fixes an issue with shutting down during restart that prevented the recorder from registering with ETW for events.
• Upgrades Linux and Mac recorders to v0.7.34.30, with the following improvements:
  • Fixes issue where the recorder was not shutting down cleanly.
  • Fixes memory leaks caused by event overwrites in the queue.
  • Delete corrupt databases to prevent downtime.
  • Fixes issue that caused the recorder to crash with a configuration change.
  • Fixes an issue that caused the recorder to run multiple instances.
  • Fixes an issue that caused duplicate process events to be created.
  • Fixes kill switch to prevent the recorder from ignoring the kill command and continuing to run.
  • Fixes thread safety, reducing CPU usage.
  • Reduces the likelihood of process path being reported as *Unknown*.
  • Adds signing of the Mac recorder, which is required for macOS 10.14 (Mojave).

Additional Information

• This release includes an update to the python interpreter that runs in the Tanium Client. It may take until the next Tanium Client reset (up to 4 hours) before the python interpreter is available after updating the Map tools on an endpoint.

Security Update

• This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM.

Known Issues and Workarounds

• Map 1.0.2.00054 has an issue where python-based sensors can return erroneous results on Windows endpoints in some cases. Upgrade to 1.0.3.0001 (or later) to fix the issue.
• Compatibility issues in Internet Explorer 11 may prevent saving or loading Maps.

Tanium Map 1.0.1.0031

Release Date: 25 September 2018

New Features

• You can now use the presence of a file or folder to narrow down the definition of a business application:
  • Distinguish between two SQL applications by the existence of a named database file.
• Database pruning is now enabled for endpoint databases.

Known Issues and Workarounds

• Compatibility issues in Internet Explorer 11 may prevent saving or loading Maps.

Tanium Map 1.0.0.0551

Release Date: 5 September 2018

New Features

• Quickly and efficiently map an application’s dependencies:
  • Understand the scope of application dependencies where the root causes of application issues may lie.
  • Identify the clients and end-users who are likely to be impacted by application issues.
  • Narrow the map to long-running connections that may be responsible for application issues.
  • Quickly determine whether applications have the desired infrastructure redundancy and capacity.
• Deep inspection of the role endpoints play in the application environment:
  • Point to an endpoint(s) and understand the defined applications, unclassified traffic, and downstream machines that could be impacted if that endpoint has issues or is changed (e.g. outages, maintenance, migration, M&A).
  • Create maps for specific time frames to correlate changes over time with application issues.
• Reducing unnecessary infrastructure and applications:
  • Identify how and where infrastructure is being used.
  • Show the user load for each application over time, helping to identify wasteful infrastructure and unused applications.

Known Issues and Workarounds

• The warning that indicates that partial data was processed can include incorrect counts of result rows.
• Compatibility issues in Internet Explorer 11 may prevent saving or loading Maps.

Supported Tanium Platforms

Tanium Server 7.0, 7.1, 7.2, 7.3

Product Documentation and Resources

• Map User Guide
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup