Release Notes Map (Version 1.2)

Thank you for choosing Tanium. This article documents changes between releases of Tanium Map.

Important Note

The releases of Tanium Trace 2.9.0.0035, Threat Response 1.2.0.0037, Map 1.1.1.0006, and Integrity Monitor 1.7.0.0035 all include a significant update to how the endpoint recorder technology is distributed and managed. This update requires that if any one of the products is updated in an active environment, all of the others should be updated to at least the minimum versions specified above at the same time. Failure to do so may result in degraded functionality and potentially erroneous sensor results from those products that have not been updated. Tanium avoids the introduction of dependencies between product releases whenever possible, but it is required in this circumstance to support significant new functionality enhancements.

Tanium Map 1.2.4.0009

Release Date: 22 October 2019

Enhancements

• Adds visual indicator to user that the re-group activity has been completed.
• Adds ability to reset map zoom and center the map by clicking on the empty map canvas.
• Reduces size of application-catalog.json that is sent to endpoints as part of Map - Application Catalog [Windows-Linux-Mac] packages.

Bug Fixes

• Fixes issue where map was showing nodes with no connection lines.
• Fixes issue where attempting to export to CSV failed with some endpoint maps.
• Fixes issue where groups were not sized properly before and/or after expansion.
• Fixes issue where application discovery inbound port was empty on tiered search screen.
• Fixes issue where group name was showing "..." instead of actual value in the panel.

Known Issues

• The Map Read Only role currently has a bug that prevents maps from being viewed if they are not already cached by a different user with the same computer groups access. There is no escalation of privileges with this bug.

Tanium Map 1.2.3.0010

Release Date: 24 September 2019

Enhancements

• View nodes with which a selected node communicates, either inbound or outbound communication.
• Set control timeouts for application discovery iterations.
• Update to core-python 1.0.3.2.
  • Updates script that caused rare action failures on Mac endpoints.

Bug Fixes

• Display fewer duplicate software components in application discovery results.
• Remove redundant rows earlier in question processing.
• Display managed endpoints as a regular node, even if those nodes do not specifically return connections. These managed endpoints no longer display as inferred on the map.
• Add better handling of unexpected results to row processing.

Known Issues

• Attempting to export to CSV fails with some endpoint maps.
• The Map Read Only role currently has a bug that prevents maps from being viewed if they are not already cached by a different user with the same computer groups access. There is no escalation of privileges with this bug.

Tanium Map 1.2.2.0046

Release Date: 10 September 2019

New Features

• Add Connections panel for maps that shows connection details between endpoints.

Enhancements

• Initiate application discovery from the Connections panel.
• Gather a troubleshooting package before the Map service is initialized.
• Delete the first software package in an application definition.

Bug Fixes

• Fixes Map scheduled actions being created in incorrect RBAC content sets.
• Fixes data in map panel no longer loading after collapsing and then expanding the panel.
• Fixes connection count data in CSV exported via "Export" or "Export Endpoint and Connection Data" action.
• Fixes issue where endpoint database migration could fail and leave endpoint database in an invalid state.
• Fixes showing unknown processes in the initial application discovery screen.
• Fixes "Group By" dropdown contents not consistent when creating new maps.
• Fixes Map - Update Endpoint Data [Windows-Linux-Mac] timeout being too short which caused the action to retry.
• Fixes sending duplicate IP addresses to Map - Process Connections sensor.
• Updates targeting for some packages to include whether Map tools are installed.
• Various UI fixes for consistency and improved usability.

Known Issues

• The Map Read Only role currently has a bug that prevents maps from being viewed if they are not already cached by a different user with the same computer groups access. There is no escalation of privileges with this bug.

Tanium Map 1.2.1.0004

Release Date: 27 August 2019

Bug Fixes

• Fixes some issues that can cause a map to get stuck at 0% while loading.

Known Issues

• The Map Read Only role currently has a bug that prevents maps from being viewed if they are not already cached by a different user with the same computer groups access. There is no escalation of privileges with this bug.

Tanium Map 1.2.0.0047

Release Date: 13 August 2019

New Features

• Application discovery searches connection data to automatically discover application definitions
• The map visualization reports if responding endpoints have out of date application catalogs
• Application software packages can now be restricted to which IP addresses will match that component
  • Application discovery automatically populates these IPs based on discovered endpoints
  • Manually add the IP addresses on the application definition create and edit pages

Enhancements

• Export merges incoming and outgoing connections that match into one row
• Export contains Sender: Process name data
• Export all without selecting nodes first
• Fail application discovery gracefully when too much data is evaluated
• Auto-populate the package name after application discovery
• Pull the most recent results for application discovery with a refresh button
• Render two separate node graphs in map visualization independently instead of overlapped
• Display 'Tier' before tier number for auto-generated software component names
• Wait up to a minute for RCU and CRU strings to resolve in map visualization
• Display tier the application component was discovered in application definitions resulting from discovery
• Add multiple IP addresses to an endpoint map definition
• Update Tanium Client extension (cx-core) to 1.0.116
  • Resolve issue with updating / installing CX on 7.2.314.3211 client
  • Resolve issue with CX deployment to non-Windows machines in some instances
  • Update platform CX version to 2.0.1.3737
• Update Windows core recorder to 1.1.31.3768
  • Resolve issue with FilePermissionChange detail being lost on upgrade
• Update non-Windows core recorder to 1.0.34.14
  • Fix issue in performance monitoring / killswitch when Tanium Client is relocated via symlink
• Update core-python to 1.0.2.1
  • Prevent attempting to resume incorrect threads
  • Remove handling of `0` return code an error; `0` means no processes were suspended

Bug Fixes

• Fixes a map install bug causing timeouts
• Fixes a map export bug causing export to be empty if items were selected in both endpoint and process tabs
• Fixes a bug where health graphs didn't match underlying sensor results
• Fixes an application definition view page bug causing outbound ports to not appear
• Fixes a bug causing console errors when viewing map visualization
• Fixes a bug where the application catalog was not being redistributed after edits
• Fixes a map visualization application tab bug that was not showing data for applications
• Fixes a bug causing map data processing to fail when an endpoint didn't have results
• Fixes a performance bug with endpoint data processing
• Fixes a bug where duplicate rows would be available to start application discovery
• Fixes an application discovery bug where not all ports for a component appear
• Fixes an install bug preventing Map - Tools [Windows-Linux-Mac] from being distributed after import
• Fixes an application discovery bug that prevented early exiting if no new data is found for a tier
• Fixes minor UI alignment on various pages
• Fixes a logging bug that prevented logs from being written for service
• Fixes a bug where application discovery freezes on first tier
• Fixes an application discovery bug causing duplicate ports to be reported in resulting application definition
• Fixes an export bug causing missing rows
• Fixes an export bug causing invalid rows to appear
• Fixes an application discovery bug where port 0 was being reported
• Fixes a minimum version requirement that allowed Map - Tools [Windows-Linux-Mac] to be installed on to clients below version 6.0.314.1540
• Fixes a map visualization bug that falsely reported the application catalog was out of date
• Fixes a question targeting bug that allowed computers outside of the Map Action Group to respond

Known Issues

• The Map Read Only role currently has a bug that prevents maps from being viewed if they are not already cached by a different user with same computer groups access. There is no escalation of privileges with this bug.

Supported Tanium Platforms

• Tanium Server 7.2, 7.3

Product Documentation and Resources

• Map User Guide
• Tanium Product Documentation
• Tanium User Research
• Software Updates and Announcements Signup