Technical Advisory: "Running Processes of User" Sensor Issue and Tanium Incident Response Release - 3.1.1

An issue with the "Running Processes of User" sensor has been identified that results in targeted endpoints communicating with Domain Controllers. In large environments, this unexpected traffic may be detrimental.

Affected Customers
Customers using Tanium Incident Response 3.1.0 may be impacted by this issue. Customers using previous versions of Incident Response are not impacted.

Customers are advised to upgrade to the new release of Tanium Incident Response version that is now available for download from the Solutions page of the Tanium Console.  For a complete list of changes, please visit the 3.1.1 Release Notes.

Customers that are not able to update Incident Response to or greater are advised to delete the "Running Processes of User" sensor.

Have more questions? Submit a request