An issue with the "Running Processes of User" sensor has been identified that results in targeted endpoints communicating with Domain Controllers. In large environments, this unexpected traffic may be detrimental.
Customers using Tanium Incident Response 3.1.0 may be impacted by this issue. Customers using previous versions of Incident Response are not impacted.
Customers are advised to upgrade to the new release of Tanium Incident Response version 3.1.1.0001 that is now available for download from the Solutions page of the Tanium Console. For a complete list of changes, please visit the 3.1.1 Release Notes.
Customers that are not able to update Incident Response to 3.1.1.0001 or greater are advised to delete the "Running Processes of User" sensor.