Technical Advisory: "Running Processes of User" Sensor Issue and Tanium Incident Response Release - 3.1.1

Summary
An issue with the "Running Processes of User" sensor has been identified that results in targeted endpoints communicating with Domain Controllers. In large environments, this unexpected traffic may be detrimental.

Affected Customers
Customers using Tanium Incident Response 3.1.0 may be impacted by this issue. Customers using previous versions of Incident Response are not impacted.

Solution
Customers are advised to upgrade to the new release of Tanium Incident Response version 3.1.1.0001 that is now available for download from the Solutions page of the Tanium Console.  For a complete list of changes, please visit the 3.1.1 Release Notes.

Workaround
Customers that are not able to update Incident Response to 3.1.1.0001 or greater are advised to delete the "Running Processes of User" sensor.

Have more questions? Submit a request