Tanium Release Notes

Improvements

• Anomalous Software Reporting in Software Inventory & Usage
• Upgraded various third-party libraries to newer versions.

Anomalous Software detection

Asset now includes an Anomalous Software page that identifies software on endpoints that is atypical, unauthorized, or carries an elevated risk profile. Detected applications are continuously analyzed and assigned a risk level (High, Moderate, or Low) along with a classification that explains why the software was flagged. Classifications include Data Exfiltration, Remote Access, Entertainment, Security, AI Tools, No Risk, Unknown and Other.

• When new anomalous software is detected, a Guide notification appears in the Tanium Console with the total count of anomalous applications and the most recently detected items. Clicking Review Software in the notification opens the Anomalous Software page directly.
• The Anomalous Software page has High Risk and Moderate & Low Risk sections, allowing administrators to prioritize triage.
• Each row displays the vendor, application name, number of anomalous installations, first-detected date, classification, and a description of why the application was flagged.
• Selecting an application reveals the specific endpoints where it is installed.
• The Anomaly Classification filter narrows the view to a single category, such as Data Exfiltration or Remote Access.
• The Endpoints with High Anomalous Software Count view identifies individual endpoints with 4 or more High Risk anomalies.
• Administrators can mark one or more applications as approved, scoped to all computer groups or specific computer groups. Approved software is excluded from future detections and moved to the Approved Software grid.

Requirements

• Anomalous Software detection is available for Tanium Cloud customers on Windows and macOS endpoints.
• Tanium AI Features and Tanium Ask must be enabled in platform settings.
• Required permissions: Token - Use (Tanium Guide); Asset Report read and Asset Configuration Item write (Tanium Asset).
• Administrator-level permissions are required to configure software exclusions from Guide notifications.

Legacy Asset Sensor Deprecation

Overview

As part of Tanium’s ongoing sensor modernization initiative, several Legacy Asset Sensors have been deprecated and superseded by Tanium Platform Core Sensors.

Data collection for these sensors was migrated to Core Sensors in August 2023, and the Legacy Asset Sensors were formally marked Deprecated in July 2025. While the deprecated sensors currently continue to return data, they will soon stop returning values and instead display informational messaging directing users to migrate to the recommended Core Sensors.

Timeline and Impact

• August 2023 – Data collection migrated from Legacy Asset Sensors to Tanium Platform Core Sensors.
• July 2025 – Legacy Asset Sensors formally marked as Deprecated.
• May 2026 – Deprecated sensors will no longer return data and will display migration messaging only.
• September 2026 – Deprecated sensors will be fully purged from Tanium Asset.
• SAR 2026H2 (On-Premises) – Deprecated sensors will be removed from on-premises installations of Tanium Asset.

Required Customer Action

To avoid data loss or reporting disruptions, customers should identify any usage of deprecated Asset Sensors and migrate all queries, reports, dashboards, and integrations to the corresponding Tanium Platform Core Sensors by May 2026.

Affected Sensors

[Table of Deprecated Asset Sensor and Replacement Tanium Sensor]

Additional Notes

• Deprecated sensors may appear functional until May 2026; however, they are no longer recommended for use.
• All new development, content creation, and integrations should exclusively use Tanium Platform Core Sensors.
• Customers are encouraged to validate migrated sensors in non-production environments where possible.

Improvements

• Links from Asset Age of Assets Report now filter as expected.
• Added support for System Account Token Rotations.
• Added support for future Cross-Module functionality.
• Added capability to re-Enable disabled Asset Profiles.
• Upgraded various third-party libraries to newer versions.

Resolved Issues

• Fixed an issue where a deleted Tanium account could result in the Inventory Management Profiles and Software Bill of Materials Tracked Components & Libraries pages displaying error: no result data in the Created By and Updated At columns.
• Fixed an issue where already Tracked SBOM Libraries did not properly display a notice of already tracked state.
• Removed option for External Database as Source as only for On Prem builds.
• Asset Permissions updated to only allow AND for users in multiple Asset Permission Groups.
• Various UI fixes for Asset Containers Reports.