Tanium Release Notes

Remove Asset Code to force Computer Name to all Lower Case.

NOTE:

Users may see in external integrations duplicate endpoints if their integration does a case sensitive match of the Computer Name field.

Upgraded various third-party libraries to newer versions.

Issues Addressed

Fixed an issue with Asset Report Export where the Computer Name fields have special characters that breaks the CSV export column data.

Fixed an issue with Anomalous Applications where Select All caused action button to be disabled.

Improvements

• Minor improvements for Atlas support.
• Minor improvements to Anomalous Applications.
• Upgraded various third-party libraries to newer versions.

Issues Addressed

• Fixed an issue where disabling a File Evidence Profile did not stop TDS from continuing to harvest sensor data.
• Fixed an issue where DateTime attributes with single-digit months were not displayed in Asset reports.
• Fixed an issue where report exports intermittently failed with an "Unable to start export" error for certain users.
• Fixed a regression where AWS source connection errors were masked by an XML parser exception, preventing the underlying STS failure from being visible in logs or the UI.
• Fixed an issue where GET /v1/assets returned all devices including EX devices, ignoring the "Include EX" setting.
• Fixed an issue where Anomalous Software APIs used the service's management rights instead of the requesting user's, causing incorrect data scoping.

Improvements

• Anomalous Software Reporting in Software Inventory & Usage
• Upgraded various third-party libraries to newer versions.

Anomalous Software detection

Asset now includes an Anomalous Software page that identifies software on endpoints that is atypical, unauthorized, or carries an elevated risk profile. Detected applications are continuously analyzed and assigned a risk level (High, Moderate, or Low) along with a classification that explains why the software was flagged. Classifications include Data Exfiltration, Remote Access, Entertainment, Security, AI Tools, No Risk, Unknown and Other.

• When new anomalous software is detected, a Guide notification appears in the Tanium Console with the total count of anomalous applications and the most recently detected items. Clicking Review Software in the notification opens the Anomalous Software page directly.
• The Anomalous Software page has High Risk and Moderate & Low Risk sections, allowing administrators to prioritize triage.
• Each row displays the vendor, application name, number of anomalous installations, first-detected date, classification, and a description of why the application was flagged.
• Selecting an application reveals the specific endpoints where it is installed.
• The Anomaly Classification filter narrows the view to a single category, such as Data Exfiltration or Remote Access.
• The Endpoints with High Anomalous Software Count view identifies individual endpoints with 4 or more High Risk anomalies.
• Administrators can mark one or more applications as approved, scoped to all computer groups or specific computer groups. Approved software is excluded from future detections and moved to the Approved Software grid.

Requirements

• Anomalous Software detection is available for Tanium Cloud customers on Windows and macOS endpoints.
• Tanium AI Features and Tanium Ask must be enabled in platform settings.
• Required permissions: Token - Use (Tanium Guide); Asset Report read and Asset Configuration Item write (Tanium Asset).
• Administrator-level permissions are required to configure software exclusions from Guide notifications.

Legacy Asset Sensor Deprecation

Overview

As part of Tanium’s ongoing sensor modernization initiative, several Legacy Asset Sensors have been deprecated and superseded by Tanium Platform Core Sensors.

Data collection for these sensors was migrated to Core Sensors in August 2023, and the Legacy Asset Sensors were formally marked Deprecated in July 2025. While the deprecated sensors currently continue to return data, they will soon stop returning values and instead display informational messaging directing users to migrate to the recommended Core Sensors.

Timeline and Impact

• August 2023 – Data collection migrated from Legacy Asset Sensors to Tanium Platform Core Sensors.
• July 2025 – Legacy Asset Sensors formally marked as Deprecated.
• May 2026 – Deprecated sensors will no longer return data and will display migration messaging only.
• September 2026 – Deprecated sensors will be fully purged from Tanium Asset.
• SAR 2026H2 (On-Premises) – Deprecated sensors will be removed from on-premises installations of Tanium Asset.

Required Customer Action

To avoid data loss or reporting disruptions, customers should identify any usage of deprecated Asset Sensors and migrate all queries, reports, dashboards, and integrations to the corresponding Tanium Platform Core Sensors by May 2026.

Affected Sensors

[Table of Deprecated Asset Sensor and Replacement Tanium Sensor]

Additional Notes

• Deprecated sensors may appear functional until May 2026; however, they are no longer recommended for use.
• All new development, content creation, and integrations should exclusively use Tanium Platform Core Sensors.
• Customers are encouraged to validate migrated sensors in non-production environments where possible.