Interoperability with Tanium Threat Response
Description
Resolution
Items to exclude:
-
Windows 32-bit :
C:\Program Files\Tanium\Tanium Client\ -
Windows 64-bit:
C:\Program Files (x86)\Tanium\Tanium Client\ -
macOS:
/Library/Tanium/TaniumClient/ -
Linux:
/opt/Tanium/TaniumClient/
Make sure these items are included in the exclusions above:
-
TaniumClient.exe (Windows)
-
TaniumExecWrapper.exe (Windows)
-
TaniumClient or taniumclient (macOS, Linux, UNIX)
To exclude SentinelOne from Tanium:
-
Exclude these folders and the update file:
-
C:\Program Files\SentinelOne
-
C:\ProgramData\Sentinel
-
C:\Documents and Settings\All Users\Application Data\Sentinel (ProgramData for 2003 and legacy agents )
-
C:\Windows\Temp\SentinelInstaller.exe
Note: Make sure to exclude subfolders. Some solutions automatically exclude subfolders, but others require explicit notation.
-
-
Exclude the SentinelOne Agent kernel-mode driver, service, and dynamic library:
-
Kernel-Mode driver: SentinelMonitor.sys
-
Windows Service: SentinelAgent.exe
-
32-bit DLL: InProcessClient32.dll
-
64-bit DLL: InProcessClient64.dll
-