Crowdstrike Crowdstrike 3
Crowdstrike Deployment Command line
11 months ago
last edited 11 months ago
Notes from the Crowdstrike support web site https://www.crowdstrike.com/resources/free-trials/deployment/
For a normal installation you can use
WindowsSensor.exe /install /quiet CID=MyCIDWithChecksumValue as the initial command line.
The available command line parameters are:
1. CID=<Checksummed Customer ID>
Required for initial installation (available on the Sensor Download page).
2. /install | /repair Installs or repairs the sensor.
3. /quiet Displays no UI and no prompts.
You can also use the command line parameter NO_START=1 to install CrowdStrike in a "gold image". This will install a standard installation but will NOT start the sensor components that connect to the Falcon Platform. After the sensor installer has finished, shut down the machine and capture the image in a powered-off state. Every time you then deploy this "gold image", the sensor will connect to the Falcon Platform after the first boot. Once the newly imaged system boots up, the Falcon sensor will register itself in the Falcon UI and appear in the Host management app.
Attempting to deploy Crowdstrike in a "gold image" without the NO_START=1 parameter will result in a failed installation and a return code of 16388.
This link is locked
Don't be a Stranger!
Sign up today to participate, stay informed, earn points and establish a reputation for yourself!
I am teaching myself how to upload and save in K1000 under Inventory. Is there any basic steps that I can learn. I work with several guys who are not exactly keen on sharing information. Thanks.
Help with a .Bat File
Problem with WIN10 1903 Image deployment
I am trying to package GoogleEarthpro 7.3 and not finding silent switches
Trouble with Smart Labels for Patch Management
Deploying Office 365 issues
agent 10.0.113 GPO tool not working
Crystal Reports 2016 managed installation
Stellar Data Recovery Technician for Mac
VDI File Recovery Software
Disrupt The Way You Think About Data
WhatsApp Flaw Opens Android Devices to Remote Code Execution
Office Customization Tool
Linux Imaging with the KACE SDA
Sysmon - the simple KACE companion
Emotet Returns from Summer Vacation, Ramps Up Stolen Email Tactic - Identifying the infected machines - Detect files created by Trojan.Emotet using CIR's
Patch Executive Summary Report - KACE SMA version 10.0 or newer only (does not work on 9.1 and older)
Common Dependencies for Ampagent on Linux
Windows 10 Out of Date Build Report & Install Script
How to Create a Disk Image of Your Mac Startup Disk?