Viewable by the world
Group Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: itfaq-editors ,  anonymous ,  itfaq-MFA-EDITORS ,  itfaq-itss ,  all-lbnl-users ,  mpsg-staff ,  itfaq-editors-lite ,  mpsg-mpsg-helpdesk ,  google-collab-documentation-management , 
Can EDIT the space: itfaq-editors-lite ,  itfaq-editors ,  mpsg-staff ,  google-collab-documentation-management ,  mpsg-mpsg-helpdesk , 
Can ADMINISTER the space:
Individual Access to IT Frequently Asked Questions (FAQ)
Can VIEW the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can EDIT the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 
Can ADMINISTER the space: [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] ,  [email protected] , 

Versions Compared

Old Version 105

changes.mady.by.user Tap L

Saved on

compared with

New Version 106

changes.mady.by.user Tap L

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleCrowdStrike Falcon Install Instruction for Mac
Deck of Cards
idCrowdstrike Install macOS
tabLocationleft
Card
labelmacOS 13 Ventura
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 13 Ventura
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS 12 and 13no image
2Browse to the location where the file LBL_CS_MacOS_12_13 is downloaded, and right-click on it

3Click  Open
4

Click Open to the popup saying "macOS cannot verify the developer of LBL_CS_MacOS_12_13. Are you sure you want to open it?"

5Click Continue for the "Introduction" and "Read Me" section

6Click Install

7Type in your computer password

8Click Install Software
9Click Allow to the popup saying "'Falcon' would like to filter network content"

10A "System Extension Blocked" popup will appear, click Open System Settings

11Select Privacy & Security

12Look for "System software from application "Falcon" was blocked from loading"
13Click Allow
14Type in your computer password

15Click Unlock
16click OK on the popup saying "Installer would like to modify apps on your mac"

17Click Close 

18

Click Move to Trash and continue to Step 2

Click the Apple icon on the top left cornerSelect Privacy & Security on the left columnSelect Full Disk Access on the right side

Now, the sliders for Agent and Falcon should both be toggled on

You are done, close System Settings

Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

no image

Excerpt
Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 13 - CrowdStrike Falcon Full Disk Access
macOS 13 - CrowdStrike Falcon Full Disk Access

HTML
<iframe src="https://drive.google.com/file/d/1GAhF-T7uKc7b4LLfdAik6L18w47-NTFg/preview" width="1280" height="720" allow="autoplay"></iframe>
1

Image Removed

2Click System Settings
3

Image Removed

4
5Toggle the slider to on for Agent

Image Removed

6Type in your computer password
7Click Unlock
8Click the + icon
9Navigate to /Application/Falcon or Falcon.app and select it

Image Removed

10

Click Open

11

Image Removed

12

If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

Click the Apple icon on the top left cornerClick Security & PrivacyClick the Lock icon on the bottom left corner

Now, both the box for Agent and Falcon should be checked

You are done, close System Preferences

Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

Card
labelmacOS 12 Monterey
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

excerpt
Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 12 Monterey
HTML
<iframe src="https://drive.google.com/file/d/1XXQvT4ZTmgNY6knfcspVWyrCBzpjggbQ/preview" width="1280" height="720" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS 12 and 13no image
2Browse to the location where the file LBL_CS_MacOS_12_13 is downloaded, and right-click on it

3Click  Open
4

Click Open to the popup saying "macOS cannot verify the developer of LBL_CS_MacOS_12_13. Are you sure you want to open it?"

5Click Continue for the "Introduction" and "Read Me" section

6

Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step.

7Click Install

8Type in your computer password

9Click Install Software
10Click Allow to the popup saying "com.crowdstrike.falcon.app" would like to filter network content"

11A "System Extension Blocked" popup will appear, click Open Security Preferences

12Select Security & Privacy

13Click the Lock icon on the bottom left

14Type in your computer password
15Click Unlock
16Look for "System software from application "Falcon.app" was blocked from loading", and click Allow

17Installation is done. Click Close 

18

Click Move to Trash and continue to Step 2

Expand
titleStep 2 - CrowdStrike Falcon Permissions
Anchor
FDA_macOS11_12FDA_macOS11_12
HTML
<iframe src="https://drive.google.com/file/d/1eRiwtovz-BUDhRGm_M7bi7l0Zw5dhx9d/preview" width="1280" height="720" allow="autoplay"></iframe>
1

Image Removed

2Click System Preferences
3

Image Removed

4

Image Removed

5Type in your computer password
6Click Unlock
7Select Privacy tab
8On the left column, find and select Full Disk Access

Image Removed

9Check the box for Agent
10Click the + icon
11Navigate to /Application/Falcon or Falcon.app and select it

Image Removed

12

Click Open

13

Image Removed

14If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?no image

Include Page
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access

Card
labelmacOS 11 Big Sur
Note

The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets

Expand
titleStep 1 - Install CrowdStrike Falcon on macOS 11 Big Sur
1Go to software.lbl.gov and download CrowdStrike Falcon Sensor for macOS 11no image
2Browse to the location where the file LBL_CS_MacOS11_vX.X is downloaded, and double-click on it

3

It will extract a folder called LBL_CS_MacOS11_vX.X, open it.

Leave this folder open, you will return to it.

4Right-click on the GovLagger... file

5Select Open With
6Select Installer
7Click Continue for the "Introduction" and "Read Me" section

8Click Install

9Type in your computer password

10Click Install Software
11Click Close

12Return to the LBL_CS_MacOS11_vX.X folder from step 3 and right-click on the file configuration.command

13Select Open With
14Select Terminal
15Click Open to the popup saying "macOS cannot verify the developer of "configuration.command". Are you sure you want to open it?"

16

In the terminal window that pops up, type in your computer password and hit enter

Note: no character will appear when you type the password here.

17Click Allow to the popup saying "Falcon would like to filter network content"

18A "System Extension Blocked" popup will appear, click Open Security Preferences

19Select Security & Privacy

20Click the Lock icon on the bottom left

21Type in your computer password
22Click Unlock
23Look for "System software from application "Falcon" was blocked from loading", and click Allow

24

This process may take between 3-8 minutes. Once done you will see it say [Process Completed]

Continue to Step 2

Click the Apple icon on the top left cornerClick Security & PrivacyClick the Lock icon on the bottom left corner

Now, both the box for Agent and Falcon should be checked

You are done, close System Preferences

Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

no image

Expand
titleStep 2 - CrowdStrike Falcon Permissions

Include Page
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access
macOS 11 and 12 - CrowdStrike Falcon Full Disk Access

HTML
<iframe src="https://drive.google.com/file/d/1eRiwtovz-BUDhRGm_M7bi7l0Zw5dhx9d/preview" width="1280" height="720" allow="autoplay"></iframe>
1

Image Removed

2Click System Preferences
3

Image Removed

4

Image Removed

5Type in your computer password
6Click Unlock
7Select Privacy tab
8On the left column, find and select Full Disk Access

Image Removed

9Check the box for Agent
10Click the + icon
11Navigate to /Application/Falcon or Falcon.app and select it

Image Removed

12

Click Open

13

Image Removed

14If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

Expand
titleCrowdStrike Falcon Install Instruction for Windows
Deck of Cards
idCSF Windows
tabLocationleft
Card
labelManually Install CrowdStrike Falcon
Note

Instructions for Windows 10 and Windows 11 are essentially the same. The main difference is how they look.


HTML
<iframe src="https://drive.google.com/file/d/189nVO4g-Au8jY4sDcfUMDg-GCdFkqseN/preview" width="1280" height="720" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for Windowsno image
2Browse to the location where the file LBL_CS_Win_Installer_vX.X is downloaded, and double-click on it

3

You may see the popup"Windows Protected your PC"

Click More info

If not, skip to Step 5

4Click Run anyway

5

The pop-up "Do you want to allow this app to make changes to your device?" will appear

Click Yes

6

A command prompt window will appear stating "This may take several minutes. This window will close when the full process is complete"

This process will take between 4 to 10 minutes

If you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

Note

During this process, you may see the following notifications in the bottom right corner. You can ignore it.

This happens because during the transient state, Sophos Antivirus is being removed and CrowdStrike Falcon is being installed.

7

Once the command prompt window disappears. You are done.

If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

no image
Card
labelInstall CrowdStrike Falcon via BigFix


Please visit:

...