...

• A guide on how to install or uninstall CrowdStrike Falcon from Berkeley Lab computers.
• The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon chipsets
• The install instructions for Windows also apply to CrowdStrike For Home

Resolution:

Resolution:

Install CrowdStrike Falcon

Expand the instruction instructions for the operating system you are using:

Expand
title CrowdStrike Falcon Install Instruction for Mac
Deck of Cards id Crowdstrike Install macOS tabLocation left Card label macOS 12 Monterey & macOS 13 Ventura15 Sequoia title macOS 15 Sequoia Note The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets Expand title Step 1 - Install CrowdStrike Falcon on macOS 15 Sequoia 1 Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download Crowdstrike Falcon 1.6 no image 4 Run the CrowdStrike installer you just downloaded no image 5 Click Continue for the "Introduction" and "Read Me" section Image AddedImage Added Leave the default destination as it is and click Continue Note: if you do not see this screen, continue to the next step. Image Added 6 Click Install Image Added 7 Type in your computer password Image Added 8 Click Install Software 9 Click Allow to the popup saying "'Falcon' would like to filter network content" Image Added 10 A "System Extension Blocked" popup will appear, click Open System Settings Warning If the OK button was mistakenly clicked instead of Open System Settings here. A window from CrowdStrike will pop up (see below image) at some point during or after the installation. Follow this instruction to fix it. Image Added Image Added 11 For Falcon, slide the toggle to on (it will turn blue) Image Added 12 Type in your computer password Image Added 13 Click OK 14 Click Done Image Added 15 click OK on the popup saying "Installer would like to modify apps on your Mac" Note You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green. Image Added Image Added 16 Click Close  Image Added 17 Click Move to Trash and continue to Step 2 Image Added Expand title Step 2 - CrowdStrike Falcon Permissions Include Page macOS 13 and newer - CrowdStrike Falcon Full Disk Access macOS 13 and newer - CrowdStrike Falcon Full Disk Access Card label macOS 13 Ventura and 14 Sonoma title macOS 13 Ventura and 14 Sonoma Note The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets Expand title Step 1 - Install CrowdStrike Falcon on macOS 13 Ventura and 14 Sonoma Instructions for macOS 12 Monterey and macOS 13 Ventura are essentially the same. The main difference is how they look. <iframe src="https://drive.google.com/file/d/1XXQvT4ZTmgNY6knfcspVWyrCBzpjggbQ/preview" width="640" height="480" allow="autoplay"></iframe> HTML 1 Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS Crowdstrike Falcon 1.6 no image 4 Run the CrowdStrike installer you just downloaded no image 2 Browse to the location where the file LBL_CS_MacOS_12_13 is downloaded, and right-click on it Image Removed 3 Click  Open 4 Click Open to the popup saying "macOS cannot verify the developer of LBL_CS_MacOS_12_13. Are you sure you want to open it?" 5 Click Continue for the "Introduction" and "Read Me" section Image AddedImage Added Leave the default destination as it is and click Continue Note: if you do not see this screen, continue to the next step. Image Added 6 Click Install Image Added 7 Type in your computer password Image Added 8 Click Install Software 9 Click Allow to the popup saying "'Falcon' would like to filter network content" Image Added 10 A "System Extension Blocked" popup will appear, click Open System Settings Image Added 11 Select Privacy & Security Image Added 12 Look for "System software from application "Falcon" was blocked from loading" 13 Click Allow 14 Type in your computer password Image Added 15 Click Unlock 16 click OK on the popup saying "Installer would like to modify apps on your Mac" Note You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green. Image Added Image Added 17 Click Close  Image Added 18 Click Move to Trash and continue to Step 2 Image Added Expand title Step 2 - CrowdStrike Falcon Permissions Include Page macOS 13 and newer - CrowdStrike Falcon Full Disk Access macOS 13 and newer - CrowdStrike Falcon Full Disk Access 18 Card label macOS 12 Monterey Note The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets Expand title Step 1 - Install CrowdStrike Falcon on macOS 12 Monterey 1 Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOS 12 and newer no image 2 Run the CrowdStrike installer you just downloaded no image Image Removed 5 Click Continue for the "Introduction" and "Read Me" section Image ModifiedImage Modified 6 Leave the default destination as it is and click Continue Note: if you do not see this screen, continue to the next step. Image Modified 7 Click Install Image Modified 8 Type in your computer password Image Modified 9 Click Install Software 10 Click Allow to the popup saying "com.crowdstrike.falcon.app" would like to filter network content" Image Modified 11 A "System Extension Blocked" popup will appear, click Open Security Preferences Image Modified 12 Select Security & Privacy Image Modified 13 Click the Lock icon on the bottom left Image Modified 14 Type in your computer password 15 Click Unlock 16 Look for "System software from application "Falcon.app" was blocked from loading", and click Allow Image Removed 17 If you are using macOS 13 Ventura, you will see an additional popup saying "Installer would like to modify apps on your mac", click OK Image Removed Note You may see this screen pop up, do not worry or panic. Continue to follow the instructions here and everything will turn green. Image Added Image Added 17 Installation is done. Click Close  Image Modified
19	You may select Keep or Move to Trash depending on if you want to keep the CrowdStrike Falcon installer file or delete it	Image Removed
20	If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?	no image

In the "Files will be extracted to this folder" field

<iframe src="https://drive.google.com/file/d/

189nVO4g-Au8jY4sDcfUMDg-GCdFkqseN/preview" width="

1280" height="

720" allow="autoplay"></iframe>

Once extraction is done, a new window for C:\Options will pop up

Locate the file runasadmin, and right-click on it

Image Removed

Image Removed

Uninstall CrowdStrike FalconExpand the instruction for the operating system you are using:

Expand
title CrowdStrike Falcon Uninstall Instruction for Mac
Deck of Cards id macOS CSF uninstall tabLocation left Card label macOS 13 Ventura and 14 Sonoma Expand title Part 1 1 Be sure to quit the Terminal app before beginning Under the Apple icon in the top left corner, click System Settings Image Added 2 On the left column, select Privacy & Security Image Added 3 On the right column, select App Management 4 Click the + icon Image Added 5 Select Utilities  Image Added 6 Select Terminal 7 Click Open 8 Type in your computer password Image Added 9 Click Unlock 10 The Terminal app should now appear under App management Continue to Part 2 Info title info If you left the Terminal app running, you will this popup: Image Added You can click Later and manually quit the Terminal app or click Quit & Reopen so the system does it for you now. This needs to be done before continuing to Part 2. Image Added Expand title Part 2 Excerpt Include Install/Uninstall CrowdStrike Falcon Install/Uninstall CrowdStrike Falcon nopanel true Card label macOS 11 BiG Sur and macOS 12 Monterey Excerpt 1 Launch the Terminal app from the Utilities folder Image Modified 2 Run sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall -t Image Removed Image Added 3 Type in your computer password and hit Enter key on your keyboard Image Added 4 Copy and paste in the maintenance token you received Note: nothing will show up as you input the maintenance token, so be sure to only paste it once and hit enter Image Added 5 You will see a confirmation saying "Falcon is uninstalled" Image Removed Note: you must restart the computer to complete the uninstallation process Image Added

...