What is CrowdStrike Falcon? 

CrowdStrike Falcon is a cloud-based security tool that runs on Windows, Mac, and Linux systems and is the default Berkeley Lab antivirus software.

CrowdStrike Falcon is different from legacy antivirus because the CrowdStrike Falcon platform:

Why did Berkeley Lab pick CrowdStrike Falcon?

CrowdStrike Falcon provides advanced protection against viruses, malware, ransomware, cyber-attacks, and other malicious activity for Berkeley Lab systems. CrowdStrike Falcon greatly protects your computer from attack.

CrowdStrike Falcon will replace Sophos Antivirus, which will be discontinued in July 2023.

Where to download CrowdStrike Falcon?

Download CrowdStrike Falcon from https://software.lbl.gov/.

How to install or uninstall CrowdStrike Falcon?

See Install/Uninstall CrowdStrike Falcon

How to uninstall Sophos Antivirus?

The CrowdStirke Falcon installer will uninstall Sophos Antivirus.

How do I know if Crowdsrike finds something?

A notification will pop up on your system just like any other notification from other software. Windows notifications will be on the bottom right and Macs will be on the upper right by default.

How will the transition to CrowdStrike Falcon impact me?

Sophos Anti-virus will be uninstalled and CrowdStrike Falcon will be installed.

Who do I talk to if CrowdStrike Falcon is potentially interfering with my work? (Generates a false positive notification.)

Interference with your work is unlikely, we’ve talked with other organizations that use CrowdStrike Falcon and they reported false positives are very low. However, there may be a few as we start rolling out CrowdStrike.

If you need assistance, please email [email protected] and include the following:

Does CrowdStrike Falcon run in the background and is there any way the user can manage it?

CrowdStrike Falcon runs in the background automatically and there is no user-accessible interface. This is to improve security. If someone compromises your computer, they can not disable CrowdStrike Falcon.

With CrowdStrike Falcon, will BigFix still be needed?

Yes, BigFix is an endpoint management tool used to help automate workstation support processes. CrowdStrike Falcon is an endpoint protection tool.

Does CrowdStrike Falcon run on iOS and Android?

CrowdStrike Falcon works on iOS 13 or higher and Android version 8 or higher. The use of CrowdStrike Falcon on mobile devices is not provided by Berkeley Lab IT.

Can I use CrowdStrike Falcon on my personal computer?  What should I do for personal antivirus with Sophos retiring?

No, you cannot, as CrowdStrike Falcon is for Berkeley Lab systems only. If you have been using the Lab's Sophos Antivirus on your personal computer, you will need to replace it with another trusted Anti-virus on the market, such as Windows Defender or Avast.

How to check if CrowdStrike Falcon is working on a system?

See Is CrowdStrike Falcon Running?

Will CrowdStrike Falcon slow down my computer?

Unlike traditional antivirus, the software doesn't scan your hard drive so there is less impact just by the architecture differences. There is no perceptible performance impact on your computer. The sensor’s design makes it extremely lightweight (consuming 1% or less of CPU) and unobtrusive: there’s no UI, fewer reboots, and all updates are performed silently and automatically when possible.

What are some of the requirements to install CrowdStrike Falcon?

Note: If you would like assistance because your system does not meet the listed requirements, please email [email protected] and include:

Concerns about CrowdStrike Falcon and Privacy?

See CrowdStrike Falcon and Privacy

Additional Resources: