Purpose of Knowledge Article:

  • If you have Sophos Antivirus on the computer, the CrowdStrike Falcon installer will uninstall it for you.
  • If you have Sophos Antivirus on the computer, a restart will be required to finish the Sophos uninstallation process.

Resolution:

Install CrowdStrike Falcon

Expand the instruction for the operating system you are using:

  • Instructions for macOS 12 Monterey and macOS 13 Ventura are essentially the same. The main difference is how they look
  • The CrowdStrike Falcon macOS installer is a universal binary and will work on Intel and Apple Silicon (M1, and M2) chipsets
<iframe src="https://drive.google.com/file/d/1XXQvT4ZTmgNY6knfcspVWyrCBzpjggbQ/preview" width="640" height="480" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for macOSno image
2Browse to the location where the file LBL_CS_MacOS_12_13 is downloaded, and right-click on it

3Click  Open
4

Click Open to the popup saying "macOS cannot verify the developer of LBL_CS_MacOS_12_13. Are you sure you want to open it?"

5Click Continue for the "Introduction" and "Read Me" section

6

Leave the default destination as it is and click Continue

Note: if you do not see this screen, continue to the next step

7Click Install

8Type in your computer password

9Click Install Software
10Click Allow to the popup saying "com.crowdstrike.falcon.app" would like to filter network content"

11A "System Extension Blocked" popup will appear, click Open Security Preferences

12Select Security & Privacy

13Click the Lock icon on the bottom left

14Type in your computer password
15Click Unlock
16Look for "System software from application "Falcon.app" was blocked from loading", and click Allow

17If you are using macOS 13 Ventura, you will see an additional popup saying "Installer would like to modify apps on your mac", click OK

18Installation is done. Click Close 

19You may select Keep or Move to Trash depending on if you want to keep the CrowdStrike Falcon installer file or delete it

20If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?no image

Under development

Instructions for Windows 10 and Windows 11 are essentially the same. The main difference is how they look.

<iframe src="https://drive.google.com/file/d/189nVO4g-Au8jY4sDcfUMDg-GCdFkqseN/preview" width="640" height="480" allow="autoplay"></iframe>
1Go to https://software.lbl.gov/swSoftwareDetails.php?applicationID=259 and download CrowdStrike Falcon Sensor for Windowsno image
2Browse to the location where the file LBL_CS_Win_Installer_vX.X is downloaded, and double-click on it

3

You may see the popup "Windows Protected your PC"

Click More info

If not, skip to Step 5

4Click Run anyway

5

The pop-up "Do you want to allow this app to make changes to your device?" will appear

Click Yes

6

A command prompt window will appear stating "This may take several minutes. This window will close when the full process is complete"

This process will take between 4 to 10 minutes


During this process, you may see the following notification in the bottom right corner. You can ignore it.

7

Once the command prompt window disappears. You are done.

If you want to confirm CrowdStrike Falcon is installed and running, see Is CrowdStrike Falcon Running?

no image

Uninstall CrowdStrike Falcon

Expand the instruction for the operating system you are using:

1Launch the Terminal app from the Utilities folder

2

Run sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall

3Type in your computer password and hit Enter key on your keyboard
4You will see a confirmation saying "Falcon is uninstalled"

1Click on the Start Menu icon


2Type in Control Panel
3Click Control Panel
4Click Programs and Features

5Select CrowdStrike Windows Sensor in the list

6Click Uninstall
7

The Do you want to allow this app to make changes to your device will pop up

Click Yes

8Click Uninstall

9The uninstallation process will take a moment. When it is done, click Close