Purpose of Knowledge Article:

This is a guide to check if CrowdStrike is running correctly on your system.

Resolution:

Method 1 - Check System Tray Icon

This feature is not available for Windows Server and Windows 10 embedded versions.

1	Expand the system tray (If necessary) by clicking the small arrow icon next to the clock and/or weather display
2	Find the CrowdStrike Falcon icon () - it will display the current state in a small context box if hovered over for a moment
3	If you left-click the CrowdStrike icon in the system tray, it will bring up a status menu with more detail - if the Falcon Sensor Details show running, then the app and services are working properly.

Method 2 - Using Command Prompt

1	Use the search bar to search for 'cmd' and launch Command Prompt as an administrator
2	Run the command *sc query csagent*
3	Ensure the result shows “STATE” is “RUNNING”

Method 3 - Using Powershell

1

Use the search bar to search for 'power' and run a Windows PowerShell terminal as an administrator

2

In the PowerShell terminal type the following command:

Get-Service -Name csagent

3

You should see the status of the CrowdStrike Falcon agent

CrowdStrike Falcon agent status

Method 1

1	Click the Go on the menu bar
2	Select Applications
3	Open Falcon
4	The CrowdStrike Falcon Sensor Setup will show up and you should see 3 green check marks

Method 2

1	Click the Go on the menu bar
2	Select Utilities
3	Open Terminal
4	Type in *sudo /Applications/Falcon.app/Contents/Resources/falconctl stats \| head -n 6* and hit enter Note: If asked for the password, type in your computer password
5	You should see this result

Method 3

1	Click the Go on the menu bar
2	Select Utilities
3	Open Terminal
4	Type in *systemextensionsctl list* and hit enter Note: If asked for the password, type in your computer password
5	The result should look like this