CentOS/RHEL install fixlet for CrowdStrike Sensor

cmcannady 2020-11-12 22:08:43 UTC #1

Greetings fellow BigFix’ers. I’ve recently created a CrowdStrike Sensor install fixlet for CentOS and RHEL endpoints. The CrowdStrike Sensor - CentOS-RHEL - Install fixlet is available from my Linux-Software GitHub repo.

All content in my personal GitHub is provided AS-IS and without warranty. Constructive feedback is welcome via DM or email.

mbartosh 2021-09-02 17:18:16 UTC #2

Do you have a fixlet for AIX?

cmcannady 2021-09-02 18:06:07 UTC #3

Hi @mbartosh, I do not have a fixlet for AIX. That said, I’m not opposed to working with you to develop one for AIX endpoints. Please DM me with the CrowdStrike version and any specifics for your enterprise and we can continue this conversation via email.

jknapp221 2021-09-02 19:52:02 UTC #4

Will that action script work with the newer version of the sensor?

mbartosh 2021-09-02 22:40:54 UTC #5

I am being told now that Crowdstrike does not support AIX.

cmcannady 2021-09-07 14:10:19 UTC #6

No, the fixlet would need to be updated accordingly. For example, the following prefetch statement and corresponding installation commands are specific to version 5.43.0-10807.

prefetch falcon-sensor-5.43.0-10807.el7.x86_64.rpm sha1:546221fb0507d3465fdce35bddeb9ec6baeb8428  size:2433836 http://bigfix.company-domain.com:52311/Uploads/CrowdStrike/falcon-sensor-5.43.0-10807.el7.x86_64.rpm sha256:1806ae82913c59b84fe2e2afbadf2b736d1dba83eb81d7c0e93a57915628ad75

That said, it would be easy to update my source fixlet to accommodate updates versions of the CrowdStrike sensor.