We’ve been using BigFix to deploy Crowdstrike Falcon to our endpoints for a few years now.
It has come to my attention that the our Falcon Fixlet has been failing in one of the newer versions. We’ve since reverted back to the working one. The fixlet is the same, but I am not sure why it not working with a new version of the WindowsSenor.exe.
Here is an edited snippet of the fixlet that does work. The only thing that has changed is the .exe. Any ideas? Thank you.
Check the SHA values and size of the file and make sure the fixlet is updated with those values.
If you take action, you can go back to the action and see if the file cached on the server. It will show if the SHA values were the failure on the action summary screen.
Just a thought, could you not do away with the move/copy requirement by changing the name= in the add prefetch item so its name=WindowsSensor.exe Then the client should manage the contents of the __Download folder and the filename will be correct and not need move/copying.
Wondering if the client logs would help here to see what the error code was on the line that failed
You can get the Crowdstrike installer to write quite a detailed log - /log <c:\some\folder\logfile.log>
There is also an uninstall tool
Also, Crowdstrike can be upgraded/managed from its own console - and that includes adding password and other forms of service protection - are you sure none of those are in place, because they will also break any attempt at upgrade?
I see a couple of things that could be issues in that command line.
Does the “CID” parameter contain curly-brackers { } ? It’s hard to tell from the screenshot.
Try forcing it to run in 64-bit mode by disabling wow64 redirection.
The other thing is that the GROUPING_TAGS parameter has doublequotes in it. I’ve seen some complex behavior around ‘wait’/‘waithidden’ command lines that have their own embedded quoting. I usually workaround that by rewriting the command to use cmd.exe’s special handling of quoting characters. Try replacing the waithidden command line as
muchas gracias por tus comentarios, yo estoy realizando de igual forma la instalacion de crowdstrike, la tarea se completa, sin embargo no aparece en los programas instalados,
No he instalado CrowdStrike yo mismo. Necesitaríamos más detalles, como el ActionScript que estás utilizando y si la línea de comandos del instalador funciona cuando la pruebas fuera de BigFix.
Una vez más, no tengo CrowdStrike, pero según entiendo, es necesario proporcionar los valores CID y GROUPING_TAGS, y estos deben ser válidos para su entorno específico.
Comience con un comando de instalación que funcione fuera de BigFix.
