Deploying Crowdstrike Falcon - Windows 10

I see a couple of things that could be issues in that command line.
Does the “CID” parameter contain curly-brackers { } ? It’s hard to tell from the screenshot.

Try forcing it to run in 64-bit mode by disabling wow64 redirection.

The other thing is that the GROUPING_TAGS parameter has doublequotes in it. I’ve seen some complex behavior around ‘wait’/‘waithidden’ command lines that have their own embedded quoting. I usually workaround that by rewriting the command to use cmd.exe’s special handling of quoting characters. Try replacing the waithidden command line as

action uses wow64 redirection {not x64 of operating system}

waithidden cmd.exe /c ""__Download\WindowsSensor.exe" /install /quiet /norestart CID=something GROUPING_TAGS="something""

cmd.exe strips off the outer doublequotes and then treats everything inside the doublequotes as a literal command line.