Ansible
PS DSC
Downloads:
157
Downloads of v 6.12.12601:
157
Last Update:
31 Oct 2020
Package Maintainer(s):
Software Author(s):
- opnsrc.dev
Tags:
crowdstrike falcon sensor security antivirus endpoint agent- Software Specific:
- Software Site
- Package Specific:
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download
CrowdStrike Falcon Sensor
- Software Specific:
- Software Site
- Package Specific:
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download
Downloads:
157
Downloads of v 6.12.12601:
157
Maintainer(s):
Software Author(s):
- opnsrc.dev
CrowdStrike Falcon Sensor
Legal Disclaimer: Neither this package nor Chocolatey Software, Inc. are affiliated with or endorsed by opnsrc.dev. The inclusion of opnsrc.dev trademark(s), if any, upon this webpage is solely to identify opnsrc.dev goods or services and not for commercial purposes.
- 1
- 2
- 3
Some Checks Are Exempted or Have Failed
Not All Tests Have Passed
This package was rejected on 07 May 2021. The reviewer chocolatey-ops has listed the following reason(s):
CrowdStrike is the pioneer of cloud-delivered endpoint protection. CrowdStrike Falcon has revolutionized endpoint security by being the first and only solution to unify next-generation antivirus, endpoint detection and response (EDR), and a 24/7 threat hunting service — all delivered via a single lightweight agent.
Package Parameters
Command-line options for installer configuration.
/CID:Uses CID (customer identification) to associate sensor to CrowdStrike Falcon Console./ProvToken:Optional security measure to prevent unauthorized hosts from being accidentally or maliciously added to your customer ID (CID)./ProvNoWait:Value:0 (Default) Uninstalls sensor if unable to connect to CrowdStrike Falcon Console within 10 minutes. Value:1 Prevents uninstall if unable to connect to CrowdStrike Falcon Console./ProvWaitTime:If your host requires more time to connect, you can override this by using the ProvWaitTime parameter in the command line to increase the timeout to 1 hour format of (3600000)./GroupingTags:Assigning Tags to auto add into static Groups/MaintenanceToken:Maintenance Token is required if you already have CrowdStrike sensor installed and planned to upgrade application to lastest version.
Install Examples
choco install crowdstrike-falcon-sensor --params "/CID:0123456789ABCDEFGHIJKLMNOPQRSTUV-WX"
choco install crowdstrike-falcon-sensor --params "/CID:0123456789ABCDEFGHIJKLMNOPQRSTUV-WX /ProvToken:0123ABCD /ProvNoWait:1"
choco install crowdstrike-falcon-sensor --params "/CID:0123456789ABCDEFGHIJKLMNOPQRSTUV-WX /ProvToken:0123ABCD /ProvNoWait:1 /ProvWaitTime:3600000 /GroupingTags:'Washington/DC_USA,Production" /MaintenanceToken:56c4asdgvsadfc4d88434sedfga7116a4drtdfg4df4rth90a3dr89oghjmq29f"
Uninstall Examples
choco uninstall crowdstrike-falcon-sensor --params "/MaintenanceToken:56c4asdgvsadfc4d88434sedfga7116a4drtdfg4df4rth90a3dr89oghjmq29f"
If you exprience issues with using above parameters, please don't hesitate to contact me. Thanks. Have Fun Automating!
$ErrorActionPreference = 'Stop'
$toolsDir = "$(Split-Path -parent $MyInvocation.MyCommand.Definition)"
. $toolsDir\helpers.ps1
# 32/64bit installer
#$url = 'http://provisioning.fusionts.corp/win/apps/crowdstrike/WindowsSensor.exe'
$url = Join-Path $toolsDir 'CsUninstallTool.exe'
$pp = Get-PackageParameters
$cs_MaintenanceToken = $pp['MaintenanceToken'] #Maintenance Token is required if you planned to upgrade package to lastest version
######
if ($cs_MaintenanceToken) {
Write-Output "PackageParameter Maintenance Token: $cs_MaintenanceToken"
$MaintenanceToken = "MAINTENANCE_TOKEN='$cs_MaintenanceToken'"
}
$packageArgs = @{
packageName = $env:ChocolateyPackageName
softwareName = 'CrowdStrike Windows Sensor*'
version = $env:ChocolateyPackageVersion
unzipLocation = $toolsDir
installerType = 'exe'
file = $url
#file64 = $url64
checksum = 'e127f23dda6f2c3f48e9d2ad55a9d245b3fe6e6e607ed2572a4dd2be819a8235'
checksumType = 'sha256' #default is md5, can also be sha1, sha256 or sha512
#checksum64 = ''
#checksumType64= 'sha512' #default is checksumType
silentArgs = "/quiet $MaintenanceToken"
#Exit codes for ms http://msdn.microsoft.com/en-us/library/aa368542(VS.85).aspx
validExitCodes = @(
0, # success
3010, # success, restart required
2147781575, # pending restart required
2147205120 # pending restart required for setup update
)
}
if ($cs_MaintenanceToken) {
Uninstall-ChocolateyPackage @packageArgs
}else {
Write-Error "Please provide Maintenance Token to uninstall CrowdStrike Falcon Sensor"
}md5: E5FDDF6F8EE48D84FC03BDCD94606D61 | sha1: 0904F9E46A007DE7805958AD62564F9EBB143A05 | sha256: E127F23DDA6F2C3F48E9D2AD55A9D245B3FE6E6E607ED2572A4DD2BE819A8235 | sha512: 6744FBA2111C53D19E9F54471C9FBD4ACA66D4814BBB78E8B90B8C8D3176BC876BDF266C7A27576298C6A4927B6137ECAFCB43F33E4B22D7726326DD43314778function GetUninstallPath() {
param(
[Parameter(Mandatory = $true)]
[string]$AppName,
[Parameter(Mandatory = $true)]
[string]$AppVersion
)
$AppsObject=(Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*','HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*')
$AppUninstallPath = $AppsObject| ? {($_.DisplayName -like "*$AppName*") -and ([version]$_.DisplayVersion -eq [version]"$AppVersion" )}
if ( $AppUninstallPath ) {
return $AppUninstallPath.UninstallString
}
}
function GetLocale {
param(
[Parameter(Mandatory = $true)]
[string]$localeFile,
[Parameter(Mandatory = $true)]
[string]$product
)
#$availableLocales = Get-WebContent $localeUrl 2>$null
$availableLocales = Get-Content $localeFile | ForEach-Object { $_ -split '\|' | Select-Object -first 1 } | Select-Object -Unique
$packageParameters = $env:chocolateyPackageParameters
$packageParameters = if ($packageParameters -ne $null) { $packageParameters } else { "" }
$argumentMap = ConvertFrom-StringData $packageParameters
$localeFromPackageParameters = $argumentMap.Item('l')
Write-Verbose "User chooses '$localeFromPackageParameters' as a locale..."
$localeFromPackageParametersTwoLetter = $localeFromPackageParameters -split '\-' | Select-Object -first 1
Write-Verbose "With fallback to '$localeFromPackageParametersTwoLetter' as locale..."
$uninstallPath = GetUninstallPath -product $product
$alreadyInstalledLocale = $uninstallPath -replace ".+\s([a-zA-Z\-]+)\)",'$1'
Write-Verbose "Installed locale is: '$alreadyInstalledLocale'..."
$systemLocalizeAndCountry = (Get-UICulture).Name
$systemLocaleTwoLetter = (Get-UICulture).TwoLetterISOLanguageName
Write-Verbose "System locale is: '$locale'..."
$fallbackLocale = 'en-US'
$locales = $localeFromPackageParameters,$localeFromPackageParametersTwoLetter, `
$alreadyInstalledLocale, $systemLocalizeAndCountry, $systemLocaleTwoLetter, `
$fallbackLocale
foreach ($locale in $locales) {
$localeMatch = $availableLocales | Where-Object { $_ -eq $locale } | Select-Object -first 1
if ($localeMatch -and $locale -ne $null) {
Write-Verbose "Using locale '$locale'..."
break
}
}
return $locale
}
function AlreadyInstalled() {
param(
[Parameter(Mandatory = $true)]
[string]$AppName,
[Parameter(Mandatory = $false)]
[string]$AppVersion
)
$AppsObject=(Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*','HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*')
if ( $AppsObject| ? {($_.DisplayName -like "*$AppName*") -and ([version]$_.DisplayVersion -eq [version]"$AppVersion" )} ) {
return $true
}
else {return $false }
}
function Get-32bitOnlyInstalled() {
param(
[Parameter(Mandatory = $true)]
[string]$product
)
$systemIs64bit = Get-OSArchitectureWidth 64
if (-Not $systemIs64bit) {
return $false
}
$registryPaths = @(
'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall'
'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall'
)
$installedVersions = Get-ChildItem $registryPaths | Where-Object { $_.Name -match "$product [\d\.]+ \(x(64|86)" }
if (
$installedVersions -match 'x86' `
-and $installedVersions -notmatch 'x64' `
-and $systemIs64bit
) {
return $true
}
}
function GetChecksums() {
param(
[Parameter(Mandatory = $true)]
[string]$language,
[Parameter(Mandatory = $true)]
$checksumFile
)
Write-Debug "Loading checksums from: $checksumFile"
$checksumContent = Get-Content $checksumFile
$checksum32 = ($checksumContent -match "$language\|32") -split '\|' | Select-Object -last 1
$checksum64 = ($checksumContent -match "$language\|64") -split '\|' | Select-Object -last 1
return @{
"Win32" = $checksum32
"Win64" = $checksum64
}
}
md5: FC715336EE0459F6996ECE4DE6CA1B87 | sha1: B2DDB7D8B2E1963500DE3B7A214487525E3400F5 | sha256: 60A210C007FDC4C98C339AC56C947DF1EADCF0AD610891061EAA4DE90E5180ED | sha512: 46AECBB7D838B9C5612382D3BEA87FEC2A484B7B68C5B3DE345C7C4C30D7B57188BB59C5B52D2FEDD0FAB630B9CB4F5B32CDE78F1DE5C1B458BF935CC65F949BLog in or click on link to see number of positives.
- crowdstrike-falcon-sensor.6.12.12601.nupkg (1679acbdc9e9) - ## / 66
- CsUninstallTool.exe (e127f23dda6f) - ## / 70
- WindowsSensor_v6.12.12601.exe (60a210c007fd) - ## / 66
In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).
Chocolatey Pro provides runtime protection from possible malware.
Copyright 2020
This package has no dependencies.
Ground Rules:
- This discussion is only about CrowdStrike Falcon Sensor and the CrowdStrike Falcon Sensor package. If you have feedback for Chocolatey, please contact the Google Group.
- This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
- The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
- Tell us what you love about the package or CrowdStrike Falcon Sensor, or tell us what needs improvement.
- Share your experiences with the package, or extra configuration or gotchas that you've found.
- If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.
opnsrc.dev (maintainer) on 31 Oct 2020 04:52:55 +00:00:
User 'opnsrc.dev' (maintainer) submitted package.
opnsrc.dev (maintainer) on 31 Oct 2020 05:03:42 +00:00:
User 'opnsrc.dev' (maintainer) submitted package.
chocolatey-ops (reviewer) on 31 Oct 2020 05:38:35 +00:00:
crowdstrike-falcon-sensor has failed automated validation.
Requirements
Requirements represent the minimum quality of a package that is acceptable. When a package version has failed requirements, the package version requires fixing and/or response by the maintainer. Provided a Requirement has flagged correctly, it must be fixed before the package version can be approved. The exact same version should be uploaded during moderation review.
Guidelines
Guidelines are strong suggestions that improve the quality of a package version. These are considered something to fix for next time to increase the quality of the package. Over time Guidelines can become Requirements. A package version can be approved without addressing Guideline comments but will reduce the quality of the package.
packageSourceUrl, pointing to the url where the package source resides. This is a strong guideline because it simplifies collaboration. Please add it to the nuspec. More...Suggestions
Suggestions are either newly introduced items that will later become Guidelines or items that are don't carry enough weight to become a Guideline. Either way they should be considered. A package version can be approved without addressing Suggestion comments.
Notes
Notes typically flag things for both you and the reviewer to go over. Sometimes this is the use of things that may or may not be necessary given the constraints of what you are trying to do and/or are harder for automation to flag for other reasons. Items found in Notes might be Requirements depending on the context. A package version can be approved without addressing Note comments.
chocolatey-ops (reviewer) on 22 Apr 2021 09:44:34 +00:00:
We've found crowdstrike-falcon-sensor v6.12.12601 in a submitted status and waiting for your next actions. It has had no updates for 20 or more days since a reviewer has asked for corrections. Please note that if there is no response or fix of the package within 15 days of this message, this package version will automatically be closed (rejected) due to being stale.
Take action:
If your package is failing automated testing, you can use the chocolatey test environment to manually run the verification and determine what may need to be fixed.
Note: We don't like to see packages automatically rejected. It doesn't mean that we don't value your contributions, just that we can not continue to hold packages versions in a waiting status that have possibly been abandoned. If you don't believe you will be able to fix up this version of the package within 15 days, we strongly urge you to log in to the site and respond to the review comments until you are able to.
chocolatey-ops (reviewer) on 07 May 2021 09:46:18 +00:00:
Unfortunately there has not been progress to move crowdstrike-falcon-sensor v6.12.12601 towards an approved status within 15 days after the last review message, so we need to close (reject) the package version at this time. If you want to pick this version up and move it towards approval in the future, use the contact site admins link on the package page and we can move it back into a submitted status so you can submit updates.
Status Change - Changed status of package from 'submitted' to 'rejected'.