

I have tested this on macOS 10.14.6 and 10.15.3. This is meant to be a one off type of solution, not an actual solution Use at your own risk Your choices are boot into Safe Boot or Recovery Mode and manually remove these components, which does not scale at all. They are mostly edge cases, however, there is no good remediation with automation that the vendor can supply. There are edge cases where the built in maintenance mechanims with in Crowdstrike will fail. This is a script you can use to forceibly remove Crowdstrike Falcon from a macOS system. Yes, a heart emoji you read that correctly. This solution was based off the original sript that Patrick Gallagher on the Mac Admins Slack provided, I rewrote it in Python 3 so I could display a heart emoji in my dialog boxes. Falcon-Punchįorce reinstall and remediation of broken Crowdstrike Falcon agents on macOS Credits I will leave it up in case folks are using older versions of CS. Crowdstrike has patched in new features into their application/agent that now block all these methods and this repo no longer is valid.
