For Windows Machines:
- Right-click on the Start button, normally in the lower-left corner of the screen. Select Apps and Features.
- In the new window that opens, scroll down until you locate “CrowdStrike Windows Sensor” in the list of installed apps.
- If you cannot find an entry for “CrowdStrike Windows Sensor”, CrowdStrike is NOT installed1.
You can also validate that the sensor is running on a Windows host via the command line. Run this command at a command prompt: sc query CSFalconService
. If you see STATE: 4 RUNNING
, CrowdStrike is installed and running1.
For macOS Machines:
- Go to your Applications folder.
- Locate the Falcon app and double-click it to launch it. The application should launch and display the version number1.
You can also confirm the application is running through Terminal. Launch Terminal and input this command: sudo /Applications/Falcon.app/Contents/Resources/falconctl stats agent_info
. If Terminal displays command not found
, Crowdstrike is not installed1.
For Linux Machines: To confirm the sensor is running, run the following command in terminal: ps -e | grep falcon-sensor
. If you see a similar output as below, CrowdStrike is running1.
[user@test ~]# sudo ps -e | grep falcon-sensor
635 ? 00:00:03 falcon-sensor