{"id":602,"date":"2024-05-07T16:16:43","date_gmt":"2024-05-07T16:16:43","guid":{"rendered":"https:\/\/ni.cmu.edu\/computing\/?post_type=ht_kb&p=602"},"modified":"2024-05-07T16:59:52","modified_gmt":"2024-05-07T16:59:52","slug":"how-can-you-check-if-crowdstrike-is-installed-on-your-computer","status":"publish","type":"ht_kb","link":"https:\/\/ni.cmu.edu\/computing\/knowledge-base\/how-can-you-check-if-crowdstrike-is-installed-on-your-computer\/","title":{"rendered":"How to check if CrowdStrike is installed on your computer."},"content":{"rendered":"

For Windows Machines:<\/strong><\/p>\n

    \n
  1. Right-click on the Start button, normally in the lower-left corner of the screen. Select Apps and Features.<\/li>\n
  2. In the new window that opens, scroll down until you locate \u201cCrowdStrike Windows Sensor\u201d in the list of installed apps.<\/li>\n
  3. If you cannot find an entry for \u201cCrowdStrike Windows Sensor\u201d, CrowdStrike is NOT installed<\/a>1<\/sup><\/a>.<\/li>\n<\/ol>\n

    You can also validate that the sensor is running on a Windows host via the command line. Run this command at a command prompt: sc query CSFalconService<\/code>. If you see STATE: 4 RUNNING<\/code>, CrowdStrike is installed and running<\/a>1<\/sup><\/a>.<\/p>\n

    For macOS Machines:<\/strong><\/p>\n

      \n
    1. Go to your Applications folder.<\/li>\n
    2. Locate the Falcon app and double-click it to launch it. The application should launch and display the version number<\/a>1<\/sup><\/a>.<\/li>\n<\/ol>\n

      You can also confirm the application is running through Terminal. Launch Terminal and input this command: sudo \/Applications\/Falcon.app\/Contents\/Resources\/falconctl stats agent_info<\/code>. If Terminal displays command not found<\/code>, Crowdstrike is not installed<\/a>1<\/sup><\/a>.<\/p>\n

      For Linux Machines:<\/strong> To confirm the sensor is running, run the following command in terminal: ps -e | grep falcon-sensor<\/code>. If you see a similar output as below, CrowdStrike is running<\/a>1<\/sup><\/a>.<\/p>\n

      [user@test ~]# sudo ps -e | grep falcon-sensor\r\n635 ? 00:00:03 falcon-sensor\r\n<\/code><\/pre>\n
       <\/p>\n","protected":false},"excerpt":{"rendered":"
      For Windows Machines: Right-click on the Start button, normally in the lower-left corner of the screen. Select Apps and Features. In the new window that opens, scroll down until you locate \u201cCrowdStrike Windows Sensor\u201d in the list of installed apps. If you cannot find an entry for \u201cCrowdStrike Windows Sensor\u201d,…<\/p>\n","protected":false},"author":1,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[18],"ht-kb-tag":[],"class_list":["post-602","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-security"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb\/602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/comments?post=602"}],"version-history":[{"count":2,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb\/602\/revisions"}],"predecessor-version":[{"id":604,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb\/602\/revisions\/604"}],"wp:attachment":[{"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/media?parent=602"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb-category?post=602"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/ni.cmu.edu\/computing\/wp-json\/wp\/v2\/ht-kb-tag?post=602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}