Uninstall FalconSensor

Uninstall-FalconSensor

SYNOPSIS

Use Real-time Response to uninstall the Falcon sensor from a host

DESCRIPTION

This command uses information from the registry and/or relevant Falcon command line utilities of the target host to uninstall the Falcon sensor. If the sensor is damaged or malfunctioning, Real-time Response may not work properly and/or the uninstallation may not succeed.

Requires 'Hosts: Read', 'Sensor Update Policies: Write', 'Real Time Response: Read', and 'Real Time Response (Admin): Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
QueueOffline	Boolean						Add command request to the offline queue
Include	String[]			agent_version cid external_ip first_seen hostname last_seen local_ip mac_address os_build os_version platform_name product_type product_type_desc serial_number system_manufacturer system_product_name tags			Include additional properties
Id	String				X	X	Host identifier

SYNTAX

Uninstall-FalconSensor [[-QueueOffline] <Boolean>] [[-Include] <String[]>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

revealUninstallToken

USAGE

2022-12-12: PSFalcon v2.2.3