cliv / cs-falcon-protect-intune Goto Github PK

far as i know , script isn't working with Mac OS Vantura.

Hello,

I was trying to run the .sh script as a test in my mac and met with this error:

command:
sudo bash CSFalconInstall.sh

The output:

execution error: Error: SyntaxError: JSON Parse error: Unexpected EOF (-2700)
execution error: Error: SyntaxError: JSON Parse error: Unexpected EOF (-2700)
installer: Error - the package path specified was invalid: '/tmp/FalconSensorMacOS.pkg'.
rm: /tmp/FalconSensorMacOS.pkg: No such file or directory
CSFalconInstall.sh: line 31: /Applications/Falcon.app/Contents/Resources/falconctl: No such file or directory

I already filled the client_id, client_secret, CCID, and Installation Token at the top without quote, but it spat out those error. Do I need to use quote or do the script has a bug or did I do something wrong? I did this trial before deploying the script to Intune.

Thank you.

When I upload CSFalconInstall.sh into Intune, I receive an error stating that it is not a valid script and am unable to proceed.

Hi,
I'm not sure why, but the script is failing with the following error when deploying to Monterey 12.5.1

installer: Error - the package path specified was invalid: '/tmp/FalconSensorMacOS.pkg'.

Any guidance is appreciated.

Hello, I'm testing deployment on a 2020 Intel Core iMac. Enrolled the device into Intune, then into a group with the custom script uploaded and then ran the deployment script. Sensors installed, although they are not appearing in the Crowdstrike console and the Intune logs say the script ran successfully but give this error: "Error: Provisioning token format incorrect falconctl [OPTIONS] COMMAND [ARGS...] Commands: license CCID [TOKEN] [--noload|-n] license CrowdStrike Falcon sensor. Requires a valid Checksummed Customer ID (CCID). An optional provisioning token can also be provided."

I've confirmed that the Checksum customer ID is the one listed in my console. Not sure if this is the problem or why it's giving this readout.

I followed the steps to deploy the Falcon sensor to via InTune to our MacOS computer, and at the end of the steps it says to run the following Command“sudo /Applications/https://urldefense.proofpoint.com/v2/url?u=http-3A__Falcon.app_Contents_Resources_falconctl&d=DwIF-g&c=08AGY6txKsvMOP6lYkHQpPMRA1U6kqhAwGa8-0QCg3M&r=PFi52xEUDIqQVIo73arA1MxzkLx_6zMUVLjjX8gUzZI&m=F36OC2qrFeQwuCYnQqx4b6wc5QFalRAmi_4Apq1vmi8XmH7qOgMSMSmrK7eNlXLN&s=aE-DERqGRwKm6kemVr6subZ4jI7mO6so1wFy41mJZQ0&e= stats”

and the instructions states "If you get the following response: “command was not found” it means the sensor was not installed.
I did get that response.
I was under the impression that the script installs the sensor, but it looks it does not. Can someone help with the right way to deploy the sensor.

I tried to follow given steps and pushed the script via Intune on Mac Os, I got below message that it went successfully but it is not visible on CS Portal.

Result
installer: Package name is CrowdStrike Falcon Sensor installer: Installing at base path / installer:PHASE:Preparing for installation… installer:PHASE:Preparing the disk… installer:PHASE:Preparing CrowdStrike Falcon Sensor… installer:PHASE:Waiting for other installations to complete… installer:PHASE:Configuring the installation… installer:STATUS: installer:%48.003507 installer:PHASE:Running package scripts… installer:%49.603736 installer:PHASE:Running package scripts… installer:%50.697728 installer:PHASE:Running package scripts… installer:PHASE:Running package scripts… installer:%56.965750 installer:PHASE:Moving items into place… installer:PHASE:Validating packages… installer:%97.750000 installer:STATUS:Running installer actions… installer:STATUS: installer:PHASE:Finishing the Installation… installer:STATUS: installer:%100.000000 installer:PHASE:The software was successfully installed. installer: The install was successful.