Skip to content

Instantly share code, notes, and snippets.

@jtgasper3

jtgasper3/Falcon.ps1

Created April 26, 2022 21:52
Show Gist options
  • Save jtgasper3/f112848d5c981891cc38ae52b596831c to your computer and use it in GitHub Desktop.
Save jtgasper3/f112848d5c981891cc38ae52b596831c to your computer and use it in GitHub Desktop.
Download ZIP
Impersonate CrowdStrike
Raw
Falcon.ps1
Set-WmiInstance -Namespace "root\SecurityCenter2" -Class AntivirusProduct -Argument @{displayName="CrowdStrike Falcon Sensor";instanceGuid="{8FE1C46C-23A5-9999-A73E-DAABB9E7B3CD}";pathToSignedProductExe="%ProgramFiles%\CrowdStrike\CSFalconController.exe";pathToSignedReportingExe="C:\Program Files\CrowdStrike\CSFalconService.exe";productState="266240";timestamp="Tue, 08 Feb 2022 15:42:15 GMT"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment