Skip to content

Instantly share code, notes, and snippets.

@lcarsos

lcarsos/restore_functionality.sh

Last active April 24, 2024 01:05
Show Gist options
  • Star 29 You must be signed in to star a gist
  • Fork 3 You must be signed in to fork a gist
  • Save lcarsos/88affbc5de93dca64b3edfab2c104c2f to your computer and use it in GitHub Desktop.
Save lcarsos/88affbc5de93dca64b3edfab2c104c2f to your computer and use it in GitHub Desktop.
Download ZIP
Repeatedly kill sentinelone so you can actually use the processor and ram on your mac
Raw
restore_functionality.sh
#!/usr/bin/env bash
# Usage: sudo ./restore_functionality.sh
#ps aux | grep sentinel | awk -F " +" '{print $2}' | xargs kill
while true; do
launchctl kill SIGKILL system/com.crowdstrike.falcond
launchctl kill SIGKILL system/com.crowdstrike.userdaemon
launchctl kill SIGKILL system/com.sentinelone.sentineld
launchctl kill SIGKILL system/com.sentinelone.sentineld-helper
launchctl kill SIGKILL system/com.sentinelone.sentineld-guard
launchctl kill SIGKILL system/com.sentinelone.sentineld-updater
launchctl kill SIGKILL gui/502/com.sentinelone.agent
sleep 1
done
@mrcnpp
Copy link

mrcnpp commented Sep 18, 2020

Hi do you have the windows version of it?

@dataops-sre
Copy link

Thanks, super helpfull ! :)

@mxmissile
Copy link

Hi do you have the windows version of it?

Would never work without domain admin permissions.

@dataops-sre
Copy link

I managed to get ride of sentineld by boot with rescue mode, then manually delete sentinel binary, if it can help :)

@wickkidd
Copy link

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment