Uninstall CrowdStrike
Overview
This script uses the CrowdStrike uninstall tool to remove the Falcon Sensor from the Windows device.
Sample Run
Dependencies
Parameters
| Name | Example | Accepted Values | Required | Default | Type | Description |
|---|---|---|---|---|---|---|
cs_password | -- | -- | False | -- | string/text | CrowdStrike Falcon Sensor uninstall password used as a fallback when the Maintenance Token is not available. |
cs_maintenancetoken | -- | -- | False | -- | string/text | CrowdStrike Falcon Sensor Maintenance Token used to uninstall the sensor when the initial uninstallation attempt requires authentication. |
Custom Fields
| Field Name | Type | Mandatory | Scope | Description |
|---|---|---|---|---|
cPVAL CS Maintenance token | Text | False | Device, Location, Organization | Stores the CrowdStrike Falcon Sensor Maintenance Token used for authenticated sensor uninstallation. |
cPVAL CS Password | Text | false | Device, Location, Organization | Stores the CrowdStrike Falcon Sensor uninstall password used for authenticated sensor removal. |
Automation Setup/Import
Output
- Activity Details
Changelog
2026-10-14
- Initial version of the script.