Remove Nebula Agent

Summary

Removes the Nebula/OneView agent from the endpoint using the ThreatDown Business Support Tool.

Sample Run

User Parameters

Name	Required	Example	Description
TamperProtectionPassword	Yes	'abcdefghijkl'	The Tamper Protection password configured in the Nebula or OneView policy. Use "NoTamperProtection" if Tamper Protection is disabled. If the password contains quotation marks, add another quotation mark after it.
DeepClean	No	1, True, Yes	Removes any and all registry items associated with the agent. Typically run after a reboot following the initial cleanup.

Output

• Script Log
• Script Error

Changelog

2026-08-26

• Initial version of the document.