CrowdStrike Falcon Agent
Description
1Password Device Trust (formerly Kolide) ensures that only known and secure endpoints can access sensitive company apps based on over 100 pre-built device health checks. The Device Trust check for CrowdStrike Falcon confirms the Falcon agent is installed, running, and registered on each device before users can sign in. If issues are detected, Device Trust will notify and block users and provide them with step-by-step instructions to remediate the problems. Once the device passes the check, users can continue on their way.
Support each platform: Device Trust can determine if CrowdStrike is both installed and running on macOS, Windows, and Linux.
Verify client ID: Device Trust can verify that the Falcon agent is both registered to at least one CrowdStrike Falcon Client ID and that it matches the expected value.
Verify agent: Device Trust can ensure that CrowdStrike Falcon is not running in Reduced Functionality Mode (RFM), and provide remediation instructions.