Deploy CrowdStrike Windows Sensor

docs/cwrmm/custom-fields/crowdstrike-customerid.md

@@ -0,0 +1,35 @@
+---
+id: '28f5fdfd-c11e-4643-ae07-62d6f7007805'
+slug: /28f5fdfd-c11e-4643-ae07-62d6f7007805
+title: 'CrowdStrikeCustomerId'
+title_meta: 'CrowdStrikeCustomerId'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Set CrowdStrike Customer ID for the company.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Set CrowdStrike Customer ID for the company.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [CrowdStrikeDownloadUrl](/docs/ae84e56d-df98-42da-b293-7412c01d7db7)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Custom Field Setup Location
+
+**Custom Fields Path:** `SETTINGS` ➞ `Custom Fields`  
+
+## Details
+
+| Name | Level | Type | Default Value | Editable | Description |
+| ---- | ----- | ---- | ------------- | -------- | ----------- |
+| CrowdStrikeCustomerId | COMPANY | Text Box | NA | Yes | Set CrowdStrike Customer ID for the company. |
+
+## Completed Custom Field
+
+![Image1](../../../static/img/docs/28f5fdfd-c11e-4643-ae07-62d6f7007805/image1.webp)

docs/cwrmm/custom-fields/crowdstrike-download-url.md

@@ -0,0 +1,35 @@
+---
+id: 'ae84e56d-df98-42da-b293-7412c01d7db7'
+slug: /ae84e56d-df98-42da-b293-7412c01d7db7
+title: 'CrowdStrikeDownloadUrl'
+title_meta: 'CrowdStrikeDownloadUrl'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Set download Url for downloading the installer for CrowdStrike Windows Sensor.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Set download Url for downloading the installer for CrowdStrike Windows Sensor.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [CrowdStrikeCustomerId](/docs/28f5fdfd-c11e-4643-ae07-62d6f7007805)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Custom Field Setup Location
+
+**Custom Fields Path:** `SETTINGS` ➞ `Custom Fields`  
+
+## Details
+
+| Name | Level | Type | Default Value | Editable | Description |
+| ---- | ----- | ---- | ------------- | -------- | ----------- |
+| CrowdStrikeCustomerId | COMPANY | Text Box | NA | Yes | Set download Url for downloading the installer for CrowdStrike Windows Sensor. |
+
+## Completed Custom Field
+
+![Image1](../../../static/img/docs/ae84e56d-df98-42da-b293-7412c01d7db7/image1.webp)

docs/cwrmm/custom-fields/deploy-crowdstrike-windows-sensor.md

@@ -0,0 +1,33 @@
+---
+id: 'ffe13fcc-700f-41ea-9fdf-20ea4d253326'
+slug: /ffe13fcc-700f-41ea-9fdf-20ea4d253326
+title: 'DeployCrowdStrikeWindowsSensor'
+title_meta: 'DeployCrowdStrikeWindowsSensor'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor']
+description: 'Select OS to enable auto-deployment of CrowdStrike Windows Sensor.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Select OS to enable auto-deployment of CrowdStrike Windows Sensor. However, the [Install CrowdStrike Windows Sensor](/docs/7eb5860d-08e2-41cb-b22b-48505618f1ae) task can still be run manually, independent of this field.
+
+## Dependencies
+
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Custom Field Setup Location
+
+**Custom Fields Path:** `SETTINGS` ➞ `Custom Fields`  
+
+## Details
+
+| Name | Level | Type | Options | Default Value | Editable | Description |
+| ---- | ----- | ---- | ------- | ------------- | -------- | ----------- |
+| DeployCrowdStrikeWindowsSensor | COMPANY | Dropdown | <ul><li>Disabled</li><li>Windows Workstation</li><li>Windows Server</li><li>Windows Workstation and Windows Server</li></ul> |  | Yes | Select OS to enable auto-deployment of CrowdStrike Windows Sensor. |
+
+## Completed Custom Field
+
+![Image1](../../../static/img/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326/image1.webp)

docs/cwrmm/custom-fields/exclude-crowdstrike-install-device.md

@@ -0,0 +1,34 @@
+---
+id: 'cde64225-1c67-4483-9c39-580b315dd30a'
+slug: /cde64225-1c67-4483-9c39-580b315dd30a
+title: 'ExcludeCrowdStrikeInstallDevice'
+title_meta: 'ExcludeCrowdStrikeInstallDevice'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Flag this custom field to exclude the device from CrowdStrike auto installation.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Flag this custom field to exclude the device from CrowdStrike auto installation. However, the [Install CrowdStrike Windows Sensor](/docs/7eb5860d-08e2-41cb-b22b-48505618f1ae) task can still be run manually, independent of this field.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Custom Field Setup Location
+
+**Custom Fields Path:** `SETTINGS` ➞ `Custom Fields`  
+
+## Details
+
+| Name | Level | Type | Default Value | Editable | Description |
+| ---- | ----- | ---- | ------------- | -------- | ----------- |
+| ExcludeCrowdStrikeInstallDevice | ENDPOINT | Flag | | Yes | Flag this custom field to exclude the device from CrowdStrike auto installation |
+
+## Completed Custom Field
+
+![Image1](../../../static/img/docs/cde64225-1c67-4483-9c39-580b315dd30a/image1.webp)

docs/cwrmm/custom-fields/exclude-crowdstrike-install-site.md

@@ -0,0 +1,34 @@
+---
+id: '8d9498e0-4392-471e-93da-b546e0934b89'
+slug: /8d9498e0-4392-471e-93da-b546e0934b89
+title: 'ExcludeCrowdStrikeInstallSite'
+title_meta: 'ExcludeCrowdStrikeInstallSite'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Flag this custom field to exclude the site from CrowdStrike auto installation.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Flag this custom field to exclude the site from CrowdStrike auto installation. However, the [Install CrowdStrike Windows Sensor](/docs/7eb5860d-08e2-41cb-b22b-48505618f1ae) task can still be run manually, independent of this field.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Custom Field Setup Location
+
+**Custom Fields Path:** `SETTINGS` ➞ `Custom Fields`  
+
+## Details
+
+| Name | Level | Type | Default Value | Editable | Description |
+| ---- | ----- | ---- | ------------- | -------- | ----------- |
+| ExcludeCrowdStrikeInstallSite | SITE | Flag | | Yes | Flag this custom field to exclude the site from CrowdStrike auto installation |
+
+## Completed Custom Field
+
+![Image1](../../../static/img/docs/8d9498e0-4392-471e-93da-b546e0934b89/image1.webp)

docs/cwrmm/groups/crowdstrike-windows-sensor-deployment.md

@@ -0,0 +1,67 @@
+---
+id: '406c6d18-a948-45f6-897b-b1d0174e21de'
+slug: /406c6d18-a948-45f6-897b-b1d0174e21de
+title: 'CrowdStrike Windows Sensor Deployment'
+title_meta: 'CrowdStrike Windows Sensor Deployment'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Group of Windows machines where CrowdStrike Windows Sensor deployment is enabled, but the application is not installed.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Group of Windows machines where CrowdStrike Windows Sensor deployment is enabled, but the application is not installed.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [ExcludeCrowdStrikeInstallDevice](/docs/cde64225-1c67-4483-9c39-580b315dd30a)
+- [ExcludeCrowdStrikeInstallSite](/docs/8d9498e0-4392-471e-93da-b546e0934b89)
+- [CrowdStrikeDownloadUrl](/docs/406c6d18-a948-45f6-897b-b1d0174e21de)
+- [CrowdStrikeCustomerId](/docs/28f5fdfd-c11e-4643-ae07-62d6f7007805)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Group Setup Location
+
+- **Group Path:** `ENDPOINTS` ➞ `Groups`  
+- **Group Type:** `Dynamic Group`
+
+## Group Summary
+
+- **Group Name:** `CrowdStrike Windows Sensor Deployment`  
+- **Description:** `Group of Windows machines where CrowdStrike Windows Sensor deployment is enabled, but the application is not installed.`
+
+![Image1](../../../static/img/docs/406c6d18-a948-45f6-897b-b1d0174e21de/image1.webp)
+
+## Group Criteria
+
+The group is defined by the following **criteria blocks**, joined by an **OR**. Each block uses **AND** logic between its conditions.
+
+| Block | Criteria Name          | Operator        | Value(s)                                 |
+|-------|-----------------------|-----------------|-------------------------------------------|
+| 1     | DeployCrowdStrikeWindowsSensor          | Contains any of | `Windows Workstation`, `Windows Workstation and Server` |
+| 1     | ExcludeCrowdStrikeInstallSite | Equal           | `False`                                     |
+| 1     | ExcludeCrowdStrikeInstallDevice | Equal           | `False`                                     |
+| 1     | Installed Software Name | Does Not Contain any of | `CrowdStrike Windows Sensor` |
+| 1     | OS Type                | Equal           | `Windows`                                   |
+| 1     | Endpoint Type          | Not Equal       | `Server`                                    |
+| 2     | DeployCrowdStrikeWindowsSensor          | Contains any of | `Windows Server`, `Windows Workstation and Server` |
+| 2     | ExcludeCrowdStrikeInstallSite | Equal           | `False`                                     |
+| 2     | ExcludeCrowdStrikeInstallDevice | Equal           | `False`                                     |
+| 2     | Installed Software Name | Does Not Contain any of | `CrowdStrike Windows Sensor` |
+| 2     | OS Type                | Equal           | `Windows`                                   |
+| 2     | Endpoint Type          | Equal       | `Server`                                    |
+
+- **Block 1:** Targets Windows Workstations (not servers)
+- **Block 2:** Targets Windows Servers
+
+**Logic:**  
+A machine matches the group if it meets ALL criteria in Block 1 OR ALL criteria in Block 2.
+
+![Image2](../../../static/img/docs/406c6d18-a948-45f6-897b-b1d0174e21de/image2.webp)
+
+## Completed Group
+
+![Image3](../../../static/img/docs/406c6d18-a948-45f6-897b-b1d0174e21de/image3.webp)

docs/cwrmm/monitors/crowdstrike-windows-sensor-deployment.md

@@ -0,0 +1,72 @@
+---
+id: 'ce1b87d4-a1d4-4f37-a03d-3b08c4565086'
+slug: /ce1b87d4-a1d4-4f37-a03d-3b08c4565086
+title: 'CrowdStrike Windows Sensor Deployment'
+title_meta: 'CrowdStrike Windows Sensor Deployment'
+keywords: ['crowdstrike', 'crowdstrike-windows-sensor', 'deploy-crowdstrike', 'windows-sensor', 'exclusion']
+description: 'Executes task to install CrowdStrike Windows Sensor on machines where deployment is enabled, but the application is not installed.'
+tags: ['application', 'installation', 'security', 'antivirus']
+draft: false
+unlisted: false
+---
+
+## Summary
+
+Executes [task](/docs/7eb5860d-08e2-41cb-b22b-48505618f1ae) to install CrowdStrike Windows Sensor on machines where deployment is enabled, but the application is not installed.
+
+## Dependencies
+
+- [DeployCrowdStrikeWindowsSensor](/docs/ffe13fcc-700f-41ea-9fdf-20ea4d253326)
+- [ExcludeCrowdStrikeInstallDevice](/docs/cde64225-1c67-4483-9c39-580b315dd30a)
+- [ExcludeCrowdStrikeInstallSite](/docs/8d9498e0-4392-471e-93da-b546e0934b89)
+- [CrowdStrikeDownloadUrl](/docs/ae84e56d-df98-42da-b293-7412c01d7db7)
+- [CrowdStrikeCustomerId](/docs/28f5fdfd-c11e-4643-ae07-62d6f7007805)
+- [CrowdStrike Windows Sensor Deployment](/docs/406c6d18-a948-45f6-897b-b1d0174e21de)
+- [Install CrowdStrike Windows Sensor](/docs/7eb5860d-08e2-41cb-b22b-48505618f1ae)
+- [Solution: Deploy CrowdStrike Windows Sensor](/docs/dec6391a-c159-4b45-8c3a-9df4d88dd1c5)
+
+## Monitor Setup Location
+
+**Monitors Path:** `ENDPOINTS` ➞ `Alerts` ➞ `Monitors`  
+
+## Monitor Summary
+
+- **Name:** `CrowdStrike Windows Sensor Deployment`  
+- **Description:** `Executes task to install CrowdStrike Windows Sensor on machines where deployment is enabled, but the application is not installed.`  
+- **Type:** `Application`  
+- **Severity:** `Others`  
+- **Family:** `Antivirus`
+
+![Image1](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image1.webp)
+
+## Targeted Resources
+
+- **Target Type:**  `Device Groups`  
+- **Group Name:** `CrowdStrike Windows Sensor Deployment`
+
+![Image2](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image2.webp)
+
+## Conditions
+
+- **Application Status:** `Not Installed`  
+- **Application Name:** `Contains`  
+- **Enter Value:** `CrowdStrike Windows Sensor`
+- **Add Automation:**  `Install CrowdStrike Windows Sensor`
+
+![Image3](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image3.webp)
+
+## Ticket Resolution
+
+**Automatically Resolve:** `Disabled`
+
+![Image4](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image4.webp)
+
+## Monitor Output
+
+**Output:** `Do not Generate Ticket`
+
+![Image5](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image5.webp)
+
+## Completed Monitor
+
+![Image6](../../../static/img/docs/ce1b87d4-a1d4-4f37-a03d-3b08c4565086/image6.webp)