QuestionQ178

VerifiedHost Management and Setup

On a Windows host, which command is best for determining whether the sensor is currently running?

Explanation

The CrowdStrike Falcon sensor is registered on Windows as the csagent service. Running sc query csagent queries the Service Control Manager and returns its current state, including RUNNING when the sensor service is active.

Community Discussion

No comments yet. Be the first to start the discussion!