Skip to content

Commit 9ef6c9f

Browse files
nickmcdonnickmcdon
committed
Automated Push
1 parent d1924ff commit 9ef6c9f

File tree

3 files changed

+52
-395
lines changed

3 files changed

+52
-395
lines changed

‎custom-apps/crowdstrike/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ Resources to aid in the deployment of the [CrowdStrike deployment KB](https://su
88

99
Item | Status
1010
:-- | :--:
11-
Last updated | 2024.10.14
12-
Last version tested | 7.18.18701.0
11+
Last updated | 2025.02.14
12+
Last version tested | 7.21.19203
1313
Settings mobileconfig profiles | `pass`
1414
AE script | `pass`
1515
pre-install script | NA

‎custom-apps/crowdstrike/crowdstrike_settings_macOS15.mobileconfig

+50-196
Original file line numberDiff line numberDiff line change
@@ -1,196 +1,50 @@
1-
<?xml version="1.0" encoding="UTF-8"?>
2-
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
3-
<plist version="1.0">
4-
<dict>
5-
<key>PayloadContent</key>
6-
<array>
7-
<dict>
8-
<key>FilterBrowsers</key>
9-
<false/>
10-
<key>FilterDataProviderBundleIdentifier</key>
11-
<string>com.crowdstrike.falcon.Agent</string>
12-
<key>FilterDataProviderDesignatedRequirement</key>
13-
<string>identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "X9E956P446"</string>
14-
<key>FilterGrade</key>
15-
<string>inspector</string>
16-
<key>FilterPacketProviderBundleIdentifier</key>
17-
<string>com.crowdstrike.falcon.Agent</string>
18-
<key>FilterPacketProviderDesignatedRequirement</key>
19-
<string>identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "X9E956P446"</string>
20-
<key>FilterPackets</key>
21-
<false/>
22-
<key>FilterSockets</key>
23-
<true/>
24-
<key>FilterType</key>
25-
<string>Plugin</string>
26-
<key>Organization</key>
27-
<string>CrowdStrike Inc.</string>
28-
<key>PayloadDisplayName</key>
29-
<string>Web Content Filter</string>
30-
<key>PayloadIdentifier</key>
31-
<string>io.kandji.crowdstrike.2C5CBFD0-7CFE-41CB-95BC-A681F4D293B8</string>
32-
<key>PayloadType</key>
33-
<string>com.apple.webcontent-filter</string>
34-
<key>PayloadUUID</key>
35-
<string>2C5CBFD0-7CFE-41CB-95BC-A681F4D293B8</string>
36-
<key>PayloadVersion</key>
37-
<integer>1</integer>
38-
<key>PluginBundleID</key>
39-
<string>com.crowdstrike.falcon.App</string>
40-
<key>UserDefinedName</key>
41-
<string>Falcon</string>
42-
</dict>
43-
<dict>
44-
<key>PayloadDescription</key>
45-
<string>Configures Privacy Preferences Policy Control settings</string>
46-
<key>PayloadDisplayName</key>
47-
<string>Privacy Preferences</string>
48-
<key>PayloadIdentifier</key>
49-
<string>com.apple.TCC.configuration-profile-policy.9A10BE5D-5E46-4C22-89C9-20597A04B616</string>
50-
<key>PayloadOrganization</key>
51-
<string>CrowdStrike Inc.</string>
52-
<key>PayloadType</key>
53-
<string>com.apple.TCC.configuration-profile-policy</string>
54-
<key>PayloadUUID</key>
55-
<string>9A10BE5D-5E46-4C22-89C9-20597A04B616</string>
56-
<key>PayloadVersion</key>
57-
<integer>1</integer>
58-
<key>Services</key>
59-
<dict>
60-
<key>SystemPolicyAllFiles</key>
61-
<array>
62-
<dict>
63-
<key>Allowed</key>
64-
<true/>
65-
<key>CodeRequirement</key>
66-
<string>identifier "com.crowdstrike.falcon.Agent" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = X9E956P446</string>
67-
<key>Comment</key>
68-
<string>
69-
</string>
70-
<key>Identifier</key>
71-
<string>com.crowdstrike.falcon.Agent</string>
72-
<key>IdentifierType</key>
73-
<string>bundleID</string>
74-
<key>StaticCode</key>
75-
<false/>
76-
</dict>
77-
<dict>
78-
<key>Allowed</key>
79-
<true/>
80-
<key>CodeRequirement</key>
81-
<string>identifier "com.crowdstrike.falcon.App" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = X9E956P446</string>
82-
<key>Comment</key>
83-
<string>
84-
</string>
85-
<key>Identifier</key>
86-
<string>com.crowdstrike.falcon.App</string>
87-
<key>IdentifierType</key>
88-
<string>bundleID</string>
89-
<key>StaticCode</key>
90-
<false/>
91-
</dict>
92-
</array>
93-
</dict>
94-
</dict>
95-
<dict>
96-
<key>AllowUserOverrides</key>
97-
<true/>
98-
<key>AllowedSystemExtensionTypes</key>
99-
<dict>
100-
<key>X9E956P446</key>
101-
<array>
102-
<string>EndpointSecurityExtension</string>
103-
<string>NetworkExtension</string>
104-
</array>
105-
</dict>
106-
<key>AllowedSystemExtensions</key>
107-
<dict>
108-
<key>X9E956P446</key>
109-
<array>
110-
<string>com.crowdstrike.falcon.Agent</string>
111-
</array>
112-
</dict>
113-
<key>NonRemovableFromUISystemExtensions</key>
114-
<dict>
115-
<key>X9E956P446</key>
116-
<array>
117-
<string>com.crowdstrike.falcon.Agent</string>
118-
</array>
119-
</dict>
120-
<key>PayloadDescription</key>
121-
<string>Configures System Extensions Policy settings</string>
122-
<key>PayloadDisplayName</key>
123-
<string>System Extensions</string>
124-
<key>PayloadIdentifier</key>
125-
<string>com.apple.system-extension-policy.20258B06-5866-4424-8893-A3AF1AFAAEDC</string>
126-
<key>PayloadOrganization</key>
127-
<string>CrowdStrike Inc.</string>
128-
<key>PayloadType</key>
129-
<string>com.apple.system-extension-policy</string>
130-
<key>PayloadUUID</key>
131-
<string>20258B06-5866-4424-8893-A3AF1AFAAEDC</string>
132-
<key>PayloadVersion</key>
133-
<integer>1</integer>
134-
</dict>
135-
<dict>
136-
<key>NotificationSettings</key>
137-
<array>
138-
<dict>
139-
<key>BundleIdentifier</key>
140-
<string>com.crowdstrike.falcon.UserAgent</string>
141-
<key>NotificationsEnabled</key>
142-
<true/>
143-
</dict>
144-
</array>
145-
<key>PayloadDisplayName</key>
146-
<string>Notifications</string>
147-
<key>PayloadIdentifier</key>
148-
<string>61090B22-3DCD-435E-ABB2-BE997B3CB78D</string>
149-
<key>PayloadType</key>
150-
<string>com.apple.notificationsettings</string>
151-
<key>PayloadUUID</key>
152-
<string>61090B22-3DCD-435E-ABB2-BE997B3CB78D</string>
153-
<key>PayloadVersion</key>
154-
<integer>1</integer>
155-
</dict>
156-
<dict>
157-
<key>AllowedTeamIdentifiers</key>
158-
<array>
159-
<string>X9E956P446</string>
160-
</array>
161-
<key>PayloadDescription</key>
162-
<string>Controls the system extension loading/unloading</string>
163-
<key>PayloadDisplayName</key>
164-
<string>App System Extension Control</string>
165-
<key>PayloadIdentifier</key>
166-
<string>com.apple.system-extensions.admin.E45B5986-74A6-4B6A-A4CA-E179516A7F52</string>
167-
<key>PayloadOrganization</key>
168-
<string>CrowdStrike Inc.</string>
169-
<key>PayloadType</key>
170-
<string>com.apple.system-extensions.admin</string>
171-
<key>PayloadUUID</key>
172-
<string>E45B5986-74A6-4B6A-A4CA-E179516A7F52</string>
173-
</dict>
174-
</array>
175-
<key>PayloadDescription</key>
176-
<string>Network Content Filter, System Extensions, and Privacy Preferences</string>
177-
<key>PayloadDisplayName</key>
178-
<string>CrowdStrike Settings</string>
179-
<key>PayloadEnabled</key>
180-
<true/>
181-
<key>PayloadIdentifier</key>
182-
<string>io.kandji.profile.custom.9e5ce1bc-8ddb-4d1f-9567-5647e60cbb0d</string>
183-
<key>PayloadOrganization</key>
184-
<string>Kandji, Inc.</string>
185-
<key>PayloadRemovalDisallowed</key>
186-
<false/>
187-
<key>PayloadScope</key>
188-
<string>System</string>
189-
<key>PayloadType</key>
190-
<string>Configuration</string>
191-
<key>PayloadUUID</key>
192-
<string>9e5ce1bc-8ddb-4d1f-9567-5647e60cbb0d</string>
193-
<key>PayloadVersion</key>
194-
<integer>1</integer>
195-
</dict>
196-
</plist>
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
3+
<plist version="1.0">
4+
<dict>
5+
<key>PayloadContent</key>
6+
<array>
7+
<dict>
8+
<key>NonRemovableFromUISystemExtensions</key>
9+
<dict>
10+
<key>X9E956P446</key>
11+
<array>
12+
<string>com.crowdstrike.falcon.Agent</string>
13+
</array>
14+
</dict>
15+
<key>PayloadDescription</key>
16+
<string>Configures System Extensions Policy settings</string>
17+
<key>PayloadDisplayName</key>
18+
<string>System Extensions</string>
19+
<key>PayloadIdentifier</key>
20+
<string>com.apple.system-extension-policy.20258B06-5866-4424-8893-A3AF1AFAAEDC</string>
21+
<key>PayloadOrganization</key>
22+
<string>CrowdStrike Inc.</string>
23+
<key>PayloadType</key>
24+
<string>com.apple.system-extension-policy</string>
25+
<key>PayloadUUID</key>
26+
<string>20258B06-5866-4424-8893-A3AF1AFAAEDC</string>
27+
<key>PayloadVersion</key>
28+
<integer>1</integer>
29+
</dict>
30+
</array>
31+
<key>PayloadDescription</key>
32+
<string>System Extensions - Non-Removable from UI</string>
33+
<key>PayloadDisplayName</key>
34+
<string>CrowdStrike Settings</string>
35+
<key>PayloadEnabled</key>
36+
<true/>
37+
<key>PayloadIdentifier</key>
38+
<string>io.kandji.profile.custom.04499e0f-4334-46ba-b24a-d9cd56548f75</string>
39+
<key>PayloadOrganization</key>
40+
<string>Kandji, Inc.</string>
41+
<key>PayloadScope</key>
42+
<string>System</string>
43+
<key>PayloadType</key>
44+
<string>Configuration</string>
45+
<key>PayloadUUID</key>
46+
<string>04499e0f-4334-46ba-b24a-d9cd56548f75</string>
47+
<key>PayloadVersion</key>
48+
<integer>1</integer>
49+
</dict>
50+
</plist>

0 commit comments

Comments
 (0)