---
title: "Installing CrowdStrike Falcon agent in your Endpoint"
canonical: "https://docs.infoblox.com/space/DeploymentGuideTDCrowdstrikeEDR/1564147869/Installing%20CrowdStrike%20Falcon%20agent%20in%20your%20Endpoint"
format: markdown
---
### 1. **Download the Falcon Sensor Installer**

### Windows:

- Log in to [CrowdStrike Falcon Console](https://falcon.crowdstrike.com)
- Go to: **Support > Sensor Downloads**
- Download: `Windows Sensor Installer` (e.g., `WindowsSensor.exe`)

### macOS:

- Download: `Mac Sensor Installer` (`.pkg`)
- Select proper version depending on OS (Intel/Apple Silicon)

### Linux:

- Download the `.deb`, `.rpm`, or `.tar.gz` installer based on the distribution:
- `falcon-sensor_<version>.deb` for Ubuntu/Debian
- `falcon-sensor-<version>.x86_64.rpm` for RHEL/CentOS/Fedora
- `tar.gz` for custom installs

### 2. **Install the Falcon Sensor**

#### Windows

#### Command Line (Manual)

```
WindowsSensor.exe /install /quiet CID=<your_cid_here>
```

#### Verify Installation:

```
sc query csagent
```

or check Falcon UI under **Host Management**.

 

#### macOS

#### Install via Terminal:

```
sudo installer -pkg FalconSensorMacOS.pkg -target /
```

#### Set the CID:

```
sudo /Library/CS/falconctl -s --cid=<your_cid_here>
```

#### Enable full disk access & system extensions:

- Can be done via MDM (JAMF/Intune) or manually
- Approve System Extension: `com.crowdstrike.falcon.Agent`

#### Verify:

```
sudo /Library/CS/falconctl stats
```

 

#### Linux

#### Ubuntu/Debian:

```
sudo dpkg -i falcon-sensor_<version>.deb
```

```
sudo /opt/CrowdStrike/falconctl -s --cid=<your_cid_here>
```

```
sudo systemctl start falcon-sensor
```


#### RHEL/CentOS:

```
sudo rpm -i falcon-sensor-<version>.x86_64.rpm
```

```
sudo /opt/CrowdStrike/falconctl -s --cid=<your_cid_here>
```

```
sudo systemctl start falcon-sensor
```

#### Verify:

```
sudo /opt/CrowdStrike/falconctl stats
```

```
sudo systemctl status falcon-sensor
```

 

### 3. **Verify Registration**

In Falcon Console:

- Navigate to **Hosts > Host Management**
- Look for your endpoint by hostname
- Status should show as “Connected”

### Notes

- Sensor updates are managed by CrowdStrike — no manual update required.
- CID is static for your tenant.
- Sensors don’t scan files like traditional AV — they monitor behavior.