SentinelOne Cleaner Action.docx

Latest SentinelOne agent version 22.2+ comes with SentinelOne cleaner property so you just need to download latest version and run following command in cmd as admin.\ SentinelOne Cleaner Action using the agent SentinelOne Agent Version 22.2+\  \ 1.    If you have the passphrase of the machine use th...

Latest SentinelOne agent version 22.2+ comes with SentinelOne cleaner property so you just need to download latest version and run following command in cmd as admin.\ SentinelOne Cleaner Action using the agent SentinelOne Agent Version 22.2+\  \ 1.    If you have the passphrase of the machine use the steps below\ 1.    Download the SentinelOne Installer 22.2+ on the machine\ 2.    Open the command Prompt with Elevated Access\ 3.    Change the directory of the command prompt to the SentinelOne Installer folder\ 4.    Execute the following:\ SentinelOneInstaller.exe -c -k \"PASSPHRASE\" -t \"SITETOKEN\"\ 5.    Reboot the machine into normal mode for a fresh install.\  \ 2.    If you don\'t have the passphrase of the machine use the steps below\ 1.    Download the SentinelOne Installer 22.2+ on the machine.\ 2.    Boot the machine into safe mode.\ 3.    Open the command Prompt with Elevated Access\ 4.    Change the directory of the command prompt to the SentinelOne Installer folder\ 5.    Execute the following:\ SentinelOneInstaller.exe -c -t \"SITETOKEN\"\ 6.    Boot the machine into normal mode for a fresh install.\ \ \*Note: Running SentinelOne cleaner action in safe mode gives better result and if you don\'t know site token or passphrase you use numerical one (1) instead.\   After the endpoints S1 is successful uninstalled you can follow this steps to reinstall the S1 agent.\ \ 1. Open the CommandPrompt as admin.\ 2. Move the prompt to SentinelOne download folder.\ 3. Sentineloneinstaller.exe \--dont\_fail\_on\_config\_preserving\_failures -a=\"/NORESTART\" -t SITETOKEN\ \ Note\* Kindly replace the Sentineloneinstaller.exe name with the actual S1 installer downloaded and also replace SITETOKEN with actual S1 site/group token.