Uninstall an endpoint
Here are the uninstall instructions for Windows, Linux and MAC systems:
Windows
There are two uninstall methods:
From the CheckLight console:
To uninstall ThreatResponder agent from the CheckLight console:
- Go to the Endpoints tab and find your endpoint.
- Click on the Actions button and select Uninstall.
- Confirm uninstall
From Control Panel:
T0 uninstall ThreatResponder from Control Panel:
- On your endpoint, go to Control Panel (All Control Panel Items\Programs and Features), select ThreatResponder and click on Uninstall
- If Tamper Protection is enabled (see Tamper Protection article for more information) you will be prompted for the uninstall password. You can find the password in the Endpoint Details, under the Tamper Protection section.
Add the uninstall password in the ThreatResponder Uninstaller window and click on Uninstall.
Linux
To uninstall ThreatResponder from Linux:
DEBIAN
From your terminal, run the following command:
sudo dpkg --remove threatresponder
REDHAT
From your terminal, run the following command:
sudo yum remove ThreatResponder
OR
sudo dnf remove ThreatResponder
Mac
To uninstall ThreatResponder from a Mac system, run the following command from the terminal:
sudo /Applications/NetSecurity/ThreatResponder/uninstall.sh