CrowdStrike Issue Resolution | What You Need to Know

Описание: Urgent Update: CrowdStrike Issue Resolution

Hello everyone, welcome back to the channel. Today, we have an important update regarding a recent issue affecting CrowdStrike users on Windows hosts.

Overview:
Earlier today, CrowdStrike identified a defect in a single content update for Windows hosts. This was not a cyberattack, and Mac and Linux hosts are not impacted. The issue has been identified, isolated, and a fix has been deployed.

Current Status and Support:
CrowdStrike is working closely with all impacted customers to ensure their systems are back up and running. For the latest updates, please visit their support portal and communicate through official channels.

Apology and Assurance:
We understand the gravity of the situation and deeply apologize for any inconvenience and disruption this may have caused. CrowdStrike assures us that their Falcon platform systems are operating normally and that this issue does not affect the protection provided by the Falcon Sensor if your systems are operating as expected.

Technical Details and Action Steps:
Here's a summary of what happened and the steps you can take to address the issue:

Symptoms:
Some Windows hosts experienced crashes or blue screen errors related to the Falcon Sensor.
Windows 7/2008 R2, Mac, and Linux hosts are not impacted.
The problematic channel file has been reverted. The safe version is timestamped at 0527 UTC or later.

Workaround Steps for Individual Hosts:
1. Reboot the host to download the reverted channel file.
2. If the host crashes again, boot into Safe Mode or the Windows Recovery Environment.
3. Navigate to the %WINDIR%\System32\drivers\CrowdStrike directory.
4. Locate the file matching 'C-00000291*.sys' and delete it.
5. Boot the host normally.

Workaround Steps for Virtual Environments:
For public cloud or similar environments, including virtual servers:
1. Detach the operating system disk volume from the impacted virtual server, create a snapshot or backup, attach it to a new virtual server, delete the problematic file from the CrowdStrike directory, and reattach the fixed volume to the impacted server.
2. Roll back to a snapshot taken before 0409 UTC.

For detailed instructions, please refer to the latest CrowdStrike Tech Alert.

Additional Resources:
For further assistance, check CrowdStrike's support portal for continuous updates and detailed guidance. Always ensure you are communicating with official CrowdStrike representatives.

Thank you for your understanding and patience. Stay tuned for more updates, and don't forget to subscribe for the latest news and tech tips. Stay secure and take care!

#CrowdStrike #CyberSecurity #TechNews #WindowsHosts #FalconSensor #TechUpdate #UrgentUpdate #Security


Don't forget to like, comment, and subscribe for more updates and tech tips!