Chaos With Crowdstrike And Microsoft Windows - How to Fix!

Early on 19th July 2024, many Windows based devices have been reported to have crashed with a "Blue Screen of Death".

The device will then continually reboot. The error message may refer to "csagent.sys". It is known to be impacting Windows devices running the Crowdstrike Falcon sensor. Crowdstrike Falcon is a security product aimed at protecting endpoints from security threats.

Cause:
It is believed that a bug in a recently released update is causing machines running the Crowdstrike Falcon agent to crash. The bug is then preventing the device from restarting successfully.
This incident is not currently believed to be as the result of a cyber attack, and there is at this time no evidence of any malicious intent.

Resolution:
Devices which are still online should receive a patched update to prevent the crash. For devices which are currently in an unrecoverable state, Crowdstrike have issue a resolution which requires physical access to each machine as a workaround:

Workaround steps below


CrowdStrike Engineering has identified a content deployment related to this issue and reverted those changes.

Workaround Steps:

Boot Windows into Safe Mode or the Windows Recovery Environment
Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
Locate the file matching “C-00000291*.sys”, and delete it.
Boot the host normally.

🔔Unlock the full potential of Microsoft technologies! Subscribe for exclusive demos, tips, and guides to take your skills to the next level. Your tech education starts here!
[ Ссылка ]

🔗 Stay Connected With Me.

👉Linkedin: [ Ссылка ]

=============================

✅ Recommended Playlists

👉 Microsoft 365
[ Ссылка ]

👉 Microsoft Entra / Azure AD
[ Ссылка ]

✅ Other Videos You Might Be Interested In Watching:

👉 SC 400 Exam Prep: Demystifying Trainable Classifiers in Microsoft Purview!
[ Ссылка ]

👉 🔒 **Microsoft Security Copilot: Everything You Need to Know!** 🔒
[ Ссылка ]

👉 Microsoft Entra Verified ID: A Comprehensive Guide!
[ Ссылка ]

👉 SC-400 Exam Success: Deep Dive into Document Fingerprinting!
[ Ссылка ]

👉 Mastering Productivity with Microsoft 365 Copilot - with Natalia Denisiuc!
[ Ссылка ]

=============================

✅ About Peter Rising MVP.

Welcome to my YouTube channel. My name is Peter Rising. I am a Microsoft MVP and have worked with Microsoft technologies for over 30 years.

This channel aims to share my knowledge with the community. The content will be mostly technical, including demos, deep dives, tips and tricks, and exam guides. I want to help people learn Microsoft 365 and Azure Active Directory from the beginning or improve their existing skills.

Please hit the subscribe button and the notifications bell, and if you like my videos, please hit that like button and leave a comment.

Thank you so much for your support.

🔔Elevate your Microsoft skills with Peter Rising! Subscribe for expert demos, deep dives, and essential Microsoft 365 and Azure tips. Start mastering tech today!
[ Ссылка ]

=================================

#crowdstrike #microsoftwindows #microsoft

⚠️Disclaimer: I do not accept any liability for any loss or damage incurred from you acting or not acting as a result of watching any of my publications. You acknowledge that you use the information I provide at your own risk. Do your research.

Copyright Notice: This video and my YouTube channel contain dialogue, music, and images that are the property of Peter Rising MVP. You are authorised to share the video link and channel and embed this video in your website or others as long as a link back to my YouTube channel is provided.

© Peter Rising MVP

свернуть