CrowdStrike · carlosmmatos · Dec 21, 2024 · Dec 21, 2024
diff --git a/bash/containers/falcon-container-sensor-pull/README.md b/bash/containers/falcon-container-sensor-pull/README.md
@@ -71,7 +71,7 @@ The script supports auto-discovery of the Falcon cloud region. If the cloud regi
 
 ```terminal
 Usage: falcon-container-sensor-pull.sh [options]
-Version: 1.7.1
+Version: 1.7.2
 
 Required Flags:
     -u, --client-id <FALCON_CLIENT_ID>             Falcon API OAUTH Client ID

diff --git a/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh b/bash/containers/falcon-container-sensor-pull/falcon-container-sensor-pull.sh
@@ -6,7 +6,7 @@ Description: Bash script to copy Falcon DaemonSet Sensor, Container Sensor, Kube
 
 set -e
 
-VERSION="1.7.1"
+VERSION="1.7.2"
 
 usage() {
     echo "Usage: $0 [options]

diff --git a/bash/install/README.md b/bash/install/README.md
@@ -43,7 +43,7 @@ Ensure the following API scopes are enabled:
   > :warning:
   > It is recommended to use Host Retention Policies in the Falcon console instead.
 
-  
+
 
 ## Configuration
 
@@ -99,7 +99,7 @@ The installer is AWS SSM aware, if `FALCON_CLIENT_ID` and `FALCON_CLIENT_SECRET`
 Usage: falcon-linux-install.sh [-h|--help]
 
 Installs and configures the CrowdStrike Falcon Sensor for Linux.
-Version: 1.7.1
+Version: 1.7.2
 
 This script recognizes the following environmental variables:
 
@@ -196,15 +196,15 @@ To download and run the script directly:
 ```bash
 export FALCON_CLIENT_ID="XXXXXXX"
 export FALCON_CLIENT_SECRET="YYYYYYYYY"
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh | bash
 ```
 
 Alternatively, download the script and run it locally:
 
 ```bash
 export FALCON_CLIENT_ID="XXXXXXX"
 export FALCON_CLIENT_SECRET="YYYYYYYYY"
-curl -O https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh
+curl -O https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh
 bash falcon-linux-install.sh
 ```
 
@@ -221,7 +221,7 @@ FALCON_CLIENT_ID="XXXXXXX" FALCON_CLIENT_SECRET="YYYYYYYYY" bash falcon-linux-in
 ```bash
 export FALCON_CLIENT_ID="XXXXXXX"
 export FALCON_CLIENT_SECRET="YYYYYYYYY"
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh | bash
 ```
 
 #### Install the Falcon Sensor with the previous version (n-1)
@@ -230,7 +230,7 @@ curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash
 export FALCON_CLIENT_ID="XXXXXXX"
 export FALCON_CLIENT_SECRET="YYYYYYYYY"
 export FALCON_SENSOR_VERSION_DECREMENT=1
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh | bash
 ```
 
 #### Create a Golden Image
@@ -239,7 +239,7 @@ curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash
 export FALCON_CLIENT_ID="XXXXXXX"
 export FALCON_CLIENT_SECRET="YYYYYYYYY"
 export PREP_GOLDEN_IMAGE="true"
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh | bash
 ```
 
 ## Uninstall Script
@@ -248,7 +248,7 @@ curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash
 Usage: falcon-linux-uninstall.sh [-h|--help]
 
 Uninstalls the CrowdStrike Falcon Sensor from Linux operating systems.
-Version: 1.7.1
+Version: 1.7.2
 
 The script recognizes the following environmental variables:
 
@@ -296,13 +296,13 @@ This script recognizes the following argument:
 To download and run the script directly
 
 ```bash
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-uninstall.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-uninstall.sh | bash
 ```
 
 Alternatively, download the script and run it locally
 
 ```bash
-curl -O https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-uninstall.sh
+curl -O https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-uninstall.sh
 bash falcon-linux-uninstall.sh
 ```
 
@@ -311,7 +311,7 @@ bash falcon-linux-uninstall.sh
 #### Uninstall the Falcon Sensor
 
 ```bash
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-uninstall.sh | bash
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-uninstall.sh | bash
 ```
 
 ## Troubleshooting
@@ -325,5 +325,5 @@ bash -x falcon-linux-install.sh
 or
 
 ```bash
-curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/bash/install/falcon-linux-install.sh | bash -x
+curl -L https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/bash/install/falcon-linux-install.sh | bash -x
 ```
diff --git a/bash/install/falcon-linux-install.sh b/bash/install/falcon-linux-install.sh
@@ -98,7 +98,7 @@ This script recognizes the following argument:
 EOF
 }
 
-VERSION="1.7.1"
+VERSION="1.7.2"
 
 # If -h or --help is passed, print the usage and exit
 if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then

diff --git a/bash/install/falcon-linux-uninstall.sh b/bash/install/falcon-linux-uninstall.sh
@@ -51,7 +51,7 @@ This script recognizes the following argument:
 EOF
 }
 
-VERSION="1.7.1"
+VERSION="1.7.2"
 
 # If -h or --help is passed, print the usage and exit
 if [ "$1" = "-h" ] || [ "$1" = "--help" ]; then

diff --git a/powershell/install/README.md b/powershell/install/README.md
@@ -113,7 +113,7 @@ Enable verbose logging
 To download the script:
 
 ```pwsh
-Invoke-WebRequest -Uri https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/powershell/install/falcon_windows_install.ps1 -OutFile falcon_windows_install.ps1
+Invoke-WebRequest -Uri https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/powershell/install/falcon_windows_install.ps1 -OutFile falcon_windows_install.ps1
 ```
 
 Basic example that will install the sensor with the provided provisioning token
@@ -175,7 +175,7 @@ Enable verbose logging
 To download the script:
 
 ```pwsh
-Invoke-WebRequest -Uri https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/powershell/install/falcon_windows_uninstall.ps1 -OutFile falcon_windows_uninstall.ps1
+Invoke-WebRequest -Uri https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/powershell/install/falcon_windows_uninstall.ps1 -OutFile falcon_windows_uninstall.ps1
 ```
 
 Basic example that will uninstall the sensor with the provided maintenance token

diff --git a/powershell/install/falcon_windows_install.ps1 b/powershell/install/falcon_windows_install.ps1
@@ -192,7 +192,7 @@ begin {
 
     function Invoke-FalconAuth([hashtable] $WebRequestParams, [string] $BaseUrl, [hashtable] $Body, [string] $FalconCloud) {
         $Headers = @{'Accept' = 'application/json'; 'Content-Type' = 'application/x-www-form-urlencoded'; 'charset' = 'utf-8' }
-        $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.1')
+        $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.2')
         if ($FalconAccessToken) {
             $Headers.Add('Authorization', "bearer $($FalconAccessToken)")
         }
@@ -395,7 +395,7 @@ process {
             throw $message
         }
     }
-    
+
     if (!$GetAccessToken) {
         if (([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
                 [Security.Principal.WindowsBuiltInRole]::Administrator) -eq $false) {

diff --git a/powershell/install/falcon_windows_uninstall.ps1 b/powershell/install/falcon_windows_uninstall.ps1
@@ -177,7 +177,7 @@ begin {
 
     function Invoke-FalconAuth([hashtable] $WebRequestParams, [string] $BaseUrl, [hashtable] $Body, [string] $FalconCloud) {
         $Headers = @{'Accept' = 'application/json'; 'Content-Type' = 'application/x-www-form-urlencoded'; 'charset' = 'utf-8' }
-        $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.1')
+        $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.2')
         if ($FalconAccessToken) {
             $Headers.Add('Authorization', "bearer $($FalconAccessToken)")
         }

diff --git a/powershell/migrate/README.md b/powershell/migrate/README.md
@@ -101,7 +101,7 @@ Enable verbose logging
 To download the script, run the following command:
 
 ```pwsh
-Invoke-WebRequest -Uri "https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.1/powershell/migrate/falcon_windows_migrate.ps1" -OutFile "falcon_windows_migrate.ps1"
+Invoke-WebRequest -Uri "https://raw.githubusercontent.com/crowdstrike/falcon-scripts/v1.7.2/powershell/migrate/falcon_windows_migrate.ps1" -OutFile "falcon_windows_migrate.ps1"
 ```
 
 ### Example 1

diff --git a/powershell/migrate/falcon_windows_migrate.ps1 b/powershell/migrate/falcon_windows_migrate.ps1
@@ -985,7 +985,7 @@ function Get-FalconCloud ([string] $xCsRegion) {
 
 function Invoke-FalconAuth([hashtable] $WebRequestParams, [string] $BaseUrl, [hashtable] $Body, [string] $FalconCloud) {
     $Headers = @{'Accept' = 'application/json'; 'Content-Type' = 'application/x-www-form-urlencoded'; 'charset' = 'utf-8' }
-    $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.1')
+    $Headers.Add('User-Agent', 'crowdstrike-falcon-scripts/1.7.2')
     try {
         $response = Invoke-WebRequest @WebRequestParams -Uri "$($BaseUrl)/oauth2/token" -UseBasicParsing -Method 'POST' -Headers $Headers -Body $Body
         $content = ConvertFrom-Json -InputObject $response.Content