topic Re: XdrAgentCleaner commands? in Cortex XDR Discussions

XdrAgentCleaner commands?

M_Brown — Wed, 02 Feb 2022 00:06:24 GMT

I wrote a script a long time ago that used the -ep (encrypted password) parameter using the XdrAgentCleaner. My password has been updated and I need to create a new encrypted password and I can't for the life of me remember for find the parameter used for creating an encrypted password. Can anyone point me in the right direction? Thank you!

Re: XdrAgentCleaner commands?

WSeldenIII — Wed, 02 Feb 2022 17:07:47 GMT

Hi @M_Brown

As a best practice you will first want to ensure that you are running the latest agent cleaner version (E.g. 7.6.1). Please raise a support ticket to receive the latest version accordingly.

If a third-party tool needs to be used to run the install silently, then one can encrypt the uninstall password. This generates a password string that can be used with additional parameters. This method avoids using plaintext passwords. Listed below are some of the available parameters:

XdrAgentCleaner.exe --encrypt <password>
XdrAgentCleaner.exe [--silent] [--password <password> | --encrypted-password <password> | --advertised] [--log <logpath>]
XdrAgentCleaner.exe -? | -h | --help

Options:
-? -h --help Show this screen.
-e --encrypt Encrypt password.
-s --silent Silent mode. No UI will be displayed while running. --password or --encrypted-password is required
if self-protection was enabled (including am-ppl).

Please coordinate with support if you require any additional troubleshooting.

Re: XdrAgentCleaner commands?

M_Brown — Wed, 02 Feb 2022 17:14:57 GMT

Thank you for this! I couldn't for the life of me get the help parameter to work. I finally found the parameters using Process Explorers String tab right before you answered. Hopefully your answer helps others :).