06-11-2026 05:25 AM
Hi @Philippe.s ,
Because the XdrAgentCleaner utility is a restricted administrative tool designed to bypass active endpoint security controls, it cannot be shared or distributed publicly on the community forums.
To obtain the cleaner tool, please open a support case through the Palo Alto Networks Customer Support Portal. Even if you have lost access to the specific XDR management tenant, the support team can verify your corporate domain credentials and securely provide the correct version of the utility to you directly.
If your organization no longer has an active support contract or portal access, you will need to reach out to a local Palo Alto Networks partner or your original account representative to see if they can assist you with an administrative exception ticket. Otherwise, the standard fallback for a completely orphaned endpoint is to re-image the workstation.
Kind regards,
