09-22-2020 08:45 PM - edited 10-07-2020 06:27 AM
One option would be to request the XDR Cleaner Tool from support and use:
REM to disable agent protect and remove agent with XDRAgentcleaner
@echo off
echo Password123|"%ProgramFiles%\Palo Alto Networks\Traps\cytool.exe" protect disable
REM use xdrcleaner note the password is in clear txt
xdragentcleaner.exe --silient --password Password123 --log c:\remove.log