CrowdStrike/falcon-scripts

Running PowerShell Script On AWS Systems Manager

Closed this issue · 4 comments

Hello,

I am running the script on Systems Manager as a Run Command using the document AWS-RunPowerShellScript.

The Run Command completes successfully with the output:Script complete

The Instance does not appear in the CrowdStrike console and when I SSH into the instance and check the tasklist, it is not running.

I did these same steps with our linux instances and it was successful. Any help would be greatly appreciated.

ffalor commented

hey @JamesDavidson13 we have published distributor packages that can be used to deploy the falcon sensor with aws systems manager.

https://github.com/CrowdStrike/aws-ssm-distributor

There are a few options. Two require building your own package, but we recently released an official package that does not require building your own.

If you want to deploy the sensor to windows and linux instances via SSM this would be the approach that is community supported.

Hi @ffalor, thanks for the response!

Can I do this at the organization level or just per account?

ffalor commented

SSM associations are region specific, but you could create a cloudformation stackset to create the associations on multiple accounts and regions.

Closing the issue due to no activity. If you need to re-open it, please go ahead and provide additional information.