CrowdStrike Installation for Windows Check List

Services
These services must be installed and running:

1. LMHosts

Note: LMHosts might be disabled on your host if the TCP/IP NetBIOS Helper service is disabled.

2. Network Store Interface (NSI)

Windows Base Filtering Engine (BFE)

Windows Power Service (sometimes labeled Power)

On Windows Server 2016 and 2019, Windows Defender is enabled by default. To use Falcon’s Next-Gen
Antivirus quarantine setting, you must disable Windows Defender. You can use this Powershell
command to disable Defender:

Set-MpPreference -DisableRealtimeMonitoring $true

Network protocols
The Falcon sensor requires TLS 1.2 to communicate with the CrowdStrike cloud. Other protocols,
including SSL or earlier versions of TLS, are not supported.