How to Grant Full Disk Access for the CrowdStrike Falcon Sensor

Full Disk Access is required to protect all data on macOS Mojave (10.14.5) and later. This article describes how to enable full disk access for the CrowdStrike Falcon Sensor.

Affected Products:

• CrowdStrike Falcon Sensor

Affected Operating Systems:

• macOS Mojave (10.14.5) and Later

On September 24, 2018, Apple released macOS Mojave (10.14). This operating system update includes a new security feature that is called Full Disk Access. Full Disk Access blocks third-party applications from accessing certain file paths and may prevent the CrowdStrike Falcon Sensor from fully protecting a device.

1. On the desktop menu bar, click the Apple icon and then select System Preferences.
   
2. In the System Preferences menu, double-click Security & Privacy.
   
3. On the Privacy tab, select Full Disk Access.
   
4. If needed, click the padlock icon and provide credentials for a local administrator account (not an Apple ID) to allow changes.
   
5. Click the + button to the right of the highlighted Full Disk Access.
   
6. Press CMD + SHIFT + G, type /Library/CS/falcond, and then click Go.
7. Select falcond and then click Open.
   
8. Exit the Security & Privacy preferences.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.