Windows Agent Uninstall

[adem_netsys]

Hi guys,

Can i remove installed windows agents via siem, i have no connection to windows machines. Is there a command or script for this?

[adem_netsys]

Anyone knows?

[FSM_FTNT]

There is no way to remotely uninstall the agent from the FortiSIEM GUI.

I'll check for CLI based methods and revert back.

[FSM_FTNT]

Hi,

As mentioned, there is no remote way to uninstall from the GUI.

We have updated the agent documentation to provide the CLI options to uninstall the agent

https://docs.fortinet.com/document/fortisiem/7.1.1/windows-agent-7-1-x-installation-guide/547950/for...

You may be able to invoke the msiexec command remotely on the target system using PowerShell.

[adem_netsys]

Hi,

As I understand it, we need to connect to the win host machine.