Skip to content

Instantly share code, notes, and snippets.

@eat-sleep-code
Last active December 2, 2021 20:50
Show Gist options
  • Save eat-sleep-code/4f8aee7b3064aaeb6aef3ef0d7fa47d0 to your computer and use it in GitHub Desktop.
Save eat-sleep-code/4f8aee7b3064aaeb6aef3ef0d7fa47d0 to your computer and use it in GitHub Desktop.
Script to remove Sentinel One from macOS computers (works with Big Sur and Monterey)
sudo launchctl remove com.sentinelone.sentineld-helper
sudo launchctl remove com.sentinelone.sentineld-updater
sudo launchctl remove com.sentinelone.sentineld
sudo launchctl remove com.sentinelone.sentineld-guard
sudo killall SentinelAgent
sudo rm -rf /Library/Extensions/Sentinel.kext
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/Info.plist
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/MacOS
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/MacOS/Sentinel
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/Resources
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/Resources/en.lproj
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/Resources/en.lproj/InfoPlist.strings
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/_CodeSignature
sudo rm -rf /Library/Extensions/Sentinel.kext/Contents/_CodeSignature/CodeResources
sudo rm -rf /Library/LaunchAgents/com.sentinelone.agent.plist
sudo rm -rf /Library/LaunchDaemons/com.sentinelone.sentineld-guard.plist
sudo rm -rf /Library/LaunchDaemons/com.sentinelone.sentineld-helper.plist
sudo rm -rf /Library/LaunchDaemons/com.sentinelone.sentineld-updater.plist
sudo rm -rf /Library/LaunchDaemons/com.sentinelone.sentineld.plist
sudo rm -rf /Library/Preferences/Logging/Subsystems/com.sentinelone.sentinelctl.plist
sudo rm -rf /Library/Preferences/Logging/Subsystems/com.sentinelone.sentineld-guard.plist
sudo rm -rf /Library/Preferences/Logging/Subsystems/com.sentinelone.sentineld-helper.plist
sudo rm -rf /Library/Preferences/Logging/Subsystems/com.sentinelone.sentineld-updater.plist
sudo rm -rf /Library/Preferences/Logging/Subsystems/com.sentinelone.sentineld.plist
sudo rm -rf /Library/Sentinel
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Resources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Sentinel
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A/Resources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A/Resources/Info.plist
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A/Sentinel
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A/_CodeSignature
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/A/_CodeSignature/CodeResources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/Sentinel.framework/Versions/Current
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Frameworks/sentinel.dylib
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Info.plist
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Info.plist
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/MacOS
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/MacOS/SentinelAgent
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/AppIcon.icns
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/Assets.car
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/Base.lproj
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/Base.lproj/MainMenu.nib
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/CellView.nib
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/DebugMenu.nib
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/MenuPopupView.nib
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/divider.tiff
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/en.lproj
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/en.lproj/InfoPlist.strings
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/en.lproj/Localizable.strings
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/greenBadge.tiff
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/logo.tiff
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/Resources/redBadge.tiff
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/_CodeSignature
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/SentinelAgent.app/Contents/_CodeSignature/CodeResources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sdiagnose
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sentinelctl
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sentineld
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sentineld_guard
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sentineld_helper
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/sentineld_updater
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/COPYRIGHT
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/arbiter.db
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/arbiter.db.sig
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/signatures.db
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/signatures.db.sig
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/whitelist-ext.db
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/assets/whitelist-ext.db.sig
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/common.sb
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/en.lproj
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/en.lproj/InfoPlist.strings
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/guard.sb
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/helper.sb
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/sentinel-labs.cer
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/sentineld.sb
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/sentinelone.cer
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/uninstall.sh
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/Resources/whitelist-ext.json
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature/CodeDirectory
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature/CodeRequirements
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature/CodeRequirements-1
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature/CodeResources
sudo rm -rf /Library/Sentinel/sentinel-agent.bundle/Contents/_CodeSignature/CodeSignature
sudo rm -rf /private/etc/asl/com.sentinelone.sentinel
sudo rm -rf /usr/local/share/man/man1/sentinelctl.1
sudo killall SentinelAgent
sudo rm -Rf /Applications/SentinelOne
sudo pkgutil --forget com.sentinelone.pkg.sentinel-agent
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment