Can we uninstall and reinstall Security Theater

[kayiwa]

What maintenance needs to be done?

The ir_agent from Rapid7 and falcon sensor are not registering as installed on BigFix.

Level of urgency

• [x] High
• [ ] Moderate
• [ ] Low

Why is this maintenance needed?

• We did a report on BigFix which suggested that rapid7 and crowdstrike are not properly installed. The remove software works successfully but leaves zombie-fied systemctl processes which our playbook depends. Our playbook will need to be modified to either search for another criteria to ensure that the software full installs. (it currently skips all the tasks with

skipping: [sandbox-acozine.lib.princeton.edu] => {"changed": false, "false_condition": "not rapid7_home.stat.exists", "skip_reason": "Conditional result was False"}

with a false condition

Acceptance criteria

• [x] Can see Rapid7 and Crowdstrike on BigFix
• [x] Playbook successfully unistalls and reinstalls software

Implementation notes, if any

[kayiwa]