csagent.sys
CrowdStrike — CrowdStrike Falcon sensor
When blamed in a crash: Very likely the true cause
What to do
CrowdStrike's endpoint security sensor — enterprise software managed by your IT team.
- This is a company-managed security agent: report the crash to your IT department with the dump file.
- IT can update the Falcon sensor version or adjust its policy — do not try to remove it yourself on a work machine.
The July 2024 global outage was a CrowdStrike content update crashing csagent.sys at boot — enterprise fleets patch this centrally.
Got a crash dump? Get your verdict in seconds
Drop the .dmp file into our analyzer — it runs entirely in your browser. No upload, no size limit, no account.
Analyze my dump file →