Client Service Bug Fix

Summary: This fix addresses issues #34 #35 #36. In the event the timestamp field on any event is malformed (i.e cannot be converted from unix epoch to DateTime format), Orchestrator will fallback to the current datetime rather than crash the service.

Implementation: In order to apply this fix, you'll need to copy the attached exe file over to the server running Orchestrator and replace the existing file (FalconOrchestrator.Client.exe) located in C:\Program Files (x86)\Falcon Orchestrator\. You can than subsequently restart the Orchestrator windows service.

NOTE: This file is not for installing orchestrator! To install, you should use the v1.1.0 release then subsequently apply this bug fix as per the implementation steps. The next release will have this bug fix addressed and thus not require the added step.

Falcon Orchestrator v1.1.0

For users currently running v1.0.0 that want to upgrade. They will need to first uninstall the existing version via add/remove programs. This will not drop the database however a backup is always recommended.If you have any other custom files (such as email templates, artifacts, etc.) in any of the application directories, ensure you back those up as well before running the uninstaller. Prior to doing so, also make note of the CryptoKey, AllowedUsers and database credentials that are stored in the web.config file and client service configuration file. These same values will need to be re-added up running the new installer.

This new release provides a number of new forensic features including; file deletion, process listing, process termination, per-process memory dump, system restore and data recovery. More details regarding this release can be found at https://www.crowdstrike.com/blog/crowdstrike-releases-new-update-to-falcon-orchestrator/

Falcon Orchestrator v1.0.0

Initial release of Falcon Orchestrator. Download the MSI package and install it on your host system