If you have ever tried to uninstall a Crowdstrike Falcon Agent with tamperproof protection enabled, you have probably realized it's not user-friendly. Having to pull the maintenance token from the web console, and then using it to confirm the uninstallation locally on each device is a tedious process. Using a handful of API calls and some scripting, I have found a way to completely automate the process by pulling the Agent ID locally from the Mac, passing it to the API to request the corresponding maintenance token, and then executing the uninstall locally. Having this functionality allows for endless remediation policies and opportunities, as you now have the basis to uninstall Macs that are no longer in compliance on demand.