From 9e3cab666edc8b808287c31bba84f07d59f50856 Mon Sep 17 00:00:00 2001 From: Harrison Ravazzolo <38767391+harrisonravazzolo@users.noreply.github.com> Date: Tue, 7 Oct 2025 12:02:36 -0700 Subject: [PATCH] Update doc assets (#33740) After talking with eng team and @nonpunctual, the /assets folder is reserved for things inside the fleet app, so creating a new folder in `/docs/solutions` @AdamBaali - I updated your article paths and moved the assets to the new folder, do you mind taking a peek and making sure it looks good? Note: brock, we should also update handbook for new ritual to add articles with assets like this. --------- Co-authored-by: Brock Walters <153771548+nonpunctual@users.noreply.github.com> --- articles/deploying-crowdstrike-with-fleet.md | 2 +- articles/prevent-tampering-of-fleet-agent.md | 6 +++--- .../configuration-profiles/BlockMDMUnenrollment.xml | 0 .../crowdstrike-full-disk-access.mobileconfig | 0 .../crowdstrike-notification.mobileconfig | 0 .../crowdstrike-service-management.mobileconfig | 0 .../crowdstrike-system-extension.mobileconfig | 0 .../crowdstrike-web-filter.mobileconfig | 0 .../policies/windows-fleet-hardening.policies.yml | 0 .../solutions}/scripts/windows-fleet-hardening.ps1 | 0 10 files changed, 4 insertions(+), 4 deletions(-) rename {assets => docs/solutions}/configuration-profiles/BlockMDMUnenrollment.xml (100%) rename {assets => docs/solutions}/configuration-profiles/crowdstrike-full-disk-access.mobileconfig (100%) rename {assets => docs/solutions}/configuration-profiles/crowdstrike-notification.mobileconfig (100%) rename {assets => docs/solutions}/configuration-profiles/crowdstrike-service-management.mobileconfig (100%) rename {assets => docs/solutions}/configuration-profiles/crowdstrike-system-extension.mobileconfig (100%) rename {assets => docs/solutions}/configuration-profiles/crowdstrike-web-filter.mobileconfig (100%) rename {assets => docs/solutions}/policies/windows-fleet-hardening.policies.yml (100%) rename {assets => docs/solutions}/scripts/windows-fleet-hardening.ps1 (100%) diff --git a/articles/deploying-crowdstrike-with-fleet.md b/articles/deploying-crowdstrike-with-fleet.md index 216ad8832e..60ba9fd7b6 100644 --- a/articles/deploying-crowdstrike-with-fleet.md +++ b/articles/deploying-crowdstrike-with-fleet.md @@ -65,7 +65,7 @@ Below is an explanation of what each of the macOS CrowdStrike Falcon payloads do - `crowdstrike-web-filter.mobileconfig` - Enable web filtering to monitor network traffic at the socket level. - `crowdstrike-full-disk-access.mobileconfig` - Grant full disk access to all CrowdStrike application processes using the CrowdStrike Apple Developer team identifier. -[Download the CrowdStrike Falcon macOS Configuration Profiles](https://github.com/fleetdm/fleet/tree/main/assets/configuration-profiles) +[Download the CrowdStrike Falcon macOS Configuration Profiles](https://github.com/fleetdm/fleet/tree/main/docs/solutions/configuration-profiles) >To upload Configuration Profiles to your Fleet instance: go to **Controls > OS Settings > Custom settings** then click **Add Profile**. See the screen shot below for details. diff --git a/articles/prevent-tampering-of-fleet-agent.md b/articles/prevent-tampering-of-fleet-agent.md index c3052fbe3e..c7cf35c636 100644 --- a/articles/prevent-tampering-of-fleet-agent.md +++ b/articles/prevent-tampering-of-fleet-agent.md @@ -16,13 +16,13 @@ Together, these components create a self-healing enforcement loop that ensures p One way to harden the installer is to apply registry values through a PowerShell script. These values help prevent uninstallation or tampering of protected applications. -[Windows hardening PowerShell script](https://github.com/fleetdm/fleet/blob/main/assets/scripts/windows-fleet-hardening.ps1) +[Windows hardening PowerShell script](https://github.com/fleetdm/fleet/blob/main/docs/solutions/scripts/windows-fleet-hardening.ps1) ## Policies in Fleet A Fleet policy confirms that the hardened registry key exists. If the key is missing, the policy fails, triggering automation to rerun the script. Once applied, the policy becomes compliant. If tampering occurs later, the cycle repeats. -[Fleet policy for Windows hardening](https://github.com/fleetdm/fleet/blob/main/assets/policies/windows-fleet-hardening.policies.yml) +[Fleet policy for Windows hardening](https://github.com/fleetdm/fleet/blob/main/docs/solutions/policies/windows-fleet-hardening.policies.yml) > Note: On first run, this policy intentionally fails to ensure automation executes the hardening script. @@ -30,7 +30,7 @@ A Fleet policy confirms that the hardened registry key exists. If the key is mis A Windows configuration profile can prevent devices from unenrolling from MDM. This is a separate measure from the policy and script but adds another layer of protection. -[Block MDM unenrollment configuration profile](https://github.com/fleetdm/fleet/blob/main/assets/configuration-profiles/BlockMDMUnenrollment.xml) +[Block MDM unenrollment configuration profile](https://github.com/fleetdm/fleet/blob/main/docs/solutions/configuration-profiles/BlockMDMUnenrollment.xml) [Microsoft CSP reference](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#allowmanualmdmunenrollment): The `AllowManualMDMUnenrollment` CSP is only supported on certain versions of Windows. Verify compatibility before deployment. diff --git a/assets/configuration-profiles/BlockMDMUnenrollment.xml b/docs/solutions/configuration-profiles/BlockMDMUnenrollment.xml similarity index 100% rename from assets/configuration-profiles/BlockMDMUnenrollment.xml rename to docs/solutions/configuration-profiles/BlockMDMUnenrollment.xml diff --git a/assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig b/docs/solutions/configuration-profiles/crowdstrike-full-disk-access.mobileconfig similarity index 100% rename from assets/configuration-profiles/crowdstrike-full-disk-access.mobileconfig rename to docs/solutions/configuration-profiles/crowdstrike-full-disk-access.mobileconfig diff --git a/assets/configuration-profiles/crowdstrike-notification.mobileconfig b/docs/solutions/configuration-profiles/crowdstrike-notification.mobileconfig similarity index 100% rename from assets/configuration-profiles/crowdstrike-notification.mobileconfig rename to docs/solutions/configuration-profiles/crowdstrike-notification.mobileconfig diff --git a/assets/configuration-profiles/crowdstrike-service-management.mobileconfig b/docs/solutions/configuration-profiles/crowdstrike-service-management.mobileconfig similarity index 100% rename from assets/configuration-profiles/crowdstrike-service-management.mobileconfig rename to docs/solutions/configuration-profiles/crowdstrike-service-management.mobileconfig diff --git a/assets/configuration-profiles/crowdstrike-system-extension.mobileconfig b/docs/solutions/configuration-profiles/crowdstrike-system-extension.mobileconfig similarity index 100% rename from assets/configuration-profiles/crowdstrike-system-extension.mobileconfig rename to docs/solutions/configuration-profiles/crowdstrike-system-extension.mobileconfig diff --git a/assets/configuration-profiles/crowdstrike-web-filter.mobileconfig b/docs/solutions/configuration-profiles/crowdstrike-web-filter.mobileconfig similarity index 100% rename from assets/configuration-profiles/crowdstrike-web-filter.mobileconfig rename to docs/solutions/configuration-profiles/crowdstrike-web-filter.mobileconfig diff --git a/assets/policies/windows-fleet-hardening.policies.yml b/docs/solutions/policies/windows-fleet-hardening.policies.yml similarity index 100% rename from assets/policies/windows-fleet-hardening.policies.yml rename to docs/solutions/policies/windows-fleet-hardening.policies.yml diff --git a/assets/scripts/windows-fleet-hardening.ps1 b/docs/solutions/scripts/windows-fleet-hardening.ps1 similarity index 100% rename from assets/scripts/windows-fleet-hardening.ps1 rename to docs/solutions/scripts/windows-fleet-hardening.ps1