Nightfall Windows Agent Deployment: Generic MSI Deployment

Learn how to install the Nightfall agent on Microsoft Windows OS using the Rippling MSI payload.

Prerequisites

1. You have a method to execute arbitrary commands remotely as Administrator on all installation targets.

2. On your Nightfall console, navigate to https://app.nightfall.ai/endpoint and click the Download Package button on the top right corner of the page. Click Download Package for Windows. A .msiextension file is downloaded.

3. You have noted the API key and Company ID values from the command present just before the Download Package for Windows button.

4. You have hosted the downloaded .msiextension file on an HTTPS server which is reachable by all installation targets.

Installation

1. Execute the following Powershell script on all target machines replacing $ApiKey and $CompanyId with the values obtained in the third prerequisite step:

# Define installation parameters
$ApiKey = ""
$CompanyId = ""

$InstallerUrl = "https://cdn.nightfall.ai/downloads/agent/windows/NightfallAgent-0.0.1.msi"
$InstallerPath = "$env:TEMP\NightfallAgent.msi"

# Download the MSI installer
Invoke-WebRequest -Uri $InstallerUrl -OutFile $InstallerPath

# Execute the installer with msiexec
msiexec /i "$InstallerPath" API_KEY="$ApiKey" COMPANY_ID="$CompanyId" /qn