Arctic Wolf Agent Uninstallation on MacOS - Multiple Endpoints

Updated Feb 5, 2024

Uninstall Arctic Wolf Agent from macOS using Jamf Pro

Note: When Arctic Wolf® Agent is uninstalled, devices and associated risks are removed from the MDR Dashboard and Risk Dashboard.

You can uninstall Agent from multiple endpoints in your organization using Jamf Pro®.


  1. Index the package in Jamf Admin.
  2. Configure the uninstall policy.
  3. Uninstall the package.

Step 1: Index the package in Jamf Admin

  1. Open the Jamf Admin application, and then authenticate.

  2. In the Search bar, enter the name of the Agent package to find it in the Process table.

    Tip: The processes table is sorted alphabetically.

  3. Select the package, and then select Index to index the package.

  4. When prompted, enter your credentials.

  5. Right-click the package, and then select Info.

  6. Click the Options tab.

  7. Select the Allow package to be uninstalled checkbox.

    the information dialog
  8. Click OK.

  9. Click Save.

Step 2: Configure the uninstall policy

Set a policy to uninstall Agent on macOS using Jamf Pro. If the policy is applied to the client device and the device meets the criteria that you configure, the package will uninstall the next time that the user checks in according to your policy.

Note: Your configuration choices might be different than those outlined in this document. Make configuration changes based on the needs of your environment.

  1. Open the Jamf Pro application, and then authenticate.

  2. At the top of the page, click Computers.

  3. Click Policies.

  4. Click + New.

  5. Configure basic settings for the policy that you want for your environment. These options enable users to uninstall directly from Self Service as needed:

    1. Click the Options tab, and then configure these settings:
      • In the Trigger section, make sure that the Recurring Check-in checkbox is selected.
      • In the Execution Frequency list, select Once per computer.
    2. Click the Scope tab, and then in the Target Computers list, select All Computers.

      Note: If you do not want Agent removed from all computers, adjust this setting accordingly.

  6. Click the Options tab.

  7. In the navigation menu, click Packages.

  8. Click Configure.

Step 3: Uninstall the package

  1. In the Packages list, select the package that you want to uninstall.

  2. In the Action list, select Uninstall.

  3. Click Save.

  4. In the navigation menu, click Maintenance.

  5. Verify that the Update inventory checkbox is selected.

  6. Click Save.

    During check-in, Agent is uninstalled from the computers you defined in the Scope setting.