Deploying CYRISMA Agent via Microsoft Intune (with Detection Rules)
Learn how to efficiently deploy CYRISMA Agent using Microsoft Intune, along with implementing detection rules for improved security measures.
- User Manual
- Self Onboarding Guide
- Agents
- The Cyber Risk Assessment Process
- PSA Integrations
- General Questions and Troubleshooting
- The Cyber Risk Assessment Process (Video Tutorials)
- Sales and Prospecting Articles
- CYRISMA Partner Portal Access
- Glossary
- API Documents
- CYRISMA Change Log
- Support Ticket SLA
- Billing Questions
Table of Contents
Applies to: CYRISMA Windows Agent Deployment
Use case: Deploy the CYRISMA Agent through Microsoft Intune using a Win32 app package and validate installation using file or registry detection rules.
π§° Step 1: Prepare the Batch Script
- Create a batch script to download and install the CYRISMA agent silently.
- Save the following as
Install_CYRISMA.bat
:
π Replace
XXXXXX
with your organizationβs agent key andhttps://YOUR_CYRISMA_INSTANCE
with your specific instance URL.
π¦ Step 2: Package the App with IntuneWinAppUtil
- Download the Microsoft Win32 Content Prep Tool.
- Place
Install_CYRISMA.bat
in a folder likeC:\CYRISMADeployment\Source
. - Run the following command:
π Step 3: Add the App in Microsoft Intune
- Go to Intune Admin Center > Apps > Windows > + Add.
- Choose Windows app (Win32).
- Complete the fields:
- Name: CYRISMA Agent
- Description: Silent deployment of CYRISMA Agent
- Publisher: CYRISMA
-
Install command:
Install_CYRISMA.bat
- Uninstall command (optional):
powershell.exe -ExecutionPolicy Bypass -Command "Get-WmiObject -Query 'select * from Win32_Product where Name=\"CYRISMA Agent\"' | ForEach-Object { $_.Uninstall() }"
4. Set Install behavior to System
.
π Step 4: Configure Detection Rules
Choose one of the following detection methods:
β Option 1: File Detection
Rule type: File
Path: C:\CYRISMA_Agent
File: DataSpotliteAgent.exe
Detection method: Exists
β Option 2: Registry Detection
Rule type: Registry
Path: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CYRISMA Agent
Value name: DisplayName
Detection method: String equals CYRISMA Agent
π₯ Step 5: Assign the App
Assign to appropriate groups (e.g., All Devices or a specific group).
Set as Required to ensure deployment.
π Step 6: Monitor Deployment
Navigate to Intune Admin Center > Apps > Monitor.
Review deployment success and error logs across devices.