1 · Enrollment
Every agent needs the server address and an enrollment token. Generate a token (admin) or paste one you already have — it fills into the commands below.
2 · Install on the endpoint
Runs as a SYSTEM scheduled task in watch mode — reports on install, honors on-demand scans within ~60s, and does a full scan every 4 hours. Requires an elevated PowerShell.
2
Run it (elevated PowerShell)
Intune: deploy cmmc-agent.msi as a Win32 app, or push install-agent.ps1 as a platform script with the same -Server/-Token arguments.
Installs a launchd daemon in watch mode (runs as root, outbound only). Requires admin (sudo).
2
Install & enroll (Terminal)
MDM (Jamf / Intune): push the .pkg inside the DMG with the server & token pre-filled at build time.
Installs a systemd service in watch mode (runs as root, outbound only).
1
Install & enroll (root shell)
The same static binary runs on any modern x86-64 Linux; no dependencies. For ARM or other targets, build from agent/ with GOOS/GOARCH.
3 · Confirm
Within a minute the host appears on the Scans page and its evidence shows on the dashboard. Trigger an immediate re-scan any time from there.