Managing Kaspersky Endpoint Agent using the command line interface

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

Kaspersky Endpoint Agent can be managed using the command line interface. The functionality of the command line interface is provided by the Agent.exe utility. The Agent.exe utility is included in Kaspersky Endpoint Agent distribution kit and is installed on each device together with Kaspersky Endpoint Agent. It is installed to the %ProgramFiles%\Kaspersky Lab\Endpoint Agent folder (if 32-bit operating system is used on the device) or to the % ProgramFiles(x86)%\Kaspersky Lab\Endpoint Agent folder (if 64-bit operating system is used on the device).

Example: If the device has x64 Windows operating system installed and you select to install Kaspersky Endpoint Agent on drive C, the Agent.exe utility is placed to the following folder: C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\

To manage Kaspersky Endpoint Agent using the command line interface:

1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
2. Using the cd command, navigate to the folder where the Agent.exe file is located.

   For example, you can type the following command cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Type the following command: agent.exe --<application setting you want to configure>=<action on the setting you want to execute> and press ENTER.

   The command execution result (return code) is displayed.

To display help on all the application settings and their possible values,

run the following command: agent.exe --help

See also Kaspersky Endpoint Agent Help Kaspersky Endpoint Agent Installing and uninstalling Kaspersky Endpoint Agent Application licensing Kaspersky Endpoint Agent application data Network isolation Execution prevention IOC Scan YARA scan Security audit Working with incident card About the EDR notifications widget About Kaspersky Endpoint Detection and Response Optimum About integration with Kaspersky Anti Targeted Attack Platform About integration with Kaspersky Managed Detection and Response About integration with Kaspersky Sandbox About integration with Kaspersky Industrial CyberSecurity for Networks Managing Kaspersky Endpoint Agent using Kaspersky Security Center Administration Console Managing the application using Kaspersky Security Center Web Console and Kaspersky Security Center Cloud Console Contact Technical Support Information about third-party code Trademark notices

In this Help section Managing Kaspersky Endpoint Agent activation Managing Kaspersky Endpoint Agent authentication Configuring tracing Configuring creation of dump files Viewing information about quarantine settings and quarantined objects Actions on quarantined objects Managing Kaspersky Sandbox integration settings Managing integration settings with KATA Central Node component Managing integration settings with Kaspersky Industrial CyberSecurity for Networks Running Kaspersky Endpoint Agent database and module update Starting, stopping and viewing the current application status Protecting the application with password Protecting application services with PPL technology Managing self-defense settings Managing event filtering Managing network isolation Managing Standard IOC Scan tasks Managing the Security audit tasks Creating a file signing certificate with OVAL rules Creating Kaspersky Security Center installation package with custom OVAL rules Managing scanning of files and processes according to YARA rules Managing scanning of autorun point objects according to YARA rules Managing Execution prevention

Page top