To give you the precise solution you need, please clarify your intent:
SentinelOne and CrowdStrike: These modern EDRs usually require an "Uninstall Password" or "Maintenance Token" generated from the cloud console. If the agent is orphaned (lost connection to the console), you may need to boot into Safe Mode or use a vendor-provided "cleaner" script. Step-by-Step Removal Process endpoint security uninstall tool
If you don't know the vendor or have a stubborn agent, use these tools: To give you the precise solution you need,
The audit wing at 5:00 AM was silent and cold. Fluorescent lights hummed. Cubes stood empty. Marta swiped into 4B-117 with an override badge from the SOC. Fluorescent lights hummed
“There,” she said. A single DNS query to a domain she didn’t recognize. audit-verification.internal.corp . It resolved to an internal IP. That IP belonged to a server in the audit department’s own VLAN.