Help CenterTurn off the Tamper Protection Feature in the ThreatLocker Portal
Disable Tamper Protection | ThreatLocker Help Center (kb.help)
Click on the ThreatLocker icon in the tray. Select 'Quit'.
Users using MAC Agent 1.0 and above will have the app automatically removed by the uninstall command. Users using any version below 1.0 will need to manually remove the ThreatLocker app using the directions found at the bottom of this article before attempting to run the next Terminal command.
Open Terminal by clicking the icon located at the bottom of the screen.
Run the following Terminal command:
open /Applications/ThreatLocker.app --args -uninstall
This will delete the baseline. This is especially important if you are removing the ThreatLocker App to reinstall it.
Lastly, you will go into the portal under the Computers tab, select the machine, and select the delete button.
Directions for Manually Removing the ThreatLocker App for MAC Agent Versions Below 1.0
Drag the ThreatLocker App icon from the Applications folder into the bin.
You will receive a message informing you that the ThreatLocker app is hosting system extensions. Click 'Continue' on the popup.
If prompted, input your username and password and click 'OK'.
You need to ensure that all baseline remnants have been removed.
Open Terminal by clicking the icon located at the bottom of the screen.
Input: sudo defaults read com.threatlocker.app.agent
This will check to see if the baseline is present. This can also be useful if you wanted to check to see if the baseline is complete without logging into the ThreatLocker Portal.