1. Common method
1. First, find the terminal protection center in the application program, and right-click to display the original item.
2. Select all to delete all the files. One of the sfavtray files cannot be deleted. Here, delete other files first, otherwise the process will be automatically restored after the end of step 3.
3. Find the process named sfavtray and edr in the activity monitor , and force it to end. After the sfavtray process ends, edr will not be displayed in the status bar.
There is also a process endpointsecurityd that has been unable to forcefully end, and it seems to be useless. 
4. Delete all files in the sf folder under the resource library. The path is /Library/sf. At the same time, use Tencent Lemon to open the startup management and turn off the com.sangfor.edr_agent.plist option to delete this file.
2. Shortcut method
~/Library/sf/edr/agent/bin Enter ~/Library/sf/edr/agent/bin , find two script files eps_services_check.sh and eps_uninstall.sh , one is to detect edr service, and the other is to uninstall edr directly. The script file here cannot be modified directly. You must first drag the script file to another location, such as the desktop, and then drag it back after modification to replace it directly .
1. How to enable edr to exit without automatic recovery
Drag eps_services_check.sh to the desktop, first comment or delete the script to resume startup code as shown in the figure:
After modifying, drag it back to the original position to overwrite, and first force quit the two edr processes in the activity monitor
Then force quit the sfavtray process, you can see that the EDR has been completed and the exit will not be automatically restored.
2. How to uninstall edr
Drag eps_uninstall.sh to the desktop, first comment or delete the restart code in the script as shown in the figure:
This code reports the uninstallation information and stops the uninstallation. If you comment it out, you can uninstall it directly. Or drag it back to the original position after modification.
The terminal enters the location of the script file
cd /Library/sf/edr/agent/binMake sure the script file has executable permissions. If not, you can add permissions with the following command
chmod +x eps_uninstall.shTo run the script, drag eps_uninstall.sh into the terminal or use the following command:
./eps_uninstall.shIf edr agent uninstall success appears, the uninstallation is successful.
