Azure (cloud) mitigation is one thing. Workstation (Crowdstrike) is a much bigger challenge. How do you switch thousands of off-net machines away from a broken

Azure (cloud) mitigation is one thing. Workstation (Crowdstrike) is a much bigger challenge. How do you switch thousands of off-net machines away from a broken Crowdstrike? User-run USB stick recovery? But then how would you meanwhile keep those sticks up-to-date?