When installing the Falcon Sensor manually on Microsoft Windows, where is the installation log data...

For a manual Microsoft Windows Falcon Sensor installation, installation log data is stored in %LOCALAPPDATA%\Temp. The official Windows sensor logging table distinguishes installation source clearly: when installation, uninstallation, upgrade, or downgrade is initiated by a user , the sensor installation logs are written to %LOCALAPPDATA%\Temp; when initiated by the CrowdStrike cloud, they are written to %SYSTEMROOT%\Temp. This distinction matters during troubleshooting because administrators must inspect the correct local context based on how the installation was launched. Manual installation usually runs under the logged-in administrator or user context, so the local user temp directory is the expected location. %SYSTEMROOT%\Temp is associated with cloud-initiated activity and system-context logging. %SYSTEMROOT%\Logs and %LOCALAPPDATA%\Logs are not the documented default locations for Windows sensor installation logs. The correct CCFA topic alignment is Sensor Deployment, specifically Windows Sensor Deployment, installation troubleshooting, and sensor log locations.