I believe in 10.13 Kernel Extensions were automatically loaded if a
device was enrolled in MDM. This changed with 10.13.4 and you are now
required to allow the extensions. These 2 articles might help you.
https://developer.apple.com/library/content/t...
This is what we use #!/bin/sh /Applications/Cylance/Uninstall
CylancePROTECT.app/Contents/MacOS/Uninstall CylancePROTECT --noui
--password="your password"