KillProcessByHash reaction
- Published on Aug 27, 2026
Use this reaction to kill processes that have a specific hash value on endpoints.
Arguments
Name | Type | Description |
|---|
MD5 | String | The process's MD5 value |
SHA1 | String | The process's SHA-1 value |
SHA256 | String | The process's SHA-256 value |
pid | Number | The process ID |
Supported versions
Windows | Linux | macOS |
|---|
3.0 and later | n/a | 3.0 and later |
Was this article helpful?
Related articles
Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Reacting to incidents > Built-in reactions
Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Reacting to incidents > Built-in reactions
Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Reacting to incidents > Built-in reactions