Press CTRL+K to open search

KillProcessByPID reaction

  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

Use this reaction to kill processes on endpoints by passing the process ID.

Arguments

Name

Type

Description

pid

Number

The process ID, set by the operating system.



Related articles
  • KillProcessByPID reaction
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Reacting to incidents > Built-in reactions
  • KillProcessByPath reaction
    Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Reacting to incidents > Built-in reactions
  • KillProcessTree reaction
    Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Reacting to incidents > Built-in reactions