KillProcessByPID reaction
- Published on Aug 27, 2026
Use this reaction to kill processes on endpoints by passing the process ID.
Arguments
Name | Type | Description |
|---|
pid | Number | The process ID, set by the operating system. |
Supported versions
Windows | Linux | macOS |
|---|
3.0 and later | 3.0 and later | 3.0 and later |
Was this article helpful?
Related articles
Endpoint Detection and Response with Forensics (EDRF) > Respond to threats with EDRF > Respond to threats > Reacting to incidents > Built-in reactions
Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Reacting to incidents > Built-in reactions
Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Reacting to incidents > Built-in reactions