Terminate process

When Kaspersky Industrial CyberSecurity for Linux Nodes is integrated with Detection and Response solutions, you can remotely terminate processes on a protected device using the Terminate process task.

You can create and run tasks to terminate a process in Web Console only when integrated with Kaspersky Endpoint Detection and Response Optimum.

Using the Terminate process task, you can terminate:

Processes started on a device as a result of malicious activity.
Processes started by you. For example, you can remotely terminate a process that you have started using the Start process task.
Scripts. For example, you can remotely terminate a script that you have started using the Start process task.
Utilities. For example, you can remotely terminate an internet speed test utility that you started using the Start process task.
Applications.

You cannot terminate processes of System Critical Objects (SCOs). SCOs include files that are necessary for the operation of the operating system and the Kaspersky Industrial CyberSecurity for Linux Nodes application.

You can create and run the Terminate process task, as well as edit its settings in the Web Console: The Terminate process task cannot be managed on the command line.

Terminating a process task settings

Setting	Description
Specify the file whose processes you want to terminate	In the drop-down list, you can select how to specify the path to the file: By path to directory and checksum By full path By PID The By PID value is present in the drop-down list only for tasks created in device properties.
Full path to file	Field for entering the full path to the file. This field is displayed only if in the Specify the file whose processes you want to terminate drop-down list, you selected By full path.
Checksum type	In the drop-down list, you can select the file checksum type: MD5. SHA256. This drop-down list appears if you select By path to directory and checksum in the Specify the file whose processes you want to terminate drop-down list.
File checksum	Field for entering the file checksum. This field is displayed if in the Specify the file whose processes you want to terminate drop-down list, you selected By path to directory and checksum, and in the Checksum type drop-down list, you selected MD5.
Directory path	Field for entering the path to the directory of the file. This field is displayed if in the Specify the file whose processes you want to terminate drop-down list, you selected By path to directory and checksum.
Process ID	Process ID (PID) entry field. This field is displayed if in the Specify the file whose processes you want to terminate drop-down list, you selected By PID.

You can view the result of the Terminate process task in the task properties in the Web Console under Results.

Page top