Start process
You can use the Start process task to remotely start processes and executable files on devices.
For example, you can run:
- Processes stopped as a result of malicious activity on the device.
- Processes stopped by you.
For example, you can remotely start a process that you have stopped using the Terminating a process task.
- Scripts.
For example, you can run a script to collect data from the device to investigate a threat.
- Utilities.
For example, you can run a utility that saves device configuration information to a file.
- Applications.
If SELinux is installed in your operating system in Enforcing mode, starting the Start process task requires additional configuration of SELinux.
You can create and run the Start process task, as well as edit its settings in the Web Console:
You cannot create, run, or configure the Start process task using the command line. You cannot view an Start process task created in the Web Console on the command line with the kesl-control --get-task-list command.
Start process task settings
Setting | Description |
|---|---|
Executable command | Field for entering the command to start the process. For example, if you want to run the You can also enter the absolute path to the working directory in the Working directory path (optional) field. In that case, do not enter the absolute path to the working directory in the Executable command field. |
Command line arguments (optional) | Field for entering command line arguments to pass additional input to the script, utility, or application at startup. For example, you can enter the If you need to pass multiple arguments, separate them with spaces. For example, you can enter |
Working directory path (optional) | Field for entering the path to the working directory where the executable file of the script, utility, or application is located. For example, you can enter If you entered the absolute path to the working directory in the Executable command field, do not fill in the Working directory path (optional) field. |
You can view the result of the task in the Assets (Devices) → Tasks → <task name> section, on the Results tab in the Description column.
