CmdID

CmdID / Commands

killall

Send a signal (default: TERM) to all processes with the given names. toybox

On Linux 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from the toybox, 0BSD
killall [-l] [-iqv] [-SIGNAL|-s SIGNAL] PROCESS_NAME...
-iAsk for confirmation before killing
-lPrint list of all available signals
-qDon't print any warnings or error messages
-sSend SIGNAL instead of SIGTERM
-vReport if the signal was successfully sent
-wWait until all signaled processes are dead

Several platforms

from tldr-pages, CC BY 4.0

Send kill signal to all instances of a process by name (must be exact name). All signals except SIGKILL and SIGSTOP can be intercepted by the process, allowing a clean exit.

Terminate a process using the default SIGTERM (terminate) signal

killall process_nameIdentify

Trips 1 Sigma rule: mediumTerminate Linux Process Via Kill by Tuan Le (NCSGroup)

List available signal names (to be used without the SIG prefix)

killall --listIdentify

Trips 1 Sigma rule: mediumTerminate Linux Process Via Kill by Tuan Le (NCSGroup)

Interactively ask for confirmation before termination

killall --interactive process_nameIdentify

Trips 1 Sigma rule: mediumTerminate Linux Process Via Kill by Tuan Le (NCSGroup)

Terminate a process using the SIGINT (interrupt) signal, which is the same signal sent by pressing <Ctrl c>

killall -SIGINT process_nameIdentify

Trips 1 Sigma rule: mediumTerminate Linux Process Via Kill by Tuan Le (NCSGroup)

Force kill a process

killall -SIGKILL process_nameIdentify

Trips 1 Sigma rule: mediumTerminate Linux Process Via Kill by Tuan Le (NCSGroup)

What detects it

Sigma process creation rules that name killall
mediumTerminate Linux Process Via KillTuan Le (NCSGroup)