Skip to main content
Cyber Defense TacticsCyber Defense Tactics
HomeLearnResourcesBlogCommunity
Cyber Defense TacticsCyber Defense Tactics

Learn defensive security, leverage AI for cyber defense, and join a community of security professionals.

Learning

  • Blog
  • Resources
  • Newsletter

Community

  • Community
  • YouTube
  • About

Legal

  • Privacy Policy
  • Terms of Service

© 2026 Cyber Defense Tactics. All rights reserved.

A Carbene.AI Project

Back to D3FEND Hub
D3-PT

Process Termination

Evict Tactic

Kill malicious processes to stop active threats and prevent further damage.

View on MITRE D3FEND

Implementation Guidance

  • Establish process kill procedures
  • Use EDR for remote termination
  • Document process hierarchies
  • Prevent process resurrection
  • Coordinate with forensic collection

Tools & Technologies

CrowdStrike FalconMicrosoft Defender for EndpointCarbon BlackTaniumSentinelOne

ATT&CK Techniques Countered

This defensive technique helps protect against the following adversary techniques:

T1059

Command and Scripting Interpreter

Explore Purple Team Matrix for full mappings

Related Techniques in Evict

D3-CR

Credential Rotation

D3-AL

Account Locking

D3-NTF

Network Traffic Filtering

Ready to build a comprehensive defense strategy?