Process ID
A unique number an operating system assigns to a running process, used to identify and reference it. Defenders use PIDs to follow specific processes through investigation and to correlate events to the same execution.
Concept Neighborhood
Start here
Endpoint Telemetry
The most substantial related concept here, covered by 6 lessons.
Endpoint TelemetryStart here
6
lessons
Parent Process
6
lessons
Process
6
lessons
Process Tree
6
lessons
Indicator Pivot
1
lesson
Macro Restriction
1
lesson
Show 1 more connection
Related Lessons
6 lessons cover this conceptProcesses, Users, and the Idea of Security Context
General Beginner
Windows Essentials for Defenders
General Beginner
Linux Essentials for Defenders
General Beginner
Privilege Escalation on Both Platforms
General Beginner
Persistence: Long-Term Attacker Footholds
General Beginner
Reading Endpoint Evidence Like a Defender
General Beginner
Sign in to open lesson content directly.