Terminate Linux Process Via Kill — Detection Rule

Detects usage of command line tools such as "kill", "pkill" or "killall" to terminate or signal a running process.

Read the full analysis on IntelFusions