How to Confirm that the Nightfall Endpoint Agent Process is Running on macOS

Last updated: November 17, 2025

Purpose

To identify if the Nightfall Endpoint Agent Process is Running on a macOS machine and restart it if necessary.

If you're experiencing issues with the Nightfall endpoint agent not appearing to run on some laptops, despite the console showing a connected status, follow these steps.

Environment

  • macOS

  • Nightfall Endpoint Agent: v1.2.7 and higher

Resolution

Verify the Process Status

To check if the Nightfall process is running on your macOS device:

  1. Open Terminal

  2. Run the following command:

    ps aux | grep Nightfall

Note: The process name "Nightfall" is case-sensitive. Make sure to use a capital 'N' when searching for the process.

Interpreting the Results

After running the command, you may encounter one of these scenarios:

  1. Process is running: You'll see output lines containing "Nightfall" (excluding the grep command itself).

  2. Process is not running: You'll only see the grep command in the output.

What to Do If the Process Is Not Running

If the Nightfall process doesn't appear to be running:

  1. Check the Nightfall console to confirm the device's connection status.

  2. If the console shows the device as connected but the process isn't visible, try restarting the Nightfall agent on your device.

  3. If the issue persists, there might be a deployment problem or a discrepancy between the agent's status and its actual operation.

Still Having Issues?

If you've followed these steps and are still experiencing problems:

  1. Ensure you have the latest version of the Nightfall agent installed.

  2. Check for any security software that might be interfering with the Nightfall process.

  3. Contact Nightfall support for further assistance, providing:

    • The output of the ps aux | grep Nightfall command

    • A screenshot of the device's status in the Nightfall console

    • Your device's operating system version