---
title: thread
framework: endpointsecurity
role: symbol
role_heading: Instance Property
path: endpointsecurity/es_message_t/thread
---

# thread

The thread that took the action defined in a message.

## Declaration

```swift
var thread: UnsafeMutablePointer<es_thread_t>?
```

## Discussion

Discussion This field may be NULL when threading doesn’t apply. This includes trace events that describe calls to ptrace(PT_TRACE_ME) or code-signing invalidation events resulting from another process calling csops(CS_OPS_MARKINVALID).

## See Also

### Inspecting Thread Properties

- [es_thread_t](endpointsecurity/es_thread_t.md)