Part of macOS
endpointsecuritydSecurity tool support
○ Leave it
Lets security and antivirus apps watch for malware.
What it is
Passes events to security software you or your organisation installed.
Why it might be busy
A security app is scanning. Usually while the scan runs.
If you stop it
macOS starts it again straight away. Leave it.
The verdict
○ Leave it. Part of macOS, or something that starts again by itself. You never need to close these.
In Activity Monitor
endpointsecurityd
From Procession’s guide, in the words the app shows.