Auditing failed kill events