pschk

Check for suspicious processes on macOS.

Installation

$ make
$ sudo make install

or

$ brew tap x13a/tap
$ brew install x13a/tap/pschk

Usage

USAGE: pschk [--version]

OPTIONS:
  --version               Print version and exit
  -h, --help              Show help information.

Example

~
❯ pschk
[74437] /Applications/Firefox.app/Contents/MacOS/firefox
  [78984] /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container
  [74448] /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container
  [74552] /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container
  [74449] /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container
  [87122] /Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container
[74015] /Applications/Fork.app/Contents/MacOS/Fork
...

GitHub

View Github