ProcessScope

ProcessScope is a native process explorer for macOS. Use its sortable process tree to understand CPU, memory, network activity, process relationships and lifecycle changes, then inspect a selected process in detail.

Investigation evidence

Inspect open files, loaded libraries, TCP/IP endpoints, threads, launchd context, code-signing information and locally readable environment values. The searchable Strings view highlights useful evidence in an executable—including email addresses, web addresses, IP addresses, paths and commands—without pretending that a match is a malware verdict.

Designed around macOS boundaries

ProcessScope works with the access macOS grants to the current user. Protected and other-user processes may expose limited information, and the app distinguishes unavailable evidence from an empty result. It does not run as root or bypass System Integrity Protection.

Private by default when exporting

Inspection stays on your Mac unless you copy or export it. Investigation reports omit command arguments and hide environment values by default; the export panel lets you deliberately include them when required.