wiki created

documentation-payload/Cazalla/commands/ps.md

@@ -0,0 +1,42 @@
+# ps - List Processes
+
+List all running processes on the target system.
+
+## Description
+
+The `ps` command lists all running processes on the target system. Displays detailed process information including PID, process name, parent PID, architecture, username, and session ID. Automatically updates the Mythic Process Browser.
+
+## Syntax
+
+```
+ps
+```
+
+## Examples
+
+```
+ps
+```
+
+## Features
+
+- Displays detailed process information including:
+
+## Output
+
+```
+PID     Process Name          PPID    Arch    User                    Session
+-----   -------------------   -----   -----   ----------------------  -------
+1234    explorer.exe          1230    x64     DESKTOP-ABC\User        1
+5678    chrome.exe            1234    x64     DESKTOP-ABC\User        1
+```
+
+## Related
+
+[Process Browser Integration](../../../features.md#process-browser-integration)
+
+---
+
+**Command Category:** Process Management  
+**Requires Admin:** No  
+**MITRE ATT&CK:** [T1057 - Process Discovery](https://attack.mitre.org/techniques/T1057/)