43 lines
1015 B
Markdown
43 lines
1015 B
Markdown
# ps - List Processes
|
|
|
|
List all running processes on the target system.
|
|
|
|
## Description
|
|
|
|
The `ps` command lists all running processes on the target system. Displays detailed process information including PID, process name, parent PID, architecture, username, and session ID. Automatically updates the Mythic Process Browser.
|
|
|
|
## Syntax
|
|
|
|
```
|
|
ps
|
|
```
|
|
|
|
## Examples
|
|
|
|
```
|
|
ps
|
|
```
|
|
|
|
## Features
|
|
|
|
- Displays detailed process information including:
|
|
|
|
## Output
|
|
|
|
```
|
|
PID Process Name PPID Arch User Session
|
|
----- ------------------- ----- ----- ---------------------- -------
|
|
1234 explorer.exe 1230 x64 DESKTOP-ABC\User 1
|
|
5678 chrome.exe 1234 x64 DESKTOP-ABC\User 1
|
|
```
|
|
|
|
## Related
|
|
|
|
[Process Browser Integration](../../../features.md#process-browser-integration)
|
|
|
|
---
|
|
|
|
**Command Category:** Process Management
|
|
**Requires Admin:** No
|
|
**MITRE ATT&CK:** [T1057 - Process Discovery](https://attack.mitre.org/techniques/T1057/)
|