darnellkeith/PEASS-ng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
aac23f1468
PEASS-ng/linPEAS/.tmp1
rhalyc aac23f1468 linpeasv2.7.6
2020-09-05 18:10:43 +01:00

11791 lines
1.1 MiB
Raw Blame History

COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=IAAAAAAAAAAgAAAAAAAAAAAAYAAAAAAACAAAAAAAAAAoAQAAJAAAACABAAAAAAAAKAEAAAAAAAAwAQAAAAAAADgBAAAAAAAAQAEAAAAAAABIAQAAAAAAAFABAAAAAAAAWAEAAAAAAABgAQAAAAAAAGgBAAAAAAAAcAEAAAAAAAB4AQAAAAAAAIABAAAAAAAAiAEAAAAAAACQAQAAAAAAAJgBAAAAAAAAoAEAAAAAAACoAQAAAAAAALABAAAAAAAAuAEAAAAAAADAAQAAAAAAAMgBAAAAAAAA0AEAAAAAAADYAQAAAAAAAOABAAAAAAAA6AEAAAAAAADwAQAAAAAAAPgBAAAAAAAAAAIAAAAAAAAIAgAAAAAAABACAAAAAAAAGAIAAAAAAAAgAgAAAAAAACgCAAAAAAAAMAIAAAAAAAA4AgAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAACAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAAAAAAcAAAAQAAAAAAAAAAAAAAAIAAAAEAAAAAAAAAAAAAAACgAAABAAAAAAAAAAAAAAAAsAAAAQAAAAAAAAAAAAAAANAAAAEAAAAAAAAAAAAAAADgAAABAAAAAAAAAAAQAAAAAAAAAQAAAAAAAAAAEAAAACAAAAEAAAAAAAAAABAAAABgAAABAAAAAAAAAAAQAAAAcAAAAQAAAAAAAAAAEAAAAIAAAAEAAAAAAAAAABAAAACgAAABAAAAAAAAAAAQAAAAsAAAAQAAAAAAAAAAEAAAANAAAAEAAAAAAAAAABAAAADgAAABAAAAAAAAAABAAAAAAAAAAQAAAAAAAAAAQAAAACAAAAEAAAAAAAAAAEAAAABgAAABAAAAAAAAAABAAAAAcAAAAQAAAAAAAAAAQAAAAIAAAAEAAAAAAAAAAEAAAACgAAABAAAAAAAAAABAAAAAsAAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAEAAAADgAAABAAAAAAAAAABgAAAAAAAAAQAAAAAAAAAAYAAAACAAAAEAAAAAAAAAAGAAAABgAAABAAAAAAAAAABgAAAAcAAAAQAAAAAAAAAAYAAAAIAAAAEAAAAAAAAAAGAAAACgAAABAAAAAAAAAABgAAAAsAAAAQAAAAAAAAAAYAAAANAAAAEAAAAAAAAAAGAAAADgAAAA== --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
COMMAND
/sbin/launchd
/usr/libexec/UserEventAgent (System)
/usr/sbin/syslogd
/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld
/usr/libexec/kextd
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
/System/Library/CoreServices/appleeventsd --server
/usr/libexec/configd
/System/Library/CoreServices/powerd.bundle/powerd
/usr/libexec/mobileassetd
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-nonthunderbolt-daemon
/usr/libexec/logd
/usr/libexec/airportd
/usr/libexec/warmd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
/System/Library/CoreServices/iconservicesd
/System/Library/CoreServices/iconservicesagent
/usr/libexec/diskarbitrationd
/usr/libexec/coreduetd
/usr/libexec/wdhelper
/usr/libexec/opendirectoryd
/usr/sbin/wirelessproxd
/System/Library/PrivateFrameworks/ApplePushService.framework/apsd
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated
/System/Library/CoreServices/launchservicesd
/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
/usr/sbin/securityd -i
/usr/libexec/locationd
/usr/libexec/DuetHeuristic-BM
/usr/sbin/blued
autofsd
/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond
/System/Library/CoreServices/logind
/usr/sbin/KernelEventAgent
/usr/libexec/hidd
/usr/libexec/corebrightnessd --launchd
/usr/libexec/AirPlayXPCHelper
/usr/sbin/notifyd
/usr/sbin/distnoted daemon
/usr/libexec/sandboxd
aslmanager
/usr/sbin/cfprefsd daemon
/System/Library/CoreServices/coreservicesd
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd
/usr/libexec/trustd
/System/Library/Frameworks/PCSC.framework/Versions/A/XPCServices/com.apple.ctkpcscd.xpc/Contents/MacOS/com.apple.ctkpcscd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s
/usr/libexec/lsd runAsRoot
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
/usr/sbin/mDNSResponder
/usr/sbin/coreaudiod
/usr/sbin/mDNSResponderHelper
/System/Library/Frameworks/CoreAudio.framework/Versions/A/XPCServices/com.apple.audio.DriverHelper.xpc/Contents/MacOS/com.apple.audio.DriverHelper
/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer
/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper
/System/Library/CoreServices/CrashReporterSupportHelper server-init
/usr/libexec/nsurlsessiond --privileged
/usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
/usr/libexec/nehelper
/usr/libexec/corestoraged
/usr/libexec/usbd
/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader
/usr/libexec/firmwarecheckers/ethcheck/ethcheck --integrity-check-thunderbolt-daemon
/usr/sbin/systemstats --xpc
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores
/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
/usr/libexec/symptomsd
/usr/libexec/applessdstatistics
/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd
sysmond
/usr/libexec/watchdogd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service
/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp -d
/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper
/System/Library/CoreServices/sharedfilelistd --enable-legacy-services
/usr/libexec/secinitd
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/usr/libexec/securityd_service
/usr/sbin/cfprefsd agent
/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
/usr/sbin/spindump
/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer -daemon
/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent
/usr/libexec/captiveagent
/usr/libexec/findmydeviced
/usr/sbin/systemsoundserverd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd system
/usr/libexec/smd
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated
/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd
/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred
/usr/libexec/UserEventAgent (Aqua)
/usr/sbin/distnoted agent
/usr/libexec/lsd
/usr/libexec/trustd --agent
/usr/libexec/languageassetd --firstLogin
/usr/libexec/secinitd
/usr/libexec/secd
/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy
/System/Library/Frameworks/Security.framework/Versions/A/Resources/KeychainSyncingOverIDSProxy.bundle/Contents/MacOS/KeychainSyncingOverIDSProxy
/usr/sbin/usernoted
/usr/libexec/nsurlsessiond
/usr/libexec/networkserviceproxy
/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent
/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariBookmarksSyncAgent
/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd
/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd
/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd
/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd
/usr/libexec/nsurlstoraged
/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/XPCServices/com.apple.DictionaryServiceHelper.xpc/Contents/MacOS/com.apple.DictionaryServiceHelper
/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService
/usr/libexec/diskmanagementd
/System/Library/PrivateFrameworks/CacheDelete.framework/deleted
/usr/libexec/pkd
/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd
/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd
/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd
/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge
/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd
/usr/libexec/AssetCache/AssetCache
/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd
/usr/libexec/nsurlstoraged
/System/Library/PrivateFrameworks/IMFoundation.framework/XPCServices/IMRemoteURLConnectionAgent.xpc/Contents/MacOS/IMRemoteURLConnectionAgent
/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService
/usr/libexec/videosubscriptionsd
/System/Library/CoreServices/sharedfilelistd
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/CoreServices/pbs
/usr/libexec/pboard
/System/Library/PrivateFrameworks/CloudPhotoServices.framework/Versions/A/Frameworks/CloudPhotosConfigurationXPC.framework/Versions/A/XPCServices/com.apple.CloudPhotosConfiguration.xpc/Contents/MacOS/com.apple.CloudPhotosConfiguration
/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd
/System/Library/PrivateFrameworks/PassKitCore.framework/passd
/usr/libexec/nfcd
/Applications/Preview.app/Contents/MacOS/Preview -psn_0_81940
/usr/libexec/amfid
/Applications/Safari.app/Contents/MacOS/Safari -psn_0_90134
/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd
/System/Library/CoreServices/iconservicesagent
/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
/System/Library/CoreServices/Dock.app/Contents/XPCServices/com.apple.dock.extra.xpc/Contents/MacOS/com.apple.dock.extra
/usr/sbin/filecoordinationd
/System/Library/PrivateFrameworks/CoreWLANKit.framework/Versions/A/XPCServices/WiFiProxy.xpc/Contents/MacOS/WiFiProxy
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd
/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper
/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent
/System/Library/CoreServices/ScopedBookmarkAgent
/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent
/usr/libexec/fmfd
/Applications/Preview.app/Contents/XPCServices/com.apple.Preview.TrustedBookmarksService.xpc/Contents/MacOS/com.apple.Preview.TrustedBookmarksService
/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp
/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw
/System/Library/Image Capture/Support/icdd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher
/usr/libexec/spindump_agent
/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent
/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter
/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent
/System/Library/CoreServices/AppleIDAuthAgent
/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond
/usr/libexec/sharingd
/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent --launchd
/System/Library/CoreServices/cloudpaird
/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent
/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent
/System/Library/CoreServices/diagnostics_agent
/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesHelper
/System/Library/CoreServices/mapspushd
/usr/libexec/keyboardservicesd
/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter
/usr/libexec/WiFiVelocityAgent
/usr/libexec/wifivelocityd
/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
/System/Library/CoreServices/SubmitDiagInfo server-init
/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary
/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced
/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert
/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent
/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy
/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid
/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice
/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/XPCServices/com.apple.CommerceKit.TransactionService.xpc/Contents/MacOS/com.apple.CommerceKit.TransactionService
/System/Library/PrivateFrameworks/StoreXPCServices.framework/Versions/A/XPCServices/com.apple.appstore.PluginXPCService.xpc/Contents/MacOS/com.apple.appstore.PluginXPCService
/usr/libexec/trustd --agent
/usr/sbin/distnoted agent
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/usr/libexec/gamecontrollerd
/usr/libexec/swcd
/Applications/iTerm.app/Contents/MacOS/iTerm2
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/usr/libexec/rtcreportingd
/Applications/Visual Studio Code.app/Contents/MacOS/Electron -psn_0_225335
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (GPU).app/Contents/MacOS/Code Helper (GPU) --type=gpu-process --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-color-correct-rendering --gpu-preferences=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 --service-request-channel-token=14470860412165249002
/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --webview-tag --no-sandbox --no-zygote --background-color=#171717 --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=4553037946759187139 --renderer-client-id=4 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Electron Framework.framework/Resources/crashpad_handler --no-rate-limit --no-upload-gzip --database=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --metrics-dir=/var/folders/xy/sw88prcn25q0xl85794lxf4c0000gn/T/VSCode Crashes --url=https://rink.hockeyapp.net/api/2/apps/21a48a66799e47fea4f52c0ff81e803d/crashes/upload --handshake-fd=55
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --inspect-port=0 /Applications/Visual Studio Code.app/Contents/Resources/app/out/bootstrap-fork --type=extensionHost
/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Renderer).app/Contents/MacOS/Code Helper (Renderer) --type=renderer --disable-color-correct-rendering --field-trial-handle=1718379636,16311034111702208994,3900714279734643037,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-GB --standard-schemes --secure-schemes=vscode-resource --bypasscsp-schemes --cors-schemes=vscode-resource --fetch-schemes=vscode-resource --service-worker-schemes --app-path=/Applications/Visual Studio Code.app/Contents/Resources/app --node-integration --no-sandbox --no-zygote --background-color=#171717 --disable-blink-features=Auxclick --num-raster-threads=2 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --enable-main-frame-before-activation --service-request-channel-token=9268217945173557329 --renderer-client-id=6 --no-v8-untrusted-code-mitigations
/Applications/Visual Studio Code.app/Contents/Frameworks/Squirrel.framework/Resources/ShipIt com.microsoft.VSCode.ShipIt /Users/rhalyc/Library/Caches/com.microsoft.VSCode.ShipIt/ShipItState.plist
/usr/bin/ssh-agent -l
/Applications/Firefox.app/Contents/MacOS/firefox -foreground
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1696557508 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 2 -isForBrowser -prefsLen 41 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1241073150 tab
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 3 -isForBrowser -prefsLen 6315 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1970921257 tab
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/StagedFrameworks/Safari/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.ImageDecoder.xpc/Contents/MacOS/com.apple.Safari.ImageDecoder
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 4 -isForBrowser -prefsLen 7218 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1674599891 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker-sizing -c MDSSizingWorker -m com.apple.mdworker.sizing
/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 8 -isForBrowser -prefsLen 9861 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.436609235 tab
/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.History.xpc/Contents/MacOS/com.apple.Safari.History
/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell
/Applications/TextEdit.app/Contents/MacOS/TextEdit
/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool agent
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 9 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.1347163143 tab
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/System/Library/Frameworks/AudioToolbox.framework/XPCServices/com.apple.audio.SandboxHelper.xpc/Contents/MacOS/com.apple.audio.SandboxHelper
/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container -childID 11 -isForBrowser -prefsLen 10864 -prefMapSize 235503 -sbStartup -sbAppPath /Applications/Firefox.app -sbLevel 3 -sbAllowAudio -sbAllowWindowServer -parentBuildID 20200720193547 -appdir /Applications/Firefox.app/Contents/Resources/browser -profile /Users/rhalyc/Library/Application Support/Firefox/Profiles/gry5codm.default-release 11343 gecko-crash-server-pipe.11343 org.mozilla.machname.998579649 tab
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/usr/sbin/netbiosd
/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker -s mdworker -c MDSImporterWorker -m com.apple.mdworker.shared
/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd
/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/XPCServices/QuickLookSatellite.xpc/Contents/MacOS/QuickLookSatellite
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server /usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
/usr/bin/login -fpl rhalyc /Applications/iTerm.app/Contents/MacOS/iTerm2 --launch_shell
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/Applications/iTerm.app/Contents/MacOS/iTerm2 --server login -fp rhalyc
login -fp rhalyc
-bash
/bin/sh ./linpeas.sh -o ProCronSrvcsTmrsSocks -a
ps -e -o command
Reference in New Issue View Git Blame Copy Permalink