ProcessSpy

ProcessSpy is a native macOS process monitor and system utility built as a serious upgrade to Apple's Activity Monitor. It surfaces granular, real-time data on every running process: CPU usage, memory footprint, thread count, disk read/write speeds, network activity, code-signing status, and digital signature verification. Processes are displayed in a hierarchical tree view that groups parent and child processes together, rolls up aggregate metrics, and automatically links XPC services to their responsible process, giving a clear picture of how the system is actually structured. The tool is aimed at software engineers, DevOps practitioners, and system administrators who need more than a flat list of process names. It solves a concrete pain point: when dozens of Java, Python, or Node.js processes all show up with identical names, ProcessSpy lets you inspect each one's actual command-line path, environment variables, bundle ID, entitlements, and Info.plist data to tell them apart. A JavaScript-based filter engine lets you write custom, multi-condition rules to isolate exactly the processes you care about. ProcessSpy is built natively for macOS (Apple Silicon and Intel) and requires macOS 14 or later. It carries Apple notarization and code-signing, meaning it passes Apple's malware scanning requirements. Historical resource tracking logs CPU, memory, and thread data over time so you can identify when a spike happened, see peak and average usage, and export findings to CSV or JSON. The app also keeps a record of finished processes, including their arguments and environment variables, for post-mortem review.