TaskExplorer

Overview

TaskExplorer is a professional macOS system-level process (task) browsing and analysis tool developed by Objective-See. It enables users to visually explore and analyze all running tasks on a Mac, serving as a powerful assistant for system administrators, security researchers, and advanced users to monitor system status, troubleshoot issues, or conduct security analysis. The application requires no installation—simply download and extract to run.

Key Features

1. Comprehensive Process Visualization

• Flat and Tree Views: Offers a default "Flat View" (sorted by name) and a hierarchical "Tree View" mode, allowing users to understand process relationships from different perspectives.
• One-Click Core Information Display: Quickly displays critical information for each process, including code signing status, loaded dynamic libraries, open files, and network connections.

2. Advanced Security and Code Signing Analysis

• Quick Identification and Filtering by Signing Status: Clearly labels each process’s code signing status (Apple-signed, third-party-signed, or unsigned), with support for filtering by status to quickly identify potentially suspicious unsigned applications.
• Deep Integration with VirusTotal:
  • Automatically queries VirusTotal using the hash of the process binary to retrieve detection results from multiple antivirus engines.
  • Detection ratios directly reveal known malware risks.
  • For unknown files, supports one-click submission to VirusTotal for analysis.

3. In-Depth Process Behavior Inspection

• Loaded Dynamic Libraries: Lists all dynamic libraries loaded by any specified process (including remote processes), aiding in understanding functional dependencies or detecting malicious code injection.
• Open Files: Displays all file handles currently opened by a specific process, useful for troubleshooting file lock issues or analyzing application behavior.
• Network Connection Monitoring: Shows all network connections established by a process along with detailed information (e.g., remote address, port, status), a critical feature for network security monitoring and anomaly detection.

4. Efficient Search and Filtering

• Global Smart Search: Enter keywords in the search box at the top-right to perform real-time filtering based on process name, path, or process ID.
• Special "Tag" Filters: Use built-in tags like #non-Apple, #unsigned to quickly filter out all third-party-signed or unsigned processes, significantly improving security audit efficiency.
• Targeted Search: Quickly locate specific network connections, memory regions, and other targets.

Unique Advantages

• System-Level Permissions, Comprehensive Data: Upon launch, the app requests necessary system authorizations to enumerate remote processes and other deep-level information, providing far more detailed data than built-in tools like Activity Monitor.
• Focused on Security Analysis: Combines code signing verification, VirusTotal lookup, and file/network behavior monitoring into a specialized security toolchain.
• Intuitive and User-Friendly GUI: Presents complex system process information clearly through icons, buttons, and status indicators, lowering the technical barrier. Quick actions like information buttons and "Open in Finder" enhance productivity.
• No Installation Required, Ready-to-Use: Distributed as a Zip-packed application—download, extract, and run TaskExplorer.app directly. Clean, convenient, and imposes no additional burden on the system.
• Trusted Developer: Developed by Objective-See, a company specializing in macOS security tools, with a well-regarded product line in the security community.

System Requirements and Download

• Compatibility: macOS 11 (Big Sur) and later.
• Current Version: 2.1.0
• Download Method: Visit the official website to download the Zip archive. After downloading, double-click to extract, then double-click TaskExplorer.app to run.
• File Integrity Verification: The official SHA-1 hash for the Zip file (e.g., 0F00CCB5C031A3F7F63CC6EF156CBF16BA5C88D0) is provided for users to verify the download’s integrity and authenticity.

---

Summary: TaskExplorer is a well-designed, powerful macOS process analysis tool that presents deep system runtime status and security information through an intuitive interface. It is especially suitable for professionals who need to deeply understand system behavior, troubleshoot issues, or monitor security. Its robust filtering capabilities and deep integration with VirusTotal make it a practical and effective tool for safeguarding macOS security.