Mac/Discovery/Process_Discovery.md

## Process Discovery

MITRE ATT&CK Technique: [T1057](https://attack.mitre.org/wiki/Technique/T1057)


### Process Discovery

Input:

    ps >> /tmp/loot.txt

Input:

    ps aux >> /tmp/loot.txt
Mac Discovery 2018-01-09 14:53:47 -07:00			`## Process Discovery`

			`MITRE ATT&CK Technique: [T1057](https://attack.mitre.org/wiki/Technique/T1057)`


			`### Process Discovery`

			`Input:`

Update Process Discovery 2018-01-11 16:09:12 -05:00			`ps >> /tmp/loot.txt`
Mac Discovery 2018-01-09 14:53:47 -07:00
			`Input:`

Update Process Discovery 2018-01-11 16:09:12 -05:00			`ps aux >> /tmp/loot.txt`