macOS
brew install --cask taskexplorerlocal Homebrew cask metadata
cask
Tool to explore all the running tasks (processes). Version 3.1.0 via Homebrew Cask; verified from local package data.
install
brew install --cask taskexplorerlocal Homebrew cask metadata
overview
Tool to explore all the running tasks (processes)
No executable aliases were found in the local package database.
history
TaskExplorer is Objective-See's open-source macOS utility for live inspection of running processes and their security-relevant resources.
TaskExplorer was created by Objective-See as an open-source visual process-inspection utility for macOS. Earlier versions enumerated tasks and associated artifacts through a traditional privileged workflow.
Version 3 was a near-complete rewrite based on Apple's Endpoint Security framework. It added live process events, a Swift interface, expanded filtering and export, a system extension, and an optional assistant that can use Apple Intelligence or user-supplied model-provider credentials.
Objective-See distributes TaskExplorer as an open-source macOS application, while Homebrew Cask supplies a package-managed installation route. Legacy releases remain available for older supported macOS generations.
The application is aimed at security practitioners, administrators, developers, and advanced Mac users who need a richer live process view than the standard Activity Monitor provides.
After installation in `/Applications`, users approve the TaskExplorer system extension and grant it Full Disk Access. The interface can then inspect live processes, signatures, libraries, open files, network connections, and optional VirusTotal results.
TaskExplorer supports text and token filters, JSON export, and a command-line interface inside the application bundle. VirusTotal, Anthropic, and OpenAI keys are optional and are stored securely in the macOS Keychain.
TaskExplorer combines process inspection with code-signing status, loaded-library enumeration, open files, network connections, hashes, and optional VirusTotal lookups, making it useful for incident response and malware triage.
Its command-line mode emits JSON and can enumerate or scan tasks programmatically. Version 3's system extension removes the earlier need to run command-line inspection as root after the extension has been installed and approved.
security posture
No matching local secret-handling manifest was found for taskexplorer. Package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
macOS Keychainexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
| No executable data was present. | |||
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/objective-see/TaskExplorer
install metadata
| Package key | cask:taskexplorer |
|---|---|
| Version | 3.1.0 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/taskexplorer |
| Homepage | https://objective-see.org/products/taskexplorer.html |
| Repository | https://github.com/objective-see/TaskExplorer |
| Upstream docs | https://objective-see.org/products/taskexplorer.html |
| Source archive | https://github.com/objective-see/TaskExplorer/releases/download/v3.1.0/TaskExplorer_3.1.0.zip |
| SHA-256 | 536bda55f06e45bd7edc6cbed29aeb230db0f003675388a78f45d714a9ca8705 |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | taskexplorer |
| Names |
|
| Depends On | |
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.