01 / Performance
Monitor your Mac’s performance.
Follow CPU, GPU, memory, disk, and network activity through live readings and history. Use dedicated resource panels to explore changes, and keep selected stats in the menu bar while you work.
INSTRUMENT TASK MANAGER FEATURES
Mac monitoring
and diagnostics.
Follow resource use from a system overview to individual processes, connections, and background items. Instrument Task Manager brings live monitoring and diagnostic tools into one Mac app.
Follow the details that matter.
02 / Processes
Inspect a process and its executable.
Explore process trees and related helpers, then inspect executable paths, command lines, open files, signatures, and hashes. Available details depend on macOS permissions and access to the executable.
03 / Network
Follow connections and troubleshoot the network.
Match connections with their processes and inspect endpoints, ports, and states. Run targeted checks for latency, DNS, routes, and certificates. Polling and permissions limit what can be observed.
04 / Startup
Review startup and background items.
Review discovered launch agents, daemons, and app login helpers, including their commands and locations. Request enable or disable changes where supported; macOS permissions and discovery coverage still apply.
05 / History
Record and revisit performance history.
Record sampled CPU, GPU, memory, power, and thermal data where available. Scrub through a recording, adjust playback speed, and export or reload a trace. This is sampled telemetry, not a complete event log.
06 / Hardware
Understand the system behind the activity.
Explore system information, Apple Silicon core topology, and available hardware telemetry. Users groups processes by account, while Services lists discovered launchd jobs. Details vary by hardware and permissions.
USEFUL TO KNOW
Monitoring and diagnostics questions.
Can ITM show which Mac app owns a network connection?
Connections associates visible sockets with their owning processes and shows local and remote endpoints, ports, protocols, and states. It polls at the selected interval, so short-lived sockets can fall between samples and permissions can limit visibility. It does not capture packets.
Can every process and executable be inspected?
macOS permissions and process lifetime affect what can be read. A process may exit during inspection, and an executable missing from disk cannot provide file hashes or signing details. File checks inspect the reported path on disk; they do not recover a preserved copy of the running binary from memory.
Does Startup & Background Items cover every way an app can launch?
No. ITM examines selected launch-agent and launch-daemon folders and discovers embedded app login helpers. That is not a complete inventory of every macOS startup mechanism. System permissions can prevent a requested enable or disable action, so verify the result when changing an item.
What can I replay with Flight Recorder?
Flight Recorder lets you revisit sampled performance telemetry, seek through a trace, change playback speed, and export or reload a recording. Its current rolling buffer retains up to 900 samples. It does not record every process event, network packet, or file operation.
Does opening a VirusTotal report upload my executable?
ITM’s current action opens a browser report URL containing the executable’s SHA-256 hash. That shares the hash with VirusTotal; the action does not upload the executable or run an integrated antivirus scan. A signature or a report alone does not establish that a file is safe.
Instrument Task Manager
A clearer view of your Mac.
See what’s running, monitor performance, and find what’s filling your drive.
Preview 0.1.13 · macOS 14+ · Apple Silicon · 7.2 MB
Installation note
Open the DMG and drag the app into Applications.
Credits
Some workflows are inspired by Microsoft Sysinternals, including TCPView, Process Explorer, and Sigcheck. Instrument Task Manager is developed independently for macOS and is not affiliated with or endorsed by Microsoft.