witr-process-inspector

Explains what started running processes, services, and port listeners by tracing their parent and supervisor chains.

When to use it

Use when investigating why a process or service is running, what started it, or what is listening on a port.

Ask it to investigate running processes, services, or ports; it reports their origins using witr.