← All tool guides

pspy (Process Monitor — No Root)

Auto-generated by Q-Branch Armory audit on 2026-10-12.

Overview

Monitor Linux processes without root — detects cron jobs, scheduled tasks, other users' commands.

Classification

**Category:** Forensic tools

**Armory status:** Installed (pspy)

**Q-Branch check:** Ready — binary found in PATH

**Present on VPS3:** yes

**Installed flag:** yes

**Primary binary:** `pspy`

**Binary in PATH:** yes

**Resolved path:** `/usr/local/bin/pspy`

Prerequisites

docker

go

java

root

ruby

wifi

Install

curl -sSL https://github.com/DominicBreuker/pspy/releases/latest/download/pspy64 -o pspy
chmod +x pspy

Run

./pspy --help

Operator notes

Launch from the [Digital Armory](/pentest/armory/) — do not maintain parallel tool lists in Q-Branch.

If the Q-Branch check is not **Ready**, run install steps or update the HackingTool manifest before relying on this tool in an engagement.

For authorized TenguProtect red-team work only.

Reference

https://github.com/DominicBreuker/pspy