[feedback] Process List

[KCarretto]

See more stuff, we want to avoid scrolling if possible. In terminal we like to chunk and move on, would be great to visually see it all at once if possible. Make it tighter. We don't want a tree, just a table.

# Default nix ps -ef columns
  UID   PID  PPID   C STIME   TTY           TIME CMD
    0     1     0   0 14Dec25 ??       207:03.21 /sbin/launchd

UID: User ID (aka principal)
PID: Process ID
PPID: Parent Process ID
C: CPU Utilization (not in Eldritch atm, would be nice to have at some point)
STIME: Start Time (process start time --> this should be default sort order once implemented in Eldritch)
TTY: Terminal (Teletype) (not in Eldritch atm, would be REALLY nice to have at some point)
TIME: Total CPU Time (probably not required)
CMD: Command (benefits and drawbacks to displaying this instead of path, is the default for most process lists)

# Status is missing from this view but is REALLY nice to have from a red teaming perspective, which is why it's included in current tavern PS view

# Example from Eldritch docs
{
    "pid": "9812",
    "ppid": "1",
    "status": "Sleeping",
    "name": "golem",
    "path": "/usr/bin/golem",
    "username": "root",
    "command": "/usr/bin/golem -i",
    "cwd": "/root/",
    "environ": "CARGO_PKG_REPOSITORY= CARGO_PKG_RUST_VERSION= CARGO_PKG_VERSION=0.1.0 CARGO_PKG_VERSION_MAJOR=0",
}

Ordering

# ********TRY THIS FIRST********
# This is closest to the different linux outputs filtering out a couple of extra pieces of information that usually get interspersed
User | PID | PPID | State | Start Time | Cmdline (Command) 

# Could experiment with this as well
User | PID | PPID | State | Start Time | Name | Cmdline (Command) 

This is what a linux "ps -ef" process list looks like, it is similar to the above with a few extra fields and missing state

"ps -aux" also contains CPUTIME and MEMORY USAGE which for troubleshooting can be very useful, something to consider for the future

Only use this example for density purposes: