macOS Activity Monitor is Apple’s built-in utility for inspecting processes and viewing CPU, memory, disk, and network usage. It helps users identify which apps or background processes are consuming resources, making it a useful first check when a Mac runs hot, slows down, or shows unexplained network activity.
In security investigations, an unusually high CPU reading or an unfamiliar process can prompt closer inspection. Activity Monitor can help identify the process and its resource use, but it does not establish whether software is malicious, how it arrived, or whether it will start again after reboot. Verify a process’s name and location, and investigate related login items, launch agents, and network activity before drawing conclusions or removing files.