&quot;pidstat 1&quot; prints active processes, making it much less noisy that top -b, and therefore highlights malevolent processes. I think the top equivalant would be &quot;top -b -i&quot;, though that has more output and is a bit noisier.