dtrace-infiltrate

libtop
mach_trap::pid_for_task:entry
/execname == "top" || execname == "activitymonitor"/
{
/*
printf("[+] top resolving a pid.\n");
printf("\tpid is @ 0x%lx\n", arg1);
*/
self->pidaddr = arg1;
}