Where are current process details usually recorded in a system?

Information about currently running processes is usually recorded and accessible in the operating system through system utilities and logs.

In Unix-like systems, process information is stored in the virtual filesystem /proc. There, you can find folders with process identifiers, containing details about each process.

System logs, for example in /var/log/, may contain records of process start and end, especially if a system manager like systemd is configured.

To monitor processes, commands and tools such as:

• ps — displays a list of processes
• top or htop — interactive viewing
• systemctl status — for services in systemd

are often used.

Thus, the main places where process information is registered are the /proc filesystem and system logs.