For Mac OS netstat there is no -o switch, so I’ve used netstat -ban.
sudo lsof -i -n -p
lsof -i :443 will show you all connections associated with port 443, commonly used for TLS communication. Sheward, Mike. Hands-on Incident Response and Digital Forensics (p. 163). BCS Learning & Development Limited. Kindle Edition.
The first column will give a hint about what the application responsible for this connection is. To get the full path to the app executable, use ps -fp <PID> command:
