Apple

Logdownd

Apple

Logdownd #

 full_path = "/usr/libexec/lockdownd"
 runs_as = "root"

Lockdownd manages access to iOS services.

lsd

Apple

lsd #

 full_path = "/usr/libexec/lsd"
 runs_as = "mobile"

lsd provides various services for CoreServices frameworks.

MacinTalkAUSP

Apple

MacinTalkAUSP #

 full_path = "/System/Library/PrivateFrameworks/MacinTalk.framework/PlugIns/MacinTalkAUSP.appex/MacinTalkAUSP"
 runs_as = "mobile"

The binary is a part of MacinTalk private framework.

maild

Apple

maild #

 full_path = "/System/Library/PrivateFrameworks/EmailDaemon.framework/maild"
 runs_as = "mobile"

ManagedSettingsAgent

Apple

ManagedSettingsAgent #

 full_path = "/System/Library/Frameworks/ManagedSettings.framework/ManagedSettingsAgent"
 runs_as = "mobile"

ManagementTestSubscriber

Apple

ManagementTestSubscriber #

 full_path = "/System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/ManagementTestSubscriber.xpc/ManagementTestSubscriber"
 runs_as = "mobile"

mapspushd

Apple

mapspushd #

 full_path = "/System/Library/PrivateFrameworks/MapsSupport.framework/mapspushd"
 runs_as = "mobile"

mapspushd handles some auxiliary tasks on behalf of the Maps application and related system services.

MCSettingsEvents.plist

Apple

MCSettingsEvents.plist #

 relative_path = "logs/MCState/Shared/MCSettingsEvents.plist"

MC stands for Managed Configurations. This file contains logs of settings changes.

Should be monitored.

mDNSResponder

Apple

mDNSResponder #

 full_path = "/usr/sbin/mDNSResponder"
 runs_as = "_mdnsresponder"

mDNSResponder (also known as mdnsd on some systems) is a daemon invoked at boot time to implement Multicast DNS and DNS Service Discovery.

medialibraryd

Apple

medialibraryd #

 full_path = "/System/Library/PrivateFrameworks/MusicLibrary.framework/Support/medialibraryd"
 runs_as = "mobile"