Logdownd
Logdownd # full_path = "/usr/libexec/lockdownd" runs_as = "root" Lockdownd manages access to iOS services.
Apple
lsd
lsd # full_path = "/usr/libexec/lsd" runs_as = "mobile" lsd provides various services for CoreServices frameworks.
MacinTalkAUSP
MacinTalkAUSP # full_path = "/System/Library/PrivateFrameworks/MacinTalk.framework/PlugIns/MacinTalkAUSP.appex/MacinTalkAUSP" runs_as = "mobile" The binary is a part of MacinTalk private framework.
maild
maild # full_path = "/System/Library/PrivateFrameworks/EmailDaemon.framework/maild" runs_as = "mobile"
ManagedSettingsAgent
ManagedSettingsAgent # full_path = "/System/Library/Frameworks/ManagedSettings.framework/ManagedSettingsAgent" runs_as = "mobile"
ManagementTestSubscriber
ManagementTestSubscriber # full_path = "/System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/ManagementTestSubscriber.xpc/ManagementTestSubscriber" runs_as = "mobile"
mapspushd
mapspushd # full_path = "/System/Library/PrivateFrameworks/MapsSupport.framework/mapspushd" runs_as = "mobile" mapspushd handles some auxiliary tasks on behalf of the Maps application and related system services.
MCSettingsEvents.plist
MCSettingsEvents.plist # relative_path = "logs/MCState/Shared/MCSettingsEvents.plist" MC stands for Managed Configurations. This file contains logs of settings changes. Should be monitored.
mDNSResponder
mDNSResponder # full_path = "/usr/sbin/mDNSResponder" runs_as = "_mdnsresponder" mDNSResponder (also known as mdnsd on some systems) is a daemon invoked at boot time to implement Multicast DNS and DNS Service Discovery.
medialibraryd
medialibraryd # full_path = "/System/Library/PrivateFrameworks/MusicLibrary.framework/Support/medialibraryd" runs_as = "mobile"