mediaremoted
mediaremoted # full_path = "/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted" runs_as = "mobile" Part of MediaRemote private framework.
Apple
mediaserverd
mediaserverd # full_path = "/usr/sbin/mediaserverd" runs_as = "mobile" Manages media routes and access on the idevice, amongst other things allows or denies camera access.
microstackshot
microstackshot # full_path = "/usr/libexec/microstackshot" runs_as = "root" Triggered during sysdiagnose. Aggregates and saves daily microstackshot call graphs to the diagnostic reports directory.
misagent
misagent # full_path = "/usr/libexec/misagent" runs_as = "mobile"
misd
misd # full_path = "/usr/libexec/misd" runs_as = "root"
mobileactivationd
mobileactivationd # full_path = "/usr/libexec/mobileactivationd" runs_as = "mobile"
mobileassetd
mobileassetd # full_path = "/usr/libexec/mobileassetd" runs_as = "root"
MobileBackupCacheDeleteService
MobileBackupCacheDeleteService # full_path = "/System/Library/PrivateFrameworks/MobileBackup.framework/MobileBackupCacheDeleteService" runs_as = "root"
MobileGestaltHelper
MobileGestaltHelper # full_path = "/usr/libexec/MobileGestaltHelper" runs_as = "mobile"
mobileinstallation.log
mobileinstallation.log # relative_path = "logs/MobileInstallation/mobile_installation.log.{number}" relative_path = "logs/MobileInstallation/mobile_installation_helper.log.{number}" mobileinstallation.log are plaintext files, accompanied with _helper files. It has information about the apps installed in the last ~4 days.