Apple

amsengagementd

amsengagementd #

 full_path = "/System/Library/PrivateFrameworks/AppleMediaServicesUI.framework/amsengagementd"
 runs_as = "mobile"

analyticsd

analyticsd #

 full_path = "/System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd"
 runs_as = "_analyticsd"

analyticsd is a system daemon that collects diagnostics and usage data locally for users that have opted in.

announced

announced #

 full_path = "/usr/libexec/announced"
 runs_as = "mobile"

apfs_iosd

apfs_iosd #

 full_path = "/System/Library/Filesystems/apfs.fs/apfs_iosd"
 runs_as = "root"
  • apfsd is the APFS volume management daemon, it controls volume encryption and decryption, automatic file defragmentation and performs other housekeeping duties as necessary.

AppleCredentialManagerDaemon

AppleCredentialManagerDaemon #

 full_path = "/System/Library/PrivateFrameworks/AppleCredentialManager.framework/AppleCredentialManagerDaemon"
 runs_as = "root"

Applications

Applications #

An iOS application, commonly known as an app, is a software program designed to run on Apple’s iOS operating system. iOS applications are diverse and serve various purposes, ranging from productivity tools and entertainment apps to utilities and games.

Apple application are bundled into .ipa file and are usually installed using the App store. The Apple App store enforces various security mesures to enhance the application security making it secure but not perfect.

...

AppSSODaemon

AppSSODaemon #

 full_path = "/System/Library/PrivateFrameworks/AppSSO.framework/Support/AppSSODaemon"
 runs_as = "mobile"

The binary is a part of AppSSO private framework.

appstored

appstored #

 full_path = "/System/Library/PrivateFrameworks/AppStoreDaemon.framework/Support/appstored"
 runs_as = "mobile"

appstored provides support for App Store.

apsd

apsd #

 full_path = "/System/Library/PrivateFrameworks/ApplePushService.framework/apsd"
 runs_as = "mobile"

apsd ApplePushService daemon for Apple Push Notification service. This is part of the ApplePushService framework.

askpermissiond

askpermissiond #

 full_path = "/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond"
 runs_as = "root"
  • Security daemon.

  • askpermissiond is a security/safety process that detects if the user should be asked for permission by password or other notification.