full_path = "/System/Library/PrivateFrameworks/ScreenTimeCore.framework/ScreenTimeAgent "
runs_as = "mobile"
ScreenTimeAgent supports the Screen Time feature. The binary is a part of ScreenTimeCore private framework.
full_path = "/System/Library/PrivateFrameworks/Search.framework/searchd"
runs_as = "mobile"
Part of searchd Private framwork.
full_path = "/usr/libexec/searchpartyd"
runs_as = "mobile"
Search party daemon.
full_path = "/usr/libexec/securityd"
runs_as = "_securityd"
securityd maintains security contexts and arbitrates cryptographic operations. Access to keychain items is routed through securityd to enforce access controls and to keep private keys out of user process address space.
full_path = "/usr/libexec/seld"
runs_as = "mobile"
seld Manages the secure element and interfaces with the trusted service manager.
full_path = "/usr/libexec/sharingd"
runs_as = "mobile"
sharingd is used to enable AirDrop file sharing, Handoff between iCloud devices, Instant Hotspot discovery, connecting to shared computers, and accessing Remote Discs from other computers.
Sideloading refers to the process of installing and running applications on a device, typically a mobile device, from a source other than the official app store. In the Apple iPhone/iPad eco-system, it defines the process of installing an application without using the official App Store.
Apple have no control over the sideloaded application. This could lead to potential security risks if the user sideload a malicious application.
... full_path = "/System/Library/PrivateFrameworks/VoiceShortcuts.framework/Support/siriactionsd"
runs_as = "mobile"
The siriactionsd daemon coordinates running and syncing of shortcuts created in the Shortcuts application, among other Shortcuts-related auxiliary tasks.
full_path = "/System/Library/PrivateFrameworks/SiriInference.framework/Support/siriinferenced"
runs_as = "mobile"
The binary is a part of SiriInference private framework.