siriknowledged

siriknowledged #

 full_path = "/usr/libexec/siriknowledged"
 runs_as = "mobile"

sleepd

sleepd #

 full_path = "/System/Library/PrivateFrameworks/SleepDaemon.framework/sleepd"
 runs_as = "mobile"

sociallayerd

sociallayerd #

 full_path = "/System/Library/PrivateFrameworks/SocialLayer.framework/sociallayerd.app/sociallayerd"
 runs_as = "mobile"

Protect privacy sensitive data by keeping them in separated address space. The binary is a part of SocialLayer private framework.

SpringBoard

SpringBoard #

 full_path = "/System/Library/CoreServices/SpringBoard.app/SpringBoard"
 runs_as = "mobile"

Windows manager on iOS, manages a big part of the user interface, vital process that will be respawned if the process crashes.
It is of interest to jailbreakers and spyware makers, in the latter case, altering its behaviour will make the user oblivious of compromises. (One example is that it reports sensors usage like microphone or camera)

suggestd

suggestd #

 full_path = "/System/Library/PrivateFrameworks/CoreSuggestions.framework/suggestd"
 runs_as = "mobile"

The suggestd daemon receives content from Spotlight, Mail, Messages and various other apps in order to power various features. Those features include Found in Apps, Proactive QuickType, and Keyboard/Siri/News Personalization.

The binary is a part of CoreSuggestions private framework.

symptomsd

symptomsd #

 full_path = "/usr/libexec/symptomsd"
 runs_as = "_networkd"

symptomsd is a daemon that provides services for the Symptom Framework.

symptomsd-diag

symptomsd-diag #

 full_path = "/usr/libexec/symptomsd-diag"
 runs_as = "mobile"

syncdefaultsd

syncdefaultsd #

 full_path = "/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd"
 runs_as = "mobile"

syncdefaultsd is the system daemon backing the NSUbiquitousKeyValueStore feature.

sysdiagnose

sysdiagnose #

 full_path = "/usr/bin/sysdiagnose"

• Requires root permissions.
• Sysdiagnose extracts information from iPhone and iPad devices and captures it in a log file.

sysdiagnose_helper

sysdiagnose_helper #

 full_path = "/usr/libexec/sysdiagnose_helper"
 runs_as = "root"

sysdiagnose_helper is a helper daemon that performs critical sub-tasks in separate processes to improve sysdiagnose’s stability and reliability