Apple

siriknowledged

Apple

siriknowledged # full_path = "/usr/libexec/siriknowledged" runs_as = "mobile"

sleepd

Apple

sleepd # full_path = "/System/Library/PrivateFrameworks/SleepDaemon.framework/sleepd" runs_as = "mobile"

sociallayerd

Apple

sociallayerd # full_path = "/System/Library/PrivateFrameworks/SocialLayer.framework/sociallayerd.app/sociallayerd" runs_as = "mobile" Protect privacy sensitive data by keeping them in separated address space. The binary is a part of SocialLayer private framework.

SpringBoard

Apple

SpringBoard # full_path = "/System/Library/CoreServices/SpringBoard.app/SpringBoard" runs_as = "mobile" Windows manager on iOS, manages a big part of the user interface, vital process that will be respawned if the process crashes. It is of interest to jailbreakers and spyware makers, in the latter case, altering its behaviour will make the user oblivious of compromises. (One example is that it reports sensors usage like microphone or camera)

suggestd

Apple

suggestd # full_path = "/System/Library/PrivateFrameworks/CoreSuggestions.framework/suggestd" runs_as = "mobile" The suggestd daemon receives content from Spotlight, Mail, Messages and various other apps in order to power various features. Those features include Found in Apps, Proactive QuickType, and Keyboard/Siri/News Personalization. The binary is a part of CoreSuggestions private framework.

symptomsd

Apple

symptomsd # full_path = "/usr/libexec/symptomsd" runs_as = "_networkd" symptomsd is a daemon that provides services for the Symptom Framework.

symptomsd-diag

Apple

symptomsd-diag # full_path = "/usr/libexec/symptomsd-diag" runs_as = "mobile"

syncdefaultsd

Apple

syncdefaultsd # full_path = "/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd" runs_as = "mobile" syncdefaultsd is the system daemon backing the NSUbiquitousKeyValueStore feature.

sysdiagnose

Apple

sysdiagnose # full_path = "/usr/bin/sysdiagnose" Requires root permissions. Sysdiagnose extracts information from iPhone and iPad devices and captures it in a log file.

sysdiagnose_helper

Apple

sysdiagnose_helper # full_path = "/usr/libexec/sysdiagnose_helper" runs_as = "root" sysdiagnose_helper is a helper daemon that performs critical sub-tasks in separate processes to improve sysdiagnose’s stability and reliability