Apple

tailspind #

 full_path = "/usr/libexec/tailspind"
 runs_as = "root"

Daemon for tailspin. tailspin configures the system to continuously sample callstacks of processes and select kdebug events in the kernel trace buffer.

taskinfo #

 full_path = "/usr/bin/taskinfo"
 runs_as = "root"

Gathers informations from the kernel. It dumps various informations about the processes and threads.
A dump of this command is in the sysdiagnose folder with the filename taskinfo.txt

tccd #

 full_path = "/System/Library/PrivateFrameworks/TCC.framework/Support/tccd"
 runs_as = "mobile"

Enforces permissions given to applications, it is responsible for the prompt asking the user if he would like to grant an app access to privacy related functions.

The binary is a part of TCC private framework.

thermalmonitord #

 full_path = "/usr/libexec/thermalmonitord"
 runs_as = "root"

Monitor things such as temperature, voltage etc. Limits functionality in case of high temperatures to preserve integrity.

ThreeBarsXPCService #

 full_path = "/System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/ThreeBarsXPCService.xpc/ThreeBarsXPCService"
 runs_as = "root"

timed #

 full_path = "/usr/libexec/timed"
 runs_as = "_timed"

timed maintains system clock accuracy by synchronizing the clock with reference clocks via technologies like NTP. Inputs are merged inside of timed, where it calculates uncertainty to facilitate scheduling proactive time jobs. timed is also aware of power/battery conditions.

touchsetupd

Apple

touchsetupd #

 full_path = "/System/Library/PrivateFrameworks/TouchRemote.framework/Support/touchsetupd"
 runs_as = "mobile"

translationd

Apple

translationd #

 full_path = "/System/Library/PrivateFrameworks/Translation.framework/translationd"
 runs_as = "mobile"

Daemon that enables Translation features.

transparencyd

Apple

transparencyd #

 full_path = "usr/libexec/transparencyd"
 runs_as = "root"

Manages authorisation of applications access to user data. Transparencyd is a system daemon that verifies transparency information for requesting clients.

triald

Apple

triald #

 full_path = "/usr/libexec/triald"
 runs_as = "mobile"