trustd

trustd #

 full_path = "/usr/libexec/trustd"
 runs_as = "_trustd"

trustd provides services for evaluating trust in certificates for all processes on the system.

 full_path = "/System/Library/Frameworks/Security.framework/XPCServices/TrustedPeersHelper.xpc/TrustedPeersHelper"
 runs_as = "mobile"

The binary is a part of Security framework.

 full_path = "/usr/libexec/tzd"
 runs_as = "root"

 relative_path = "system_logs.logarchive/*"

Unified logs is a specific Apple log format.

 full_path = "/System/Library/PrivateFrameworks/UsageTracking.framework/UsageTrackingAgent"
 runs_as = "mobile"

 full_path = "/usr/libexec/UserEventAgent"
 runs_as = "root"

Is a daemon that loads system-provided plugins to handle high-level system events which cannot be monitored directly by launchd(8).

 full_path = "/usr/libexec/usermanagerd"
 runs_as = "root"

 full_path = "/usr/bin/vm_stat"

Retrieve information about virtual memory.
Executed during sysdiagnose with these parameters /usr/bin/vm_stat -c 25 0.2
The result is stored in a vm_stat.txt file within sysdiagnose report.

 full_path = "/System/Library/PrivateFrameworks/VisualVoicemail.framework/vmd"
 runs_as = "mobile"

 full_path = "/System/Library/PrivateFrameworks/VoiceServices.framework/Support/voiced"
 runs_as = "mobile"