trustd
trustd # full_path = "/usr/libexec/trustd" runs_as = "_trustd" trustd provides services for evaluating trust in certificates for all processes on the system.
Apple
TrustedPeersHelper
TrustedPeersHelper # full_path = "/System/Library/Frameworks/Security.framework/XPCServices/TrustedPeersHelper.xpc/TrustedPeersHelper" runs_as = "mobile" The binary is a part of Security framework.
tzd
tzd # full_path = "/usr/libexec/tzd" runs_as = "root"
Unified logs
Unified logs # relative_path = "system_logs.logarchive/*" Unified logs is a specific Apple log format.
UsageTrackingAgent
UsageTrackingAgent # full_path = "/System/Library/PrivateFrameworks/UsageTracking.framework/UsageTrackingAgent" runs_as = "mobile"
UserEventAgent
UserEventAgent # full_path = "/usr/libexec/UserEventAgent" runs_as = "root" Is a daemon that loads system-provided plugins to handle high-level system events which cannot be monitored directly by launchd(8).
usermanagerd
usermanagerd # full_path = "/usr/libexec/usermanagerd" runs_as = "root"
vm_stat
vm_stat # full_path = "/usr/bin/vm_stat" Retrieve information about virtual memory. Executed during sysdiagnose with these parameters /usr/bin/vm_stat -c 25 0.2 The result is stored in a vm_stat.txt file within sysdiagnose report.
vmd
vmd # full_path = "/System/Library/PrivateFrameworks/VisualVoicemail.framework/vmd" runs_as = "mobile"
voiced
voiced # full_path = "/System/Library/PrivateFrameworks/VoiceServices.framework/Support/voiced" runs_as = "mobile"