Apple

ASPCarryLog

ASPCarryLog #

 full_path = "/usr/libexec/ASPCarryLog"
 runs_as = "root"
  • ASPCarryLog gathers NAND Input Output command activity analysis (not actual IO data) on selected devices that agreed to share analytics with Apple.

AssetCacheLocatorService

AssetCacheLocatorService #

 full_path = "/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/AssetCacheLocatorService"
 runs_as = "mobile"

assistantd

assistantd #

 full_path = "/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd"
 runs_as = "mobile"

Daemon that enables Siri features.

The binary is a part of AssistantServices private framework.

atc

atc #

 full_path = "/usr/libexec/atc"
 runs_as = "mobile"

Acronym for Air traffic Control. Manages network traffic (priorities, throttling etc.).

attributiond

attributiond #

 full_path = "/System/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Daemons/adattributiond"
 runs_as = "root"
  • Daemon on an iPhone that is related to ad attribution, which is the process of determining which advertising campaign led to a user taking a specific action, such as installing an app

audioclocksyncd

audioclocksyncd #

 full_path = "/usr/libexec/audioclocksyncd"
 runs_as = "root"
  • The audioclocksyncd executable is used for the management of Precision Time Protocol (IEEE 1588) clocks and the interface between applications and the clocks.

awdd

awdd #

 full_path = "/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd"
 runs_as = "_wireless"

awdd is a system daemon that collects diagnostics and usage data locally for users that have opted in.

axassetsd

axassetsd #

 full_path = "/System/Library/PrivateFrameworks/AXAssetLoader.framework/Support/axassetsd"
 runs_as = "mobile"

The binary is a part of AXAssetLoader private framework.

backboardd

backboardd #

 full_path = "/usr/libexec/backboardd"
 runs_as = "mobile"

Handles HID events such as screen and button presses.