Apple

ASPCarryLog

Apple

ASPCarryLog # full_path = "/usr/libexec/ASPCarryLog" runs_as = "root" ASPCarryLog gathers NAND Input Output command activity analysis (not actual IO data) on selected devices that agreed to share analytics with Apple.

AssetCacheLocatorService

Apple

AssetCacheLocatorService # full_path = "/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/AssetCacheLocatorService" runs_as = "mobile"

assistantd

Apple

assistantd # full_path = "/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd" runs_as = "mobile" Daemon that enables Siri features. The binary is a part of AssistantServices private framework.

atc

Apple

atc # full_path = "/usr/libexec/atc" runs_as = "mobile" Acronym for Air traffic Control. Manages network traffic (priorities, throttling etc.).

attributiond

Apple

attributiond # full_path = "/System/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Daemons/adattributiond" runs_as = "root" Daemon on an iPhone that is related to ad attribution, which is the process of determining which advertising campaign led to a user taking a specific action, such as installing an app

audioclocksyncd

Apple

audioclocksyncd # full_path = "/usr/libexec/audioclocksyncd" runs_as = "root" The audioclocksyncd executable is used for the management of Precision Time Protocol (IEEE 1588) clocks and the interface between applications and the clocks.

awdd

Apple

awdd # full_path = "/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd" runs_as = "_wireless" awdd is a system daemon that collects diagnostics and usage data locally for users that have opted in.

axassetsd

Apple

axassetsd # full_path = "/System/Library/PrivateFrameworks/AXAssetLoader.framework/Support/axassetsd" runs_as = "mobile" The binary is a part of AXAssetLoader private framework.

backboardd

Apple

backboardd # full_path = "/usr/libexec/backboardd" runs_as = "mobile" Handles HID events such as screen and button presses.