full_path = "/System/Library/PrivateFrameworks/MobileSoftwareUpdate.framework/XPCServices/com.apple.MobileSoftwareUpdate.CleanupPreparePathService.xpc/com.apple.MobileSoftwareUpdate.CleanupPreparePathService"
runs_as = "root"
full_path = "/System/Library/PrivateFrameworks/ClipServices.framework/clipserviced"
runs_as = "mobile"
full_path = "/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd"
runs_as = "mobile"
cloudd is the system daemon backing the CloudKit feature.
full_path = "/System/Library/Frameworks/Security.framework/CloudKeychainProxy.bundle/CloudKeychainProxy"
runs_as = "root"
CloudKeychainProxy part of iCloud keychain syncing.
full_path = "/usr/libexec/cloudpaird"
runs_as = "mobile"
cloudpaird is responsible to register the device for Handoff and Continuity after signing in to iCloud.
full_path = "/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent"
runs_as = "mobile"
Communications Filter Synchronization Agent service is not always running but runs when the network state changes. It seems to have something to do with communications. It does have proprietary certificates used only by Apple for internal communications. It runs from the read only, snapshot, signed, sealed System volume and cannot be modified.
The binary is a part of CommunicationsFilter private framework.
full_path = "/System/Library/DriverExtensions/com.apple.DriverKit-AppleBCMWLAN.dext/com.apple.DriverKit-AppleBCMWLAN"
runs_as = "_driverkit"
Seems to be a driver extention for AppleBCMWLAN hardware.
full_path = "/System/Library/PrivateFrameworks/TelephonyUtilities.framework/XPCServices/com.apple.FaceTime.FTConversationService.xpc/com.apple.FaceTime.FTConversationService"
runs_as = "mobile"
full_path = "/System/Library/PrivateFrameworks/MobileInstallation.framework/XPCServices/com.apple.MobileInstallationHelperService.xpc/com.apple.MobileInstallationHelperService"
runs_as = "root"
Part of Mobile installation private framework
relative_path = "logs/Networking/com.apple.networkextension.plist"
This file contains informations about iOS network extension encluding for exemple vpn configured on the device.