amfid #

 full_path = "/usr/libexec/amfid"
 runs_as = "root"

AppleMobileFileIntegrity daemon, checks for the integrity of files in the filesystem including code signature check to verify applications integrity