{ "title": "Mac processes list: macOS background processes in plain English", "source": "https://taskmanagermac.com/mac-processes/", "license": "CC BY 4.0, credit taskmanagermac.com with a link", "checked": "2026-10-07", "test_mac": { "macos": "27.0.1", "build": "26A434", "chip": "Apple M1 Pro", "model": "MacBookPro18,3", "ram_gb": 16 }, "fields": { "verdict": "leave = a lasting part of macOS, leave it running; settle = busy for a while, then stops on its own", "started": "keepalive = launchd restarts it when it exits; on_demand = launchd starts it when needed; xpc = started by the app or framework that uses it; empty = started another way or not on this Mac", "running": "running on the test Mac at the moment of the check", "found": "executable found on the test Mac" }, "rows": [ { "name": "AccessibilityUIServer", "friendly": "Accessibility", "category": "Keyboard, input and accessibility", "verdict": "leave", "what": "This shows accessibility controls on screen.", "path": "/System/Library/CoreServices/AccessibilityUIServer.app/Contents/MacOS/AccessibilityUIServer", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": true }, { "name": "accountsd", "friendly": "Accounts", "category": "iCloud and sync", "verdict": "leave", "what": "This keeps track of the accounts you've added, like iCloud, Google or Exchange.", "path": "/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd", "apple_signed": true, "launchd_label": "com.apple.accountsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "AddressBookSourceSync", "friendly": "Contacts", "category": "Messages, mail and contacts", "verdict": "settle", "what": "Contacts is syncing with your accounts. It stops when it's done.", "path": "/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookSourceSync.app/Contents/MacOS/AddressBookSourceSync", "apple_signed": true, "launchd_label": "com.apple.AddressBook.SourceSync", "launchd_kind": "agent", "started": "on_demand", "man": "Syncs Contacts data with servers.", "running": true, "found": true }, { "name": "addressbooksyncd", "friendly": "Contacts sync", "category": "Messages, mail and contacts", "verdict": "settle", "what": "This syncs your contacts. It stops when it's done.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "adid", "friendly": "Ad settings", "category": "Security and passwords", "verdict": "leave", "what": "This handles the advertising settings for Apple's own apps.", "path": "/System/Library/PrivateFrameworks/CoreADI.framework/adid", "apple_signed": true, "launchd_label": "com.apple.adid", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "AirPlayUIAgent", "friendly": "AirPlay", "category": "Sound, screen and camera", "verdict": "leave", "what": "This shows the AirPlay menu and AirPlay messages.", "path": "/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent", "apple_signed": true, "launchd_label": "com.apple.AirPlayUIAgent", "launchd_kind": "agent", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "AirPlayXPCHelper", "friendly": "AirPlay", "category": "Sound, screen and camera", "verdict": "leave", "what": "This sends your screen or sound to an AirPlay device.", "path": "/usr/libexec/AirPlayXPCHelper", "apple_signed": true, "launchd_label": "com.apple.AirPlayXPCHelper", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "airportd", "friendly": "Wi-Fi", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs Wi-Fi.", "path": "/usr/libexec/airportd", "apple_signed": true, "launchd_label": "com.apple.airportd", "launchd_kind": "daemon", "started": "on_demand", "man": "airport daemon", "running": true, "found": true }, { "name": "AKAuthorizationRemoteViewService", "friendly": "Sign in with Apple", "category": "Security and passwords", "verdict": "leave", "what": "This shows the Sign in with Apple window.", "path": "/System/Library/PrivateFrameworks/AuthKitUI.framework/Versions/A/XPCServices/AKAuthorizationRemoteViewService.xpc/Contents/MacOS/AKAuthorizationRemoteViewService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "akd", "friendly": "Apple Account", "category": "iCloud and sync", "verdict": "leave", "what": "This keeps you signed in to your Apple Account.", "path": "/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd", "apple_signed": true, "launchd_label": "com.apple.akd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "amfid", "friendly": "App security check", "category": "Security and passwords", "verdict": "leave", "what": "This checks that apps are properly signed and haven't been tampered with.", "path": "/usr/libexec/amfid", "apple_signed": true, "launchd_label": "com.apple.MobileFileIntegrity", "launchd_kind": "daemon", "started": "on_demand", "man": "The mobile file integrity daemon.", "running": true, "found": true }, { "name": "AMPDeviceDiscoveryAgent", "friendly": "iPhone sync", "category": "Sound, screen and camera", "verdict": "leave", "what": "This notices when an iPhone or iPad is connected, for syncing in Finder.", "path": "/System/Library/PrivateFrameworks/AMPDevices.framework/Versions/A/Support/AMPDeviceDiscoveryAgent", "apple_signed": true, "launchd_label": "com.apple.AMPDeviceDiscoveryAgent", "launchd_kind": "agent", "started": "on_demand", "man": "The discovery service for managing iOS/iPod device discovery", "running": true, "found": true }, { "name": "AMPDevicesAgent", "friendly": "iPhone sync", "category": "Network and nearby devices", "verdict": "settle", "what": "This syncs or backs up your iPhone or iPad with your Mac. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/AMPDevices.framework/Versions/A/Support/AMPDevicesAgent", "apple_signed": true, "launchd_label": "com.apple.AMPDevicesAgent", "launchd_kind": "agent", "started": "on_demand", "man": "The devices agent for managing iOS/iPod device syncing", "running": false, "found": true }, { "name": "AMPLibraryAgent", "friendly": "Music library", "category": "Sound, screen and camera", "verdict": "settle", "what": "This keeps your Music and TV libraries up to date. It stops on its own.", "path": "/System/Library/PrivateFrameworks/AMPLibrary.framework/Versions/A/Support/AMPLibraryAgent", "apple_signed": true, "launchd_label": "com.apple.AMPLibraryAgent", "launchd_kind": "agent", "started": "on_demand", "man": "The media library agent for Music.app and TV.app.", "running": false, "found": true }, { "name": "amsaccountsd", "friendly": "App Store account", "category": "Updates and App Store", "verdict": "leave", "what": "This keeps you signed in to the App Store and other Apple media services.", "path": "/System/Library/PrivateFrameworks/AppleMediaServices.framework/Resources/amsaccountsd", "apple_signed": true, "launchd_label": "com.apple.amsaccountsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "analyticsd", "friendly": "Analytics", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This collects anonymous usage and crash data, if you allowed sharing it with Apple. It's normally quiet.", "path": "/System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd", "apple_signed": true, "launchd_label": "com.apple.analyticsd", "launchd_kind": "daemon", "started": "on_demand", "man": "Diagnostics and Usage", "running": true, "found": true }, { "name": "aned", "friendly": "Neural Engine", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs your Mac's Neural Engine, the part of the chip used for AI features.", "path": "/usr/libexec/aned", "apple_signed": true, "launchd_label": "com.apple.aned", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "aneuserd", "friendly": "Neural Engine", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs your Mac's Neural Engine, the part of the chip used for AI features.", "path": "/usr/libexec/aneuserd", "apple_signed": true, "launchd_label": "com.apple.aneuserd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "apfsd", "friendly": "Disk", "category": "Disks, files and backup", "verdict": "leave", "what": "This looks after your Mac's disk, like its snapshots and free space.", "path": "/usr/libexec/apfsd", "apple_signed": true, "launchd_label": "com.apple.apfsd", "launchd_kind": "daemon", "started": "on_demand", "man": "APFS volume manager", "running": true, "found": true }, { "name": "appleaccountd", "friendly": "Apple Account", "category": "iCloud and sync", "verdict": "leave", "what": "This manages your Apple Account on this Mac.", "path": "/usr/libexec/appleaccountd", "apple_signed": true, "launchd_label": "com.apple.appleaccountd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "appleeventsd", "friendly": "App automation", "category": "Core macOS", "verdict": "leave", "what": "This lets apps control each other when you've allowed it, for AppleScript and automation.", "path": "/System/Library/CoreServices/appleeventsd", "apple_signed": true, "launchd_label": "com.apple.coreservices.appleevents", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "appleh13camerad", "friendly": "Camera", "category": "Sound, screen and camera", "verdict": "leave", "what": "This runs your Mac's built-in camera.", "path": "/usr/libexec/appleh13camerad", "apple_signed": true, "launchd_label": "com.apple.appleh13camerad", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "AppleSpell", "friendly": "Spelling", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This checks your spelling as you type.", "path": "/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell", "apple_signed": true, "launchd_label": "com.apple.applespell", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "AppSSOAgent", "friendly": "Work sign-in", "category": "Security and passwords", "verdict": "leave", "what": "This signs you in to work or school accounts once, for all your apps.", "path": "/System/Library/PrivateFrameworks/AppSSO.framework/Support/AppSSOAgent.app/Contents/MacOS/AppSSOAgent", "apple_signed": true, "launchd_label": "com.apple.AppSSOAgent.login", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "AppSSODaemon", "friendly": "Work sign-in", "category": "Security and passwords", "verdict": "leave", "what": "This signs you in to work or school accounts once, for all your apps.", "path": "/System/Library/PrivateFrameworks/AppSSO.framework/Support/AppSSODaemon", "apple_signed": true, "launchd_label": "com.apple.AppSSODaemon", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "appstoreagent", "friendly": "App Store", "category": "Updates and App Store", "verdict": "settle", "what": "The App Store is checking for or installing app updates. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/AppStoreDaemon.framework/Support/appstoreagent", "apple_signed": true, "launchd_label": "com.apple.appstoreagent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "appstored", "friendly": "App Store", "category": "Updates and App Store", "verdict": "settle", "what": "The App Store is checking for, downloading or installing apps and updates. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/AppStoreDaemon.framework/Support/appstored", "apple_signed": true, "launchd_label": "com.apple.appstored", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "apsd", "friendly": "Push notifications", "category": "iCloud and sync", "verdict": "leave", "what": "This receives notifications from Apple for your apps. It's normally quiet.", "path": "/System/Library/PrivateFrameworks/ApplePushService.framework/apsd", "apple_signed": true, "launchd_label": "com.apple.apsd", "launchd_kind": "daemon", "started": "on_demand", "man": "Apple Push Notification service daemon", "running": true, "found": true }, { "name": "ARDAgent", "friendly": "Remote management", "category": "Security and passwords", "verdict": "leave", "what": "This lets someone manage this Mac remotely, if Remote Management is turned on.", "path": "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent", "apple_signed": true, "launchd_label": "com.apple.RemoteDesktop.agent", "launchd_kind": "agent", "started": "on_demand", "man": "Apple Remote Desktop Agent", "running": false, "found": true }, { "name": "AssetCacheLocatorService", "friendly": "Shared downloads", "category": "Network and nearby devices", "verdict": "leave", "what": "This looks for a nearby Mac that shares downloads, if your network has one.", "path": "/System/Library/PrivateFrameworks/AssetCacheServices.framework/Versions/A/XPCServices/AssetCacheLocatorService.xpc/Contents/MacOS/AssetCacheLocatorService", "apple_signed": true, "launchd_label": "com.apple.AssetCacheLocatorService", "launchd_kind": "daemon", "started": "xpc", "man": "Service to find local macOS Content Caches", "running": true, "found": true }, { "name": "assistantd", "friendly": "Siri", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs Siri.", "path": "/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd", "apple_signed": true, "launchd_label": "com.apple.assistantd", "launchd_kind": "agent", "started": "on_demand", "man": "Siri Daemon.", "running": true, "found": true }, { "name": "audioaccessoryd", "friendly": "AirPods", "category": "Sound, screen and camera", "verdict": "leave", "what": "This handles AirPods features like automatic switching and battery level.", "path": "/System/Library/CoreServices/audioaccessoryd", "apple_signed": true, "launchd_label": "com.apple.BTServer.cloudpairing", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "audioanalyticsd", "friendly": "Sound levels", "category": "Sound, screen and camera", "verdict": "leave", "what": "This measures sound levels, for things like headphone volume warnings.", "path": "/usr/libexec/audioanalyticsd", "apple_signed": true, "launchd_label": "com.apple.audioanalyticsd", "launchd_kind": "daemon", "started": "on_demand", "man": "Audio Diagnostics and Usage Reporting", "running": true, "found": true }, { "name": "AudioComponentRegistrar", "friendly": "Audio plug-ins", "category": "Sound, screen and camera", "verdict": "settle", "what": "This finds the audio plug-ins on your Mac. It's busy for a moment after you install one.", "path": "/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar", "apple_signed": true, "launchd_label": "com.apple.audio.AudioComponentRegistrar", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "audiomxd", "friendly": "Sound routing", "category": "Sound, screen and camera", "verdict": "leave", "what": "This is part of how your Mac handles sound.", "path": "/usr/libexec/audiomxd", "apple_signed": true, "launchd_label": "com.apple.audiomxd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "authd", "friendly": "Admin password", "category": "Security and passwords", "verdict": "leave", "what": "This checks your admin password when something needs permission.", "path": "/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authd.xpc/Contents/MacOS/authd", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "AuthenticationServicesAgent", "friendly": "Passkeys and passwords", "category": "Security and passwords", "verdict": "leave", "what": "This handles Sign in with Apple, passkeys and password autofill.", "path": "/System/Cryptexes/App/usr/libexec/AuthenticationServicesAgent", "apple_signed": true, "launchd_label": "com.apple.AuthenticationServicesCore.AuthenticationServicesAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Authentication Services App Login Agent", "running": true, "found": true }, { "name": "autofsd", "friendly": "Network drives", "category": "Disks, files and backup", "verdict": "leave", "what": "This keeps network drives connected when your network changes.", "path": "/usr/libexec/autofsd", "apple_signed": true, "launchd_label": "com.apple.autofsd", "launchd_kind": "daemon", "started": "keepalive", "man": "daemon to update autofs mounts on network changes", "running": true, "found": true }, { "name": "automountd", "friendly": "Network drives", "category": "Disks, files and backup", "verdict": "leave", "what": "This connects network drives when you open them.", "path": "/usr/libexec/automountd", "apple_signed": true, "launchd_label": "com.apple.automountd", "launchd_kind": "daemon", "started": "on_demand", "man": "automatic mount / unmount daemon for autofs", "running": true, "found": true }, { "name": "avconferenced", "friendly": "Video calls", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This handles the sound and video for FaceTime calls.", "path": "/usr/libexec/avconferenced", "apple_signed": true, "launchd_label": "com.apple.videoconference.camera", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "axassetsd", "friendly": "Accessibility downloads", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This downloads files for accessibility features, like voices. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/AXAssetLoader.framework/Support/axassetsd", "apple_signed": true, "launchd_label": "com.apple.accessibility.axassetsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "BackgroundTaskManagementAgent", "friendly": "Login items", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This tells you when an app adds itself to open at login or run in the background.", "path": "/System/Library/PrivateFrameworks/BackgroundTaskManagement.framework/Support/BackgroundTaskManagementAgent.app/Contents/MacOS/BackgroundTaskManagementAgent", "apple_signed": true, "launchd_label": "com.apple.backgroundtaskmanagement.agent", "launchd_kind": "agent", "started": "on_demand", "man": "User agent which manages notifications about background task processes", "running": true, "found": true }, { "name": "backgroundtaskmanagementd", "friendly": "Login items", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This keeps track of apps that open at login or run in the background.", "path": "/System/Library/PrivateFrameworks/BackgroundTaskManagement.framework/Resources/backgroundtaskmanagementd", "apple_signed": true, "launchd_label": "com.apple.backgroundtaskmanagementd", "launchd_kind": "daemon", "started": "on_demand", "man": "Daemon which manages policy for background task processes and login items.", "running": true, "found": true }, { "name": "backupd", "friendly": "Time Machine", "category": "Disks, files and backup", "verdict": "settle", "what": "Time Machine is backing up your Mac. It stops when the backup is done.", "path": "/System/Library/CoreServices/TimeMachine/backupd", "apple_signed": true, "launchd_label": "com.apple.backupd", "launchd_kind": "daemon", "started": "on_demand", "man": "Time Machine backup daemon", "running": true, "found": true }, { "name": "backupd-helper", "friendly": "Time Machine", "category": "Disks, files and backup", "verdict": "settle", "what": "Time Machine is getting ready to back up your Mac. It stops when the backup is done.", "path": "/System/Library/CoreServices/TimeMachine/backupd-helper", "apple_signed": true, "launchd_label": "com.apple.backupd-helper", "launchd_kind": "daemon", "started": "on_demand", "man": "Time Machine backup daemon helper", "running": true, "found": true }, { "name": "bash", "friendly": "Terminal", "category": "Core macOS", "verdict": "leave", "what": "This runs the commands you type in a Terminal window.", "path": "/bin/bash", "apple_signed": true, "launchd_label": "com.apple.xpc.uscwoap", "launchd_kind": "daemon", "started": "on_demand", "man": "GNU Bourne-Again SHell", "running": false, "found": true }, { "name": "BiomeAgent", "friendly": "Activity history", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This keeps a private history of how you use your apps, for suggestions. It stays on your Mac.", "path": "/System/Library/PrivateFrameworks/BiomeStreams.framework/Support/BiomeAgent", "apple_signed": true, "launchd_label": "com.apple.BiomeAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Biome operation graph execution launch agent", "running": true, "found": true }, { "name": "biomed", "friendly": "Activity history", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This keeps a private history of how you use your apps so macOS can suggest things. It stays on your Mac.", "path": "/System/Library/PrivateFrameworks/BiomeStreams.framework/Support/biomed", "apple_signed": true, "launchd_label": "com.apple.biomed", "launchd_kind": "daemon", "started": "on_demand", "man": "Biome operation graph execution daemon", "running": true, "found": true }, { "name": "biomesyncd", "friendly": "Activity history sync", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This syncs your private suggestion history between your devices. It stops on its own.", "path": "/usr/libexec/biomesyncd", "apple_signed": true, "launchd_label": "com.apple.biomesyncd", "launchd_kind": "agent", "started": "on_demand", "man": "data synchronization daemon", "running": true, "found": true }, { "name": "biometrickitd", "friendly": "Touch ID", "category": "Security and passwords", "verdict": "leave", "what": "This reads your fingerprint for Touch ID.", "path": "/usr/libexec/biometrickitd", "apple_signed": true, "launchd_label": "com.apple.biometrickitd", "launchd_kind": "daemon", "started": "on_demand", "man": "biometric daemon", "running": true, "found": true }, { "name": "bird", "friendly": "iCloud Drive", "category": "iCloud and sync", "verdict": "settle", "what": "iCloud Drive is syncing your files. It stops when everything is up to date.", "path": "/System/Library/PrivateFrameworks/iCloudDriveCore.framework/Versions/A/Support/bird", "apple_signed": true, "launchd_label": "com.apple.bird", "launchd_kind": "agent", "started": "on_demand", "man": "Documents in the Cloud", "running": true, "found": true }, { "name": "bluetoothd", "friendly": "Bluetooth", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs Bluetooth for your headphones, mouse and keyboard.", "path": "/usr/sbin/bluetoothd", "apple_signed": true, "launchd_label": "com.apple.bluetoothd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "bluetoothuserd", "friendly": "Bluetooth", "category": "Sound, screen and camera", "verdict": "leave", "what": "This runs Bluetooth features for your account.", "path": "/usr/libexec/bluetoothuserd", "apple_signed": true, "launchd_label": "com.apple.bluetoothuserd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "BTLEServer", "friendly": "Bluetooth accessories", "category": "Sound, screen and camera", "verdict": "leave", "what": "This talks to Bluetooth accessories like fitness trackers and some keyboards.", "path": "/usr/sbin/BTLEServer", "apple_signed": true, "launchd_label": "com.apple.BTServer.le", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "BTLEServerAgent", "friendly": "Bluetooth accessories", "category": "Sound, screen and camera", "verdict": "leave", "what": "This talks to Bluetooth accessories like fitness trackers and some keyboards.", "path": "/usr/sbin/BTLEServerAgent", "apple_signed": true, "launchd_label": "com.apple.BTServer.le.agent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "caffeinate", "friendly": "Keep-awake command", "category": "Core macOS", "verdict": "leave", "what": "A Terminal command that keeps your Mac awake. It stops when that command ends.", "path": "/usr/bin/caffeinate", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "prevent the system from sleeping on behalf of a utility", "running": true, "found": true }, { "name": "calaccessd", "friendly": "Calendar", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This gives apps access to your calendars.", "path": "/System/Library/PrivateFrameworks/CalendarDaemon.framework/Support/calaccessd", "apple_signed": true, "launchd_label": "com.apple.calaccessd", "launchd_kind": "agent", "started": "on_demand", "man": "calendar data process", "running": true, "found": true }, { "name": "CalendarAgent", "friendly": "Calendar", "category": "Messages, mail and contacts", "verdict": "settle", "what": "Calendar is syncing your events. It stops when they're up to date.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "callservicesd", "friendly": "Phone calls", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This handles FaceTime and iPhone calls on your Mac.", "path": "/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd", "apple_signed": true, "launchd_label": "com.apple.telephonyutilities.callservicesd", "launchd_kind": "agent", "started": "on_demand", "man": "call server", "running": true, "found": true }, { "name": "cameracaptured", "friendly": "Camera", "category": "Sound, screen and camera", "verdict": "leave", "what": "This runs your camera for apps that use it.", "path": "/usr/libexec/cameracaptured", "apple_signed": true, "launchd_label": "com.apple.cameracaptured", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "cdpd", "friendly": "iCloud protection", "category": "Security and passwords", "verdict": "leave", "what": "This helps protect your iCloud data and account recovery.", "path": "/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd", "apple_signed": true, "launchd_label": "com.apple.cdpd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "cfprefsd", "friendly": "App settings", "category": "Core macOS", "verdict": "leave", "what": "This reads and saves the settings for every app. It gets busy when an app saves lots of settings.", "path": "/usr/sbin/cfprefsd", "apple_signed": true, "launchd_label": "com.apple.cfprefsd.xpc.daemon", "launchd_kind": "daemon", "started": "on_demand", "man": "defaults server", "running": true, "found": true }, { "name": "chronod", "friendly": "Widgets", "category": "Widgets and other apps", "verdict": "leave", "what": "This keeps your widgets up to date.", "path": "/System/Library/PrivateFrameworks/ChronoCore.framework/Support/chronod", "apple_signed": true, "launchd_label": "com.apple.chronod", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "cloudd", "friendly": "iCloud", "category": "iCloud and sync", "verdict": "settle", "what": "iCloud is syncing data for your apps, like notes, reminders and settings. It stops when everything is up to date.", "path": "/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd", "apple_signed": true, "launchd_label": "com.apple.cloudd", "launchd_kind": "daemon", "started": "on_demand", "man": "CloudKit", "running": true, "found": true }, { "name": "cloudpaird", "friendly": "Bluetooth pairing sync", "category": "Sound, screen and camera", "verdict": "leave", "what": "This shares AirPods and other Bluetooth pairings across your devices through iCloud.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": "cloudpaird daemon", "running": false, "found": false }, { "name": "cloudphotod", "friendly": "iCloud Photos", "category": "Photos and media", "verdict": "settle", "what": "Photos is uploading or downloading pictures with iCloud Photos. It stops when everything is in sync.", "path": "/System/Library/PrivateFrameworks/CloudPhotoLibrary.framework/Versions/A/Support/cloudphotod", "apple_signed": true, "launchd_label": "com.apple.cloudphotod", "launchd_kind": "agent", "started": "on_demand", "man": "The macOS iCloud Photos agent.", "running": true, "found": true }, { "name": "cloudtelemetryd", "friendly": "iCloud reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This sends iCloud problem reports, if you allowed it.", "path": "/System/Library/PrivateFrameworks/CloudTelemetry.framework/Support/cloudtelemetryd", "apple_signed": true, "launchd_label": "com.apple.cloudtelemetryd", "launchd_kind": "daemon", "started": "on_demand", "man": "Cloud Telemetry Daemon", "running": true, "found": true }, { "name": "com.apple.accessibility.mediaaccessibilityd", "friendly": "Captions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This handles captions and audio descriptions for videos.", "path": "/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.AmbientDisplayAgent", "friendly": "True Tone", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This adjusts your screen's colour to the light around you.", "path": "/System/Library/PrivateFrameworks/AmbientDisplay.framework/Versions/A/XPCServices/com.apple.AmbientDisplayAgent.xpc/Contents/MacOS/com.apple.AmbientDisplayAgent", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "com.apple.appkit.xpc.openAndSavePanelService", "friendly": "Open and Save window", "category": "Sound, screen and camera", "verdict": "leave", "what": "This draws the Open and Save windows for your apps.", "path": "/System/Library/Frameworks/AppKit.framework/Versions/C/XPCServices/com.apple.appkit.xpc.openAndSavePanelService.xpc/Contents/MacOS/com.apple.appkit.xpc.openAndSavePanelService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "com.apple.CallKit.CallDirectory", "friendly": "Caller ID", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This shows caller ID and blocked numbers from apps, for calls on your Mac.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "com.apple.CloudDocs.iCloudDriveFileProvider", "friendly": "iCloud Drive", "category": "Disks, files and backup", "verdict": "settle", "what": "iCloud Drive is syncing your files. It stops when everything is up to date.", "path": "/System/Library/PrivateFrameworks/CloudDocs.framework/PlugIns/com.apple.CloudDocs.iCloudDriveFileProvider.appex/Contents/MacOS/com.apple.CloudDocs.iCloudDriveFileProvider", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": true }, { "name": "com.apple.cmio.registerassistantservice", "friendly": "Camera setup", "category": "Sound, screen and camera", "verdict": "leave", "what": "This sets up cameras and video devices for apps.", "path": "/System/Library/Frameworks/CoreMediaIO.framework/Versions/A/Resources/com.apple.cmio.registerassistantservice", "apple_signed": true, "launchd_label": "com.apple.cmio.registerassistantservice", "launchd_kind": "daemon", "started": "on_demand", "man": "CoreMediaIO DAL Registration Assistant Service.", "running": true, "found": true }, { "name": "com.apple.CodeSigningHelper", "friendly": "App signature check", "category": "Updates and App Store", "verdict": "settle", "what": "This checks that an app really comes from its developer. It finishes quickly.", "path": "/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.CodeSigningHelper.xpc/Contents/MacOS/com.apple.CodeSigningHelper", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "com.apple.FaceTime.FTConversationService", "friendly": "FaceTime", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This handles group FaceTime and SharePlay.", "path": "/System/Library/PrivateFrameworks/TelephonyUtilities.framework/XPCServices/com.apple.FaceTime.FTConversationService.xpc/Contents/MacOS/com.apple.FaceTime.FTConversationService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.geod", "friendly": "Maps data", "category": "Widgets and other apps", "verdict": "settle", "what": "This downloads map data for Maps, Weather and Find My. It stops when the download is done.", "path": "/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "com.apple.hiservices-xpcservice", "friendly": "App services", "category": "Core macOS", "verdict": "leave", "what": "This helps apps with things like the Services menu and accessibility.", "path": "/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/XPCServices/com.apple.hiservices-xpcservice.xpc/Contents/MacOS/com.apple.hiservices-xpcservice", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "com.apple.MapKit.SnapshotService", "friendly": "Map pictures", "category": "Network and nearby devices", "verdict": "settle", "what": "This draws small map pictures for apps. It finishes quickly.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "com.apple.MobileInstallationHelperService", "friendly": "Installing", "category": "Updates and App Store", "verdict": "settle", "what": "This installs an app. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/MobileInstallation.framework/XPCServices/com.apple.MobileInstallationHelperService.xpc/Contents/MacOS/com.apple.MobileInstallationHelperService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.MobileSoftwareUpdate.UpdateBrainService", "friendly": "Software Update", "category": "Updates and App Store", "verdict": "settle", "what": "macOS is preparing an update. It stops when it's done.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "com.apple.Passwords.MenuBarExtra", "friendly": "Passwords", "category": "Security and passwords", "verdict": "leave", "what": "This is the Passwords icon in your menu bar.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": false }, { "name": "com.apple.quicklook.ThumbnailsAgent", "friendly": "File previews", "category": "Sound, screen and camera", "verdict": "settle", "what": "This makes thumbnail pictures of your files. It stops once they're made.", "path": "/System/Library/Frameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent", "apple_signed": true, "launchd_label": "com.apple.quicklook.ThumbnailsAgent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "com.apple.Safari.SafeBrowsing.Service", "friendly": "Safe Browsing", "category": "Safari and web pages", "verdict": "settle", "what": "This updates Safari's list of dangerous websites. It stops on its own.", "path": "/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/Versions/A/com.apple.Safari.SafeBrowsing.Service", "apple_signed": true, "launchd_label": "com.apple.Safari.SafeBrowsing.Service", "launchd_kind": "agent", "started": "on_demand", "man": "Safari Safe Browsing Service", "running": false, "found": true }, { "name": "com.apple.StreamingUnzipService", "friendly": "Unpacking", "category": "Updates and App Store", "verdict": "settle", "what": "This unpacks an app or update while it downloads. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/StreamingZip.framework/Versions/A/XPCServices/com.apple.StreamingUnzipService.xpc/Contents/MacOS/com.apple.StreamingUnzipService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.Virtualization.VirtualMachine", "friendly": "Virtual machine", "category": "Core macOS", "verdict": "leave", "what": "This is a virtual machine: another system, like Linux or a copy of macOS, running inside your Mac for an app such as Docker. Closing the app that started it stops it.", "path": "/System/Library/Frameworks/Virtualization.framework/Versions/A/XPCServices/com.apple.Virtualization.VirtualMachine.xpc/Contents/MacOS/com.apple.Virtualization.VirtualMachine", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.WebKit.GPU", "friendly": "Web page graphics", "category": "Safari and web pages", "verdict": "leave", "what": "This draws video and graphics for web pages. Closing busy tabs calms it down.", "path": "/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.GPU.xpc/Contents/MacOS/com.apple.WebKit.GPU", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.WebKit.Networking", "friendly": "Web page loading", "category": "Safari and web pages", "verdict": "leave", "what": "This loads web pages for Safari and other apps.", "path": "/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "com.apple.WebKit.WebContent", "friendly": "A web page", "category": "Safari and web pages", "verdict": "leave", "what": "This is a web page open in Safari or another app. A busy one is usually a page with video or ads, and closing that tab calms it down.", "path": "/System/Volumes/Preboot/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "CommCenter", "friendly": "iPhone calls and texts", "category": "Sound, screen and camera", "verdict": "leave", "what": "This handles calls and text messages that come through your iPhone.", "path": "/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter", "apple_signed": true, "launchd_label": "com.apple.CommCenter", "launchd_kind": "agent", "started": "on_demand", "man": "Provides functionality to allow the Mac to make and receive phone calls.", "running": true, "found": true }, { "name": "commerce", "friendly": "App Store purchases", "category": "Updates and App Store", "verdict": "leave", "what": "This handles App Store purchases. It's normally quiet.", "path": "/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/commerce", "apple_signed": true, "launchd_label": "com.apple.commerce", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "configd", "friendly": "Network settings", "category": "Core macOS", "verdict": "leave", "what": "This keeps track of your network and system settings.", "path": "/usr/libexec/configd", "apple_signed": true, "launchd_label": "com.apple.configd", "launchd_kind": "daemon", "started": "keepalive", "man": "System Configuration Daemon", "running": true, "found": true }, { "name": "contactsd", "friendly": "Contacts", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This gives apps access to your contacts.", "path": "/System/Library/Frameworks/Contacts.framework/Support/contactsd", "apple_signed": true, "launchd_label": "com.apple.contactsd", "launchd_kind": "agent", "started": "on_demand", "man": "contactsd daemon", "running": true, "found": true }, { "name": "containermanagerd", "friendly": "App storage", "category": "Core macOS", "verdict": "leave", "what": "This sets up private storage folders for your apps.", "path": "/usr/libexec/containermanagerd", "apple_signed": true, "launchd_label": "com.apple.containermanagerd", "launchd_kind": "agent", "started": "on_demand", "man": "Application and plug-in containerization management daemon", "running": true, "found": true }, { "name": "containermanagerd_system", "friendly": "App storage", "category": "Core macOS", "verdict": "leave", "what": "This sets up private storage folders for apps.", "path": "/usr/libexec/containermanagerd_system", "apple_signed": true, "launchd_label": "com.apple.containermanagerd.system", "launchd_kind": "daemon", "started": "on_demand", "man": "System container directory management daemon", "running": true, "found": true }, { "name": "ContainerMetadataExtractor", "friendly": "App info", "category": "Updates and App Store", "verdict": "settle", "what": "This reads information about newly installed apps. It finishes quickly.", "path": "/System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/ContainerMetadataExtractor.xpc/Contents/MacOS/ContainerMetadataExtractor", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "ContextStoreAgent", "friendly": "Suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This keeps track of what you're doing so macOS can make suggestions. It stays on your Mac.", "path": "/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/ContextStoreAgent", "apple_signed": true, "launchd_label": "com.apple.ContextStoreAgent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "contextstored", "friendly": "Suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This keeps track of what you're doing so macOS can make suggestions. It stays on your Mac.", "path": "/System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/contextstored", "apple_signed": true, "launchd_label": "com.apple.contextstored", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "ContinuityCaptureAgent", "friendly": "iPhone as webcam", "category": "Sound, screen and camera", "verdict": "leave", "what": "This lets you use your iPhone as a webcam.", "path": "/usr/libexec/ContinuityCaptureAgent", "apple_signed": true, "launchd_label": "com.apple.cmio.ContinuityCaptureAgent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "ControlCenter", "friendly": "Control Center", "category": "Core macOS", "verdict": "leave", "what": "This runs Control Center and many of the icons in your menu bar.", "path": "/System/Library/CoreServices/ControlCenter.app/Contents/MacOS/ControlCenter", "apple_signed": true, "launchd_label": "com.apple.controlcenter", "launchd_kind": "agent", "started": "on_demand", "man": "macOS Control Center", "running": true, "found": true }, { "name": "coreaudiod", "friendly": "Sound", "category": "Sound, screen and camera", "verdict": "leave", "what": "This plays all sound on your Mac.", "path": "/usr/sbin/coreaudiod", "apple_signed": true, "launchd_label": "com.apple.audio.coreaudiod", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "coreauthd", "friendly": "Touch ID and passwords", "category": "Security and passwords", "verdict": "leave", "what": "This handles Touch ID and password prompts.", "path": "/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd", "apple_signed": true, "launchd_label": "com.apple.CoreAuthentication.daemon", "launchd_kind": "daemon", "started": "on_demand", "man": "LocalAuthentication daemon and agent", "running": true, "found": true }, { "name": "corebrightnessd", "friendly": "Screen brightness", "category": "Sound, screen and camera", "verdict": "leave", "what": "This adjusts your screen brightness and Night Shift.", "path": "/usr/libexec/corebrightnessd", "apple_signed": true, "launchd_label": "com.apple.corebrightnessd", "launchd_kind": "daemon", "started": "keepalive", "man": "corebrightnessd daemon", "running": true, "found": true }, { "name": "CoreDeviceService", "friendly": "Connected devices", "category": "Sound, screen and camera", "verdict": "leave", "what": "This talks to connected iPhones and iPads, mostly for Xcode and Finder.", "path": "/Library/Developer/PrivateFrameworks/CoreDevice.framework/Versions/A/XPCServices/CoreDeviceService.xpc/Contents/MacOS/CoreDeviceService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "coreduetd", "friendly": "Background scheduler", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This helps macOS decide when to run background jobs and which apps to suggest.", "path": "/usr/libexec/coreduetd", "apple_signed": true, "launchd_label": "com.apple.coreduetd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "CoreLocationAgent", "friendly": "Location", "category": "Network and nearby devices", "verdict": "leave", "what": "This asks you before an app can use your location.", "path": "/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent", "apple_signed": true, "launchd_label": "com.apple.CoreLocationAgent", "launchd_kind": "agent", "started": "on_demand", "man": "manages location authorization prompts", "running": true, "found": true }, { "name": "coreservicesd", "friendly": "Core services", "category": "Core macOS", "verdict": "leave", "what": "This helps apps open files and find each other.", "path": "/System/Library/CoreServices/coreservicesd", "apple_signed": true, "launchd_label": "com.apple.coreservicesd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "CoreServicesUIAgent", "friendly": "Security prompts", "category": "Security and passwords", "verdict": "leave", "what": "This shows messages like \"Are you sure you want to open this app?\"", "path": "/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServicesUIAgent", "apple_signed": true, "launchd_label": "com.apple.coreservices.uiagent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "corespeechd", "friendly": "Siri listening", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This listens for \"Siri\" and handles voice features.", "path": "/System/Library/PrivateFrameworks/CoreSpeech.framework/corespeechd", "apple_signed": true, "launchd_label": "com.apple.corespeechd", "launchd_kind": "agent", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "corespeechd_system", "friendly": "Siri listening", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This listens for \"Siri\" and handles voice features.", "path": "/System/Library/PrivateFrameworks/CoreSpeech.framework/corespeechd_system", "apple_signed": true, "launchd_label": "com.apple.corespeechd_system", "launchd_kind": "daemon", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "corespotlightd", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight is indexing what's inside your apps, like notes and messages, so search can find them. It stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/corespotlightd", "apple_signed": true, "launchd_label": "com.apple.corespotlightd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "coresymbolicationd", "friendly": "Crash reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This turns crash reports into something readable. It's busy for a moment after a crash.", "path": "/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd", "apple_signed": true, "launchd_label": "com.apple.coresymbolicationd", "launchd_kind": "daemon", "started": "on_demand", "man": "daemon to manage debug symbols cache", "running": false, "found": true }, { "name": "countryd", "friendly": "Region", "category": "Network and nearby devices", "verdict": "leave", "what": "This works out which country your Mac is in, for things like Wi-Fi rules.", "path": "/usr/libexec/countryd", "apple_signed": true, "launchd_label": "com.apple.countryd", "launchd_kind": "daemon", "started": "on_demand", "man": "Listens for country-level information and makes that available to users of RegulatoryDomain.framework", "running": true, "found": true }, { "name": "CrashReporterSupportHelper", "friendly": "Crash reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This helps macOS write crash reports. It stops on its own.", "path": "/System/Library/CoreServices/CrashReporterSupportHelper", "apple_signed": true, "launchd_label": "com.apple.CrashReporterSupportHelper", "launchd_kind": "daemon", "started": "on_demand", "man": "Provides functionality in support of CrashReporterSupport", "running": true, "found": true }, { "name": "cron", "friendly": "Scheduled tasks", "category": "Core macOS", "verdict": "leave", "what": "This runs tasks that were set up to run at set times.", "path": "/usr/sbin/cron", "apple_signed": true, "launchd_label": "com.vix.cron", "launchd_kind": "daemon", "started": "on_demand", "man": "daemon to execute scheduled commands (Vixie Cron)", "running": true, "found": true }, { "name": "ctkahp", "friendly": "Smart cards", "category": "Security and passwords", "verdict": "leave", "what": "This handles smart cards and security keys, like a work ID card.", "path": "/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp", "apple_signed": true, "launchd_label": "com.apple.CryptoTokenKit.ahp", "launchd_kind": "daemon", "started": "on_demand", "man": "SmartCard Agent", "running": true, "found": true }, { "name": "ctkd", "friendly": "Smart cards", "category": "Security and passwords", "verdict": "leave", "what": "This handles smart cards and security keys, like a work ID card.", "path": "/System/Library/Frameworks/CryptoTokenKit.framework/ctkd", "apple_signed": true, "launchd_label": "com.apple.ctkd", "launchd_kind": "daemon", "started": "on_demand", "man": "SmartCard daemon/agent", "running": true, "found": true }, { "name": "cupsd", "friendly": "Printing", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This sends documents to your printer. It stops when printing is done.", "path": "/usr/sbin/cupsd", "apple_signed": null, "launchd_label": "org.cups.cupsd", "launchd_kind": "daemon", "started": "on_demand", "man": "cups scheduler", "running": false, "found": true }, { "name": "CursorUIViewService", "friendly": "Pointer", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This draws pointer effects, like the big pointer when you shake the mouse.", "path": "/System/Library/PrivateFrameworks/TextInputUIMacHelper.framework/Versions/A/XPCServices/CursorUIViewService.xpc/Contents/MacOS/CursorUIViewService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "CVMServer", "friendly": "Graphics setup", "category": "Spotlight and search", "verdict": "settle", "what": "This prepares graphics for apps that use older graphics code. It stops on its own.", "path": "/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer", "apple_signed": true, "launchd_label": "com.apple.cvmsServ", "launchd_kind": "daemon", "started": "on_demand", "man": "Mac OS X Core Virtual Machine Server", "running": true, "found": true }, { "name": "dasd", "friendly": "Background scheduler", "category": "Core macOS", "verdict": "leave", "what": "This decides when background jobs like backups and updates run, usually when your Mac is idle.", "path": "/usr/libexec/dasd", "apple_signed": true, "launchd_label": "com.apple.dasd", "launchd_kind": "daemon", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "deleted", "friendly": "Freeing space", "category": "Disks, files and backup", "verdict": "settle", "what": "macOS is clearing out caches and old files it doesn't need, to free up space. It stops on its own.", "path": "/System/Library/PrivateFrameworks/CacheDelete.framework/deleted", "apple_signed": true, "launchd_label": "com.apple.cache_delete", "launchd_kind": "agent", "started": "on_demand", "man": "The purgeable space / cache management daemon.", "running": true, "found": true }, { "name": "diagnosticd", "friendly": "Diagnostics", "category": "Core macOS", "verdict": "settle", "what": "This sends your Mac's activity log to a tool that is watching it, like Console. It stops when that tool is closed.", "path": "/usr/libexec/diagnosticd", "apple_signed": true, "launchd_label": "com.apple.diagnosticd", "launchd_kind": "daemon", "started": "on_demand", "man": "unified logging system diagnostic daemon", "running": false, "found": true }, { "name": "diskarbitrationd", "friendly": "Disks", "category": "Disks, files and backup", "verdict": "leave", "what": "This notices when disks and USB drives are plugged in and opens them.", "path": "/usr/libexec/diskarbitrationd", "apple_signed": true, "launchd_label": "com.apple.diskarbitrationd", "launchd_kind": "daemon", "started": "keepalive", "man": "disk arbitration daemon", "running": true, "found": true }, { "name": "diskimagesiod", "friendly": "Disk images", "category": "Disks, files and backup", "verdict": "settle", "what": "This opens a disk image (.dmg) file. It's busy while one is being read, then stops.", "path": "/usr/libexec/diskimagesiod", "apple_signed": true, "launchd_label": "com.apple.diskimagesiod", "launchd_kind": "daemon", "started": "on_demand", "man": "Handles I/O for disk images", "running": true, "found": true }, { "name": "diskmanagementd", "friendly": "Disk Utility", "category": "Disks, files and backup", "verdict": "settle", "what": "This helps Disk Utility change a disk. It stops when it's done.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "DiskUnmountWatcher", "friendly": "Disk ejecting", "category": "Disks, files and backup", "verdict": "leave", "what": "This watches for disks being ejected.", "path": "/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher", "apple_signed": true, "launchd_label": "com.apple.security.DiskUnmountWatcher", "launchd_kind": "agent", "started": "on_demand", "man": "watches for disk unmount and remove cached credentials", "running": true, "found": true }, { "name": "distnoted", "friendly": "App messages", "category": "Core macOS", "verdict": "leave", "what": "This passes messages between apps. It's normally quiet; if it stays busy, one of your apps is usually the cause.", "path": "/usr/sbin/distnoted", "apple_signed": true, "launchd_label": "com.apple.distnoted.xpc.daemon", "launchd_kind": "daemon", "started": "keepalive", "man": "distributed notification server", "running": true, "found": true }, { "name": "dmd", "friendly": "Device management", "category": "Widgets and other apps", "verdict": "leave", "what": "This applies device rules, like Screen Time limits or settings from your school or company.", "path": "/usr/libexec/dmd", "apple_signed": true, "launchd_label": "com.apple.dmd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "Dock", "friendly": "Dock", "category": "Core macOS", "verdict": "leave", "what": "This runs the Dock at the bottom of your screen.", "path": "/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock", "apple_signed": true, "launchd_label": "com.apple.Dock.agent", "launchd_kind": "agent", "started": "on_demand", "man": "Provides the Dock interface for the system", "running": true, "found": true }, { "name": "donotdisturbd", "friendly": "Focus", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This runs Focus and Do Not Disturb.", "path": "/System/Library/PrivateFrameworks/DoNotDisturbServer.framework/Support/donotdisturbd", "apple_signed": true, "launchd_label": "com.apple.donotdisturbd", "launchd_kind": "agent", "started": "on_demand", "man": "do dot disturb daemon", "running": true, "found": true }, { "name": "duetexpertd", "friendly": "App predictions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This predicts which apps you'll want next, for suggestions in Spotlight and elsewhere.", "path": "/usr/libexec/duetexpertd", "apple_signed": true, "launchd_label": "com.apple.duetexpertd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "eligibilityd", "friendly": "Feature availability", "category": "Widgets and other apps", "verdict": "leave", "what": "This checks which features your Mac and region can use.", "path": "/usr/libexec/eligibilityd", "apple_signed": true, "launchd_label": "com.apple.eligibilityd", "launchd_kind": "daemon", "started": "on_demand", "man": "eligibilityd - computes feature availability", "running": true, "found": true }, { "name": "endpointsecurityd", "friendly": "Security software", "category": "Security and passwords", "verdict": "leave", "what": "This lets security software watch for threats.", "path": "/usr/libexec/endpointsecurityd", "apple_signed": true, "launchd_label": "com.apple.endpointsecurity.endpointsecurityd", "launchd_kind": "daemon", "started": "on_demand", "man": "Daemon that manages user space components of the EndpointSecurity (ES) subsystem", "running": false, "found": true }, { "name": "eventkitsyncd", "friendly": "Calendar sync", "category": "Messages, mail and contacts", "verdict": "settle", "what": "This syncs your calendars and reminders. It stops when it's done.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "extensionkitservice", "friendly": "App add-ons", "category": "Core macOS", "verdict": "leave", "what": "This runs small add-ons that apps provide, like widgets and share options.", "path": "/System/Library/Frameworks/ExtensionFoundation.framework/Versions/A/XPCServices/extensionkitservice.xpc/Contents/MacOS/extensionkitservice", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "fairplayd", "friendly": "Media protection", "category": "Updates and App Store", "verdict": "leave", "what": "This unlocks music, films and apps you've bought so they can play.", "path": "/System/Library/PrivateFrameworks/CoreFP.framework/Versions/A/fairplayd", "apple_signed": true, "launchd_label": "com.apple.fairplayd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "familycircled", "friendly": "Family Sharing", "category": "Widgets and other apps", "verdict": "leave", "what": "This runs Family Sharing.", "path": "/System/Library/PrivateFrameworks/FamilyCircle.framework/Versions/A/Resources/familycircled", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": true }, { "name": "filecoordinationd", "friendly": "File safety", "category": "Core macOS", "verdict": "leave", "what": "This stops two apps from changing the same file at the same time.", "path": "/usr/sbin/filecoordinationd", "apple_signed": true, "launchd_label": "com.apple.FileCoordination", "launchd_kind": "daemon", "started": "on_demand", "man": "system-wide file access coordination", "running": true, "found": true }, { "name": "fileproviderd", "friendly": "Cloud files", "category": "iCloud and sync", "verdict": "settle", "what": "macOS is syncing files with iCloud Drive or another cloud folder like Dropbox or Google Drive. It stops when your files are up to date.", "path": "/System/Library/PrivateFrameworks/FileProvider.framework/Support/fileproviderd", "apple_signed": true, "launchd_label": "com.apple.FileProvider", "launchd_kind": "agent", "started": "on_demand", "man": "Part of File Coordination", "running": true, "found": true }, { "name": "Finder", "friendly": "Finder", "category": "Core macOS", "verdict": "leave", "what": "Finder shows your files and desktop. It restarts itself if closed.", "path": "/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder", "apple_signed": true, "launchd_label": "com.apple.Finder", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "findmydevice-user-agent", "friendly": "Find My", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets you find this Mac with Find My.", "path": "/usr/libexec/findmydevice-user-agent", "apple_signed": true, "launchd_label": "com.apple.icloud.findmydeviced.findmydevice-user-agent", "launchd_kind": "agent", "started": "on_demand", "man": "Find My Mac user agent", "running": true, "found": true }, { "name": "findmydeviced", "friendly": "Find My", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets you find this Mac with Find My.", "path": "/usr/libexec/findmydeviced", "apple_signed": true, "launchd_label": "com.apple.icloud.findmydeviced", "launchd_kind": "daemon", "started": "on_demand", "man": "Find My Mac daemon", "running": true, "found": true }, { "name": "findmylocateagent", "friendly": "Find My", "category": "Network and nearby devices", "verdict": "leave", "what": "This finds your devices and people for Find My.", "path": "/usr/libexec/findmylocateagent", "apple_signed": true, "launchd_label": "com.apple.findmy.findmylocateagent", "launchd_kind": "agent", "started": "on_demand", "man": "User agent for the Find My subsystem.", "running": true, "found": true }, { "name": "followupd", "friendly": "Setup reminders", "category": "Security and passwords", "verdict": "leave", "what": "This shows reminders to finish setting something up, like your Apple Account.", "path": "/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd", "apple_signed": true, "launchd_label": "com.apple.followupd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "fontd", "friendly": "Fonts", "category": "Keyboard, input and accessibility", "verdict": "settle", "what": "This manages the fonts on your Mac. It can get busy after you install fonts, then settles.", "path": "/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd", "apple_signed": true, "launchd_label": "com.apple.xtyped", "launchd_kind": "agent", "started": "on_demand", "man": "Mac OS X system font registration manager", "running": true, "found": true }, { "name": "fontservicesd", "friendly": "Fonts", "category": "Spotlight and search", "verdict": "leave", "what": "This manages the fonts on your Mac.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "fontworker", "friendly": "Fonts", "category": "Spotlight and search", "verdict": "settle", "what": "This prepares fonts for apps. It can get busy after you install fonts, then settles.", "path": "/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker", "apple_signed": true, "launchd_label": "com.apple.FontWorker", "launchd_kind": "agent", "started": "on_demand", "man": "Mac OS X system font registration and validation daemon", "running": true, "found": true }, { "name": "fseventsd", "friendly": "File tracking", "category": "Core macOS", "verdict": "settle", "what": "macOS is keeping track of files that changed. It calms down when copying or installing finishes.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd", "apple_signed": true, "launchd_label": "com.apple.fseventsd", "launchd_kind": "daemon", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "fskitd", "friendly": "Disk formats", "category": "Disks, files and backup", "verdict": "leave", "what": "This lets your Mac read disks in other formats.", "path": "/usr/libexec/fskitd", "apple_signed": true, "launchd_label": "com.apple.filesystems.fskitd", "launchd_kind": "daemon", "started": "on_demand", "man": "FSKit mount manager and mount support", "running": true, "found": true }, { "name": "gamecontrolleragentd", "friendly": "Game controllers", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This handles game controllers.", "path": "/usr/libexec/gamecontrolleragentd", "apple_signed": true, "launchd_label": "com.apple.GameController.gamecontrolleragentd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "gamecontrollerd", "friendly": "Game controllers", "category": "Network and nearby devices", "verdict": "leave", "what": "This handles game controllers.", "path": "/usr/libexec/gamecontrollerd", "apple_signed": true, "launchd_label": "com.apple.GameController.gamecontrollerd", "launchd_kind": "daemon", "started": "on_demand", "man": "game controller daemon", "running": true, "found": true }, { "name": "gamepolicyd", "friendly": "Game Mode", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This turns on Game Mode when you play a game full screen, so the game gets priority.", "path": "/usr/libexec/gamepolicyd", "apple_signed": true, "launchd_label": "com.apple.gamepolicyd", "launchd_kind": "daemon", "started": "on_demand", "man": "Optimizes system performance for running game processes.", "running": true, "found": true }, { "name": "generativeexperiencesd", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs Apple Intelligence features like Writing Tools.", "path": "/System/Library/PrivateFrameworks/GenerativeExperiencesRuntime.framework/Versions/A/generativeexperiencesd", "apple_signed": true, "launchd_label": "com.apple.generativeexperiencesd", "launchd_kind": "agent", "started": "on_demand", "man": "A daemon that powers generative experience.", "running": true, "found": true }, { "name": "geoanalyticsd", "friendly": "Maps reports", "category": "Network and nearby devices", "verdict": "settle", "what": "This sends anonymous Maps reports, if you allowed it. It stops on its own.", "path": "/System/Library/PrivateFrameworks/GeoAnalytics.framework/geoanalyticsd", "apple_signed": true, "launchd_label": "com.apple.geoanalyticsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "geod", "friendly": "Maps data", "category": "Widgets and other apps", "verdict": "settle", "what": "This downloads map data for Maps, Weather and Find My. It stops when the download is done.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "GSSCred", "friendly": "Network sign-in", "category": "Security and passwords", "verdict": "leave", "what": "This keeps you signed in to company or school networks.", "path": "/System/Library/Frameworks/GSS.framework/Helpers/GSSCred", "apple_signed": true, "launchd_label": "com.apple.GSSCred", "launchd_kind": "daemon", "started": "on_demand", "man": "manages GSS-API credentials", "running": false, "found": true }, { "name": "heard", "friendly": "Hearing features", "category": "Sound, screen and camera", "verdict": "leave", "what": "This runs hearing features for headphones and hearing devices.", "path": "/System/Library/PrivateFrameworks/HearingCore.framework/heard", "apple_signed": true, "launchd_label": "com.apple.accessibility.heard", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "helpd", "friendly": "Help pages", "category": "Spotlight and search", "verdict": "settle", "what": "This builds the help pages for your apps. It's busy for a moment after updates.", "path": "/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/helpd", "apple_signed": true, "launchd_label": "com.apple.helpd", "launchd_kind": "agent", "started": "on_demand", "man": "Help Daemon", "running": false, "found": true }, { "name": "hidd", "friendly": "Keyboard and mouse", "category": "Keyboard, input and accessibility", "verdict": "leave", "what": "This handles your keyboard, mouse and trackpad.", "path": "/usr/libexec/hidd", "apple_signed": true, "launchd_label": "com.apple.hidd", "launchd_kind": "daemon", "started": "on_demand", "man": "The HID library userland daemon.", "running": false, "found": true }, { "name": "homed", "friendly": "Home", "category": "Network and nearby devices", "verdict": "leave", "what": "This connects your Mac to your smart home accessories.", "path": "/System/Library/PrivateFrameworks/HomeKitDaemon.framework/Support/homed", "apple_signed": true, "launchd_label": "com.apple.homed", "launchd_kind": "agent", "started": "on_demand", "man": "home services daemon", "running": true, "found": true }, { "name": "icdd", "friendly": "Scanners and cameras", "category": "Sound, screen and camera", "verdict": "leave", "what": "This finds scanners and cameras for Image Capture.", "path": "/System/Library/Image Capture/Support/icdd", "apple_signed": true, "launchd_label": "com.apple.icdd", "launchd_kind": "agent", "started": "keepalive", "man": "ImageCapture Discovery Daemon", "running": true, "found": true }, { "name": "iconservicesagent", "friendly": "Icons", "category": "Core macOS", "verdict": "settle", "what": "This draws app and file icons. It gets busy after updates, then settles.", "path": "/System/Library/CoreServices/iconservicesagent", "apple_signed": true, "launchd_label": "com.apple.iconservices.iconservicesagent", "launchd_kind": "daemon", "started": "on_demand", "man": "agent responsible for generating icon images from the resources provided in application bundles and by the system.", "running": false, "found": true }, { "name": "iconservicesd", "friendly": "Icons", "category": "Core macOS", "verdict": "settle", "what": "This draws app and file icons. It gets busy after updates, then settles.", "path": "/System/Library/CoreServices/iconservicesd", "apple_signed": true, "launchd_label": "com.apple.iconservices.iconservicesd", "launchd_kind": "daemon", "started": "on_demand", "man": "deamon responsible for managing the shared icon cache.", "running": false, "found": true }, { "name": "identityservicesd", "friendly": "Messages and FaceTime", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This connects Messages and FaceTime to your Apple Account.", "path": "/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd", "apple_signed": true, "launchd_label": "com.apple.identityservicesd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "imagent", "friendly": "Messages", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This sends and receives your iMessages.", "path": "/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent", "apple_signed": true, "launchd_label": "com.apple.imagent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "imageplaygroundd", "friendly": "Image Playground", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This makes images for Image Playground and Genmoji.", "path": "/System/Library/PrivateFrameworks/SuggestedImage.framework/Support/imageplaygroundd", "apple_signed": true, "launchd_label": "com.apple.imageplaygroundd", "launchd_kind": "agent", "started": "on_demand", "man": "imageplaygroundd daemon", "running": false, "found": true }, { "name": "IMAutomaticHistoryDeletionAgent", "friendly": "Messages cleanup", "category": "Messages, mail and contacts", "verdict": "settle", "what": "This deletes old messages if you've set Messages to keep them for a limited time.", "path": "/System/Library/PrivateFrameworks/IMDPersistence.framework/IMAutomaticHistoryDeletionAgent.app/Contents/MacOS/IMAutomaticHistoryDeletionAgent", "apple_signed": true, "launchd_label": "com.apple.imautomatichistorydeletionagent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "IMDPersistenceAgent", "friendly": "Messages", "category": "Messages, mail and contacts", "verdict": "settle", "what": "This saves your messages on your Mac. It can get busy when lots of messages arrive at once, then settles.", "path": "/System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/Contents/MacOS/IMDPersistenceAgent", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "imklaunchagent", "friendly": "Typing", "category": "Keyboard, input and accessibility", "verdict": "leave", "what": "This starts input methods for typing emoji and other languages.", "path": "/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent", "apple_signed": true, "launchd_label": "com.apple.imklaunchagent", "launchd_kind": "agent", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "installd", "friendly": "Installing", "category": "Updates and App Store", "verdict": "settle", "what": "An app or update is being installed. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd", "apple_signed": true, "launchd_label": "com.apple.installd", "launchd_kind": "daemon", "started": "on_demand", "man": "macOS software installation daemon", "running": true, "found": true }, { "name": "installer", "friendly": "Installer", "category": "Updates and App Store", "verdict": "settle", "what": "An installer is running. It stops when it's done.", "path": "/usr/sbin/installer", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "system software and package installer tool.", "running": false, "found": true }, { "name": "intelligencecontextd", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This gives Apple Intelligence the context it needs, like what's on screen when you ask.", "path": "/System/Library/PrivateFrameworks/IntelligenceFlowContextRuntime.framework/Versions/A/intelligencecontextd", "apple_signed": true, "launchd_label": "com.apple.intelligencecontextd", "launchd_kind": "agent", "started": "on_demand", "man": "This is a daemon that retrieves contextual information from various sources.", "running": true, "found": true }, { "name": "intelligenceflowd", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This handles your Apple Intelligence requests.", "path": "/System/Library/PrivateFrameworks/IntelligenceFlowRuntime.framework/Versions/A/intelligenceflowd", "apple_signed": true, "launchd_label": "com.apple.intelligenceflowd", "launchd_kind": "agent", "started": "on_demand", "man": "A daemon that manages sessions for intelligence services.", "running": true, "found": true }, { "name": "IntelligencePlatformComputeService", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "Apple Intelligence is processing information on your Mac. It works mostly when your Mac is idle, and stops on its own.", "path": "/System/Library/PrivateFrameworks/IntelligencePlatformCompute.framework/Versions/A/XPCServices/IntelligencePlatformComputeService.xpc/Contents/MacOS/IntelligencePlatformComputeService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "intelligenceplatformd", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "Apple Intelligence is organising information on your Mac so it can help you. It works mostly when your Mac is idle, and stops on its own.", "path": "/System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/intelligenceplatformd", "apple_signed": true, "launchd_label": "com.apple.intelligenceplatformd", "launchd_kind": "agent", "started": "on_demand", "man": "A daemon that analyzes content on the device to build and query a general purpose knowledge graph.", "running": true, "found": true }, { "name": "itunescloudd", "friendly": "Music library sync", "category": "iCloud and sync", "verdict": "settle", "what": "This syncs your Music library with iCloud. It stops when everything is up to date.", "path": "/System/Library/PrivateFrameworks/iTunesCloud.framework/Support/itunescloudd", "apple_signed": true, "launchd_label": "com.apple.itunescloudd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "itunesstored", "friendly": "Apple media purchases", "category": "Updates and App Store", "verdict": "leave", "what": "This handles purchases from the iTunes Store, Apple Music and Apple TV.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "kdc", "friendly": "Sharing sign-in", "category": "Security and passwords", "verdict": "leave", "what": "This handles secure sign-in between Macs, for things like file and screen sharing.", "path": "/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc", "apple_signed": true, "launchd_label": "com.apple.Kerberos.kdc", "launchd_kind": "daemon", "started": "on_demand", "man": "Kerberos 5 server", "running": true, "found": true }, { "name": "kernel_task", "friendly": "macOS cooling", "category": "Core macOS", "verdict": "leave", "what": "This is the heart of macOS. When your Mac gets hot, it uses this to slow things down so it can cool off.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "KernelEventAgent", "friendly": "Disk warnings", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This shows warnings, like when a disk was removed without ejecting it.", "path": "/usr/sbin/KernelEventAgent", "apple_signed": true, "launchd_label": "com.apple.KernelEventAgent", "launchd_kind": "daemon", "started": "keepalive", "man": "utility to provide user interface on behalf of the kernel", "running": true, "found": true }, { "name": "kernelmanagerd", "friendly": "Drivers", "category": "Core macOS", "verdict": "leave", "what": "This loads the drivers for your hardware and accessories.", "path": "/usr/libexec/kernelmanagerd", "apple_signed": true, "launchd_label": "com.apple.kernelmanagerd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "keybagd", "friendly": "Encryption", "category": "Security and passwords", "verdict": "leave", "what": "This looks after the keys that keep your files encrypted.", "path": "/usr/libexec/keybagd", "apple_signed": true, "launchd_label": "com.apple.mobile.keybagd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "keyboardservicesd", "friendly": "Typing suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This learns words you type, for predictions and autocorrect. It stays on your Mac.", "path": "/usr/libexec/keyboardservicesd", "apple_signed": true, "launchd_label": "com.apple.keyboardservicesd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "Keychain Circle Notification", "friendly": "iCloud Keychain", "category": "Security and passwords", "verdict": "leave", "what": "This shows iCloud Keychain messages, like approving a new device.", "path": "/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification", "apple_signed": true, "launchd_label": "com.apple.security.keychain-circle-notification", "launchd_kind": "agent", "started": "on_demand", "man": "Part of iCloud Keychain syncing.", "running": true, "found": true }, { "name": "knowledge-agent", "friendly": "Suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This keeps a private record of how you use your Mac so it can suggest things. It stays on your Mac and settles on its own.", "path": "/usr/libexec/knowledge-agent", "apple_signed": true, "launchd_label": "com.apple.knowledge-agent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "KonaSynthesizer", "friendly": "Spoken voices", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This reads text out loud, for Siri and read-aloud features. It stops when it's done talking.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "languageassetd", "friendly": "Language files", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This downloads language files for dictation, translation and typing. It stops when it's done.", "path": "/usr/libexec/languageassetd", "apple_signed": true, "launchd_label": "com.apple.languageassetd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "launchd", "friendly": "macOS", "category": "Core macOS", "verdict": "leave", "what": "This starts and stops everything on your Mac.", "path": "/sbin/launchd", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "System wide and per-user daemon/agent manager", "running": true, "found": true }, { "name": "launchservicesd", "friendly": "App list", "category": "Core macOS", "verdict": "leave", "what": "This keeps track of your apps and which app opens which kind of file.", "path": "/System/Library/CoreServices/launchservicesd", "apple_signed": true, "launchd_label": "com.apple.coreservices.launchservicesd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "linkd", "friendly": "Shortcuts actions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This lets Siri and Shortcuts use actions from your apps.", "path": "/usr/libexec/linkd", "apple_signed": true, "launchd_label": "com.apple.linkd", "launchd_kind": "agent", "started": "on_demand", "man": "daemon that handles interaction with applications via their App Intents interfaces.", "running": true, "found": true }, { "name": "liveactivitiesd", "friendly": "Live Activities", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This shows Live Activities from your iPhone, like a delivery or a game score.", "path": "/System/Library/PrivateFrameworks/SessionCore.framework/Support/liveactivitiesd", "apple_signed": true, "launchd_label": "com.apple.liveactivitiesd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "LocalAuthenticationRemoteService", "friendly": "Touch ID prompts", "category": "Security and passwords", "verdict": "leave", "what": "This shows Touch ID and password prompts for apps.", "path": "/System/Library/PrivateFrameworks/LocalAuthenticationUI.framework/Versions/A/XPCServices/LocalAuthenticationRemoteService.xpc/Contents/MacOS/LocalAuthenticationRemoteService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "localspeechrecognition", "friendly": "Dictation", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This turns speech into text on your Mac, for dictation and apps that listen. It stops when the listening stops.", "path": "/System/Library/Frameworks/Speech.framework/Versions/A/XPCServices/localspeechrecognition.xpc/Contents/MacOS/localspeechrecognition", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "locationd", "friendly": "Location", "category": "Network and nearby devices", "verdict": "leave", "what": "This works out where your Mac is for apps you've allowed, like Maps and Weather.", "path": "/usr/libexec/locationd", "apple_signed": true, "launchd_label": "com.apple.locationd", "launchd_kind": "daemon", "started": "on_demand", "man": "location services daemon", "running": true, "found": true }, { "name": "logd", "friendly": "System log", "category": "Core macOS", "verdict": "leave", "what": "This writes your Mac's activity log. It gets busy when an app writes too much to it.", "path": "/usr/libexec/logd", "apple_signed": true, "launchd_label": "com.apple.logd", "launchd_kind": "daemon", "started": "keepalive", "man": "unified logging system daemon", "running": true, "found": true }, { "name": "login", "friendly": "Terminal session", "category": "Core macOS", "verdict": "leave", "what": "This signs you in when a Terminal window opens.", "path": "/usr/bin/login", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "log into the computer", "running": true, "found": true }, { "name": "logind", "friendly": "Login sessions", "category": "Core macOS", "verdict": "leave", "what": "This keeps track of who is logged in.", "path": "/System/Library/CoreServices/logind", "apple_signed": true, "launchd_label": "com.apple.logind", "launchd_kind": "daemon", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "loginwindow", "friendly": "Your login", "category": "Core macOS", "verdict": "leave", "what": "This runs the login screen and keeps you logged in. Closing it would log you out.", "path": "/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow", "apple_signed": true, "launchd_label": "com.apple.loginwindow", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "lsd", "friendly": "App list", "category": "Core macOS", "verdict": "leave", "what": "This keeps track of which app opens which kind of file.", "path": "/usr/libexec/lsd", "apple_signed": true, "launchd_label": "com.apple.lsd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "MacinTalkAUSP", "friendly": "Spoken voices", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This reads text out loud with a system voice. It stops when it's done talking.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "maild", "friendly": "Mail", "category": "Messages, mail and contacts", "verdict": "settle", "what": "Mail is downloading or sorting your email in the background. It stops when your mailbox is up to date.", "path": "/System/Library/PrivateFrameworks/EmailDaemon.framework/Versions/A/maild", "apple_signed": true, "launchd_label": "com.apple.email.maild", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "managedcorespotlightd", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "This is part of Spotlight, the search on your Mac. It stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/managedcorespotlightd", "apple_signed": true, "launchd_label": "com.apple.managedcorespotlightd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "mdbulkimport", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight is reading a big batch of files so search can find them. It stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdbulkimport", "apple_signed": true, "launchd_label": "com.apple.metadata.mdbulkimport", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mDNSResponder", "friendly": "Network", "category": "Network and nearby devices", "verdict": "leave", "what": "This finds websites and devices on your network. It gets busy when apps make lots of connections.", "path": "/usr/sbin/mDNSResponder", "apple_signed": true, "launchd_label": "com.apple.mDNSResponder.reloaded", "launchd_kind": "daemon", "started": "on_demand", "man": "Multicast and Unicast DNS daemon", "running": true, "found": true }, { "name": "mDNSResponderHelper", "friendly": "Network", "category": "Network and nearby devices", "verdict": "leave", "what": "This helps find websites and devices on your network.", "path": "/usr/sbin/mDNSResponderHelper", "apple_signed": true, "launchd_label": "com.apple.mDNSResponderHelper.reloaded", "launchd_kind": "daemon", "started": "on_demand", "man": "mDNS privilege separation helper", "running": true, "found": true }, { "name": "mds", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight, the search on your Mac, is sorting your files so you can find them. This is normal after an update or when you add lots of files, and it stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mds", "apple_signed": true, "launchd_label": "com.apple.metadata.mds", "launchd_kind": "daemon", "started": "keepalive", "man": "metadata server", "running": true, "found": true }, { "name": "mds_stores", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight, the search on your Mac, is sorting your files so you can find them. This is normal after an update or when you add lots of files, and it stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mds_stores", "apple_signed": true, "launchd_label": "com.apple.metadata.mds.index", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mdworker", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight, the search on your Mac, is sorting your files so you can find them. This is normal after an update or when you add lots of files, and it stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdworker", "apple_signed": true, "launchd_label": "com.apple.metadata.mds.spindump", "launchd_kind": "daemon", "started": "on_demand", "man": "metadata server worker", "running": false, "found": true }, { "name": "mdworker_shared", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "Spotlight, the search on your Mac, is sorting your files so you can find them. This is normal after an update or when you add lots of files, and it stops on its own.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdworker_shared", "apple_signed": true, "launchd_label": "com.apple.mdworker.shared", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mdwrite", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "This is part of Spotlight, the search on your Mac. It finishes quickly.", "path": "/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdwrite", "apple_signed": true, "launchd_label": "com.apple.metadata.mdwrite", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mediaanalysisd", "friendly": "Photos", "category": "Photos and media", "verdict": "settle", "what": "macOS is looking through your photos and videos so you can search for what's in them, like \"dog\" or \"beach\". It stops on its own, mostly when your Mac is idle.", "path": "/System/Library/PrivateFrameworks/MediaAnalysis.framework/Versions/A/mediaanalysisd", "apple_signed": true, "launchd_label": "com.apple.mediaanalysisd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mediaremoted", "friendly": "Now Playing", "category": "Sound, screen and camera", "verdict": "leave", "what": "This controls what's playing, for the Now Playing menu and media keys.", "path": "/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted", "apple_signed": true, "launchd_label": "com.apple.mediaremoted", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "MIDIServer", "friendly": "Music keyboards", "category": "Sound, screen and camera", "verdict": "leave", "what": "This connects music keyboards and other MIDI devices.", "path": "/System/Library/Frameworks/CoreMIDI.framework/MIDIServer", "apple_signed": true, "launchd_label": "com.apple.midiserver", "launchd_kind": "agent", "started": "on_demand", "man": "Agent supporting CoreMIDI framework.", "running": false, "found": true }, { "name": "migrationhelper", "friendly": "Moving your data", "category": "Updates and App Store", "verdict": "settle", "what": "This helps move your data after a macOS update or Migration Assistant. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/SystemMigrationNetwork.framework/Resources/migrationhelper", "apple_signed": true, "launchd_label": "com.apple.installandsetup.migrationhelper.user", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mlhostd", "friendly": "On-device AI", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This runs on-device AI models for apps. It stops when they're done.", "path": "/usr/libexec/mlhostd", "apple_signed": true, "launchd_label": "com.apple.mlhostd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "mobileassetd", "friendly": "Extra downloads", "category": "Updates and App Store", "verdict": "settle", "what": "macOS is downloading extra parts it needs, like voices, fonts or dictionaries. It stops when the download finishes.", "path": "/usr/libexec/mobileassetd", "apple_signed": true, "launchd_label": "com.apple.mobileassetd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "mobiletimerd", "friendly": "Alarms and timers", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This runs alarms and timers from the Clock app.", "path": "/System/Library/PrivateFrameworks/MobileTimer.framework/Executables/mobiletimerd", "apple_signed": true, "launchd_label": "com.apple.mobiletimerd", "launchd_kind": "agent", "started": "on_demand", "man": "timer agent", "running": true, "found": true }, { "name": "modelcatalogd", "friendly": "AI models", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This keeps track of which on-device AI models are installed.", "path": "/System/Library/PrivateFrameworks/ModelCatalogRuntime.framework/Versions/A/modelcatalogd", "apple_signed": true, "launchd_label": "com.apple.modelcatalogd", "launchd_kind": "daemon", "started": "on_demand", "man": "A daemon that stores base models and adapters.", "running": true, "found": true }, { "name": "modelmanagerd", "friendly": "Apple Intelligence", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This loads the on-device AI models when an app uses Apple Intelligence.", "path": "/usr/libexec/modelmanagerd", "apple_signed": true, "launchd_label": "com.apple.modelmanagerd", "launchd_kind": "daemon", "started": "on_demand", "man": "Model Management Daemon", "running": true, "found": true }, { "name": "MTLAssetUpgraderD", "friendly": "Graphics setup", "category": "Sound, screen and camera", "verdict": "settle", "what": "This updates graphics files after a macOS update. It stops when it's done.", "path": "/usr/libexec/MTLAssetUpgraderD", "apple_signed": true, "launchd_label": "com.apple.MTLAssetUpgraderD", "launchd_kind": "agent", "started": "on_demand", "man": "Metal asset upgrader daemon", "running": false, "found": true }, { "name": "MTLCompilerService", "friendly": "Graphics setup", "category": "Sound, screen and camera", "verdict": "settle", "what": "macOS is preparing graphics for your apps. It's busy for a while after an update, then stops.", "path": "/System/Library/Frameworks/Metal.framework/Versions/A/XPCServices/MTLCompilerService.xpc/Contents/MacOS/MTLCompilerService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "nanoappregistryd", "friendly": "Apple Watch", "category": "Sound, screen and camera", "verdict": "leave", "what": "This connects your Mac to your Apple Watch.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "nanotimekitcompaniond", "friendly": "Apple Watch", "category": "Sound, screen and camera", "verdict": "leave", "what": "This connects your Mac to your Apple Watch.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "navd", "friendly": "Leave-time alerts", "category": "Network and nearby devices", "verdict": "leave", "what": "This works out when you should leave for calendar events, using traffic from Maps.", "path": "/System/Library/CoreServices/navd", "apple_signed": true, "launchd_label": "com.apple.navd", "launchd_kind": "agent", "started": "on_demand", "man": "Time to Leave Daemon", "running": false, "found": true }, { "name": "neagent", "friendly": "VPN", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs VPN and network filter apps.", "path": "/usr/libexec/neagent", "apple_signed": true, "launchd_label": "com.apple.neagent", "launchd_kind": "agent", "started": "on_demand", "man": "Host process for Network Extension plugins", "running": true, "found": true }, { "name": "nearbyd", "friendly": "Nearby devices", "category": "Network and nearby devices", "verdict": "leave", "what": "This finds nearby Apple devices for things like AirDrop and Find My.", "path": "/usr/libexec/nearbyd", "apple_signed": true, "launchd_label": "com.apple.nearbyd", "launchd_kind": "daemon", "started": "on_demand", "man": "The proximity daemon", "running": true, "found": true }, { "name": "nehelper", "friendly": "VPN", "category": "Network and nearby devices", "verdict": "leave", "what": "This helps set up VPNs and network filters.", "path": "/usr/libexec/nehelper", "apple_signed": true, "launchd_label": "com.apple.nehelper", "launchd_kind": "daemon", "started": "on_demand", "man": "Helper daemon for the Network Extension framework", "running": true, "found": true }, { "name": "nesessionmanager", "friendly": "VPN", "category": "Network and nearby devices", "verdict": "leave", "what": "This keeps your VPN or network filter connected.", "path": "/usr/libexec/nesessionmanager", "apple_signed": true, "launchd_label": "com.apple.nesessionmanager", "launchd_kind": "daemon", "started": "on_demand", "man": "Daemon responsible for running and managing Network Extension sessions", "running": true, "found": true }, { "name": "netbiosd", "friendly": "Windows network names", "category": "Network and nearby devices", "verdict": "leave", "what": "This finds Windows computers and shared folders on your network.", "path": "/usr/sbin/netbiosd", "apple_signed": true, "launchd_label": "com.apple.netbiosd", "launchd_kind": "daemon", "started": "on_demand", "man": "NetBIOS protocol daemon", "running": true, "found": true }, { "name": "networkserviceproxy", "friendly": "Private Relay", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs iCloud Private Relay, which hides your internet address in Safari.", "path": "/usr/libexec/networkserviceproxy", "apple_signed": true, "launchd_label": "com.apple.networkserviceproxy", "launchd_kind": "agent", "started": "on_demand", "man": "Transparent network proxy for Apple system services", "running": true, "found": true }, { "name": "newsd", "friendly": "Apple News", "category": "Widgets and other apps", "verdict": "settle", "what": "This updates Apple News in the background. It stops on its own.", "path": "/System/Library/PrivateFrameworks/NewsDaemon.framework/newsd", "apple_signed": true, "launchd_label": "com.apple.newsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "NotificationCenter", "friendly": "Notifications", "category": "Core macOS", "verdict": "leave", "what": "This shows your notifications and widgets.", "path": "/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter", "apple_signed": true, "launchd_label": "com.apple.notificationcenterui.agent", "launchd_kind": "agent", "started": "keepalive", "man": "Notification Center service for display notifications", "running": true, "found": true }, { "name": "notifyd", "friendly": "System messages", "category": "Core macOS", "verdict": "leave", "what": "This passes small messages between parts of macOS, like \"the network changed\".", "path": "/usr/sbin/notifyd", "apple_signed": true, "launchd_label": "com.apple.notifyd", "launchd_kind": "daemon", "started": "on_demand", "man": "notification server", "running": true, "found": true }, { "name": "NPKCompanionAgent", "friendly": "Apple Watch", "category": "Sound, screen and camera", "verdict": "leave", "what": "This connects your Mac to your Apple Watch, for things like Apple Pay.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "nsurlsessiond", "friendly": "Background downloads", "category": "iCloud and sync", "verdict": "settle", "what": "macOS is downloading something in the background, often for iCloud or an app. It stops when the download finishes.", "path": "/usr/libexec/nsurlsessiond", "apple_signed": true, "launchd_label": "com.apple.nsurlsessiond_privileged", "launchd_kind": "daemon", "started": "on_demand", "man": "The background NSURLSession daemon", "running": true, "found": true }, { "name": "opendirectoryd", "friendly": "User accounts", "category": "Security and passwords", "verdict": "leave", "what": "This keeps track of the user accounts on your Mac.", "path": "/usr/libexec/opendirectoryd", "apple_signed": true, "launchd_label": "com.apple.opendirectoryd", "launchd_kind": "daemon", "started": "keepalive", "man": "is a launchd(8) job for client access to local or remote directory systems", "running": true, "found": true }, { "name": "osanalyticshelper", "friendly": "Crash reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This helps write crash and diagnostic reports. It stops on its own.", "path": "/System/Library/CoreServices/osanalyticshelper", "apple_signed": true, "launchd_label": "com.apple.osanalytics.osanalyticshelper", "launchd_kind": "daemon", "started": "on_demand", "man": "Helper process for analytics and diagnostics", "running": true, "found": true }, { "name": "parsecd", "friendly": "Search suggestions", "category": "Spotlight and search", "verdict": "leave", "what": "This fetches suggestions from Apple for Spotlight, Safari and Siri.", "path": "/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd", "apple_signed": true, "launchd_label": "com.apple.parsecd", "launchd_kind": "agent", "started": "on_demand", "man": "Support daemon for Siri Search", "running": false, "found": true }, { "name": "passd", "friendly": "Wallet and Apple Pay", "category": "Security and passwords", "verdict": "leave", "what": "This runs Wallet and Apple Pay.", "path": "/System/Library/PrivateFrameworks/PassKitCore.framework/passd", "apple_signed": true, "launchd_label": "com.apple.passd", "launchd_kind": "agent", "started": "on_demand", "man": "Apple Pay & Wallet daemon", "running": true, "found": true }, { "name": "PasswordBreachAgent", "friendly": "Password check", "category": "Security and passwords", "verdict": "settle", "what": "This checks, privately, whether any saved password showed up in a known data leak. It stops on its own.", "path": "/System/Volumes/Preboot/Cryptexes/App/usr/libexec/PasswordBreachAgent", "apple_signed": true, "launchd_label": "com.apple.Safari.PasswordBreachAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Leaked Password Warning Agent", "running": false, "found": true }, { "name": "passwordbreachd", "friendly": "Password check", "category": "Security and passwords", "verdict": "settle", "what": "This checks, privately, whether any saved password showed up in a known data leak. It stops on its own.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "pboard", "friendly": "Copy and paste", "category": "Core macOS", "verdict": "leave", "what": "This runs copy and paste.", "path": "/usr/libexec/pboard", "apple_signed": true, "launchd_label": "com.apple.pboard", "launchd_kind": "agent", "started": "on_demand", "man": "pasteboard server", "running": true, "found": true }, { "name": "pbs", "friendly": "Services menu", "category": "Core macOS", "verdict": "leave", "what": "This helps with the Services menu and copying between apps.", "path": "/System/Library/CoreServices/pbs", "apple_signed": true, "launchd_label": "com.apple.pbs", "launchd_kind": "agent", "started": "on_demand", "man": "general helper tool", "running": true, "found": true }, { "name": "peopled", "friendly": "People suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This works out who you talk to most, for suggestions when you share. It stays on your Mac.", "path": "/System/Library/PrivateFrameworks/People.framework/peopled", "apple_signed": true, "launchd_label": "com.apple.peopled", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "PerfPowerServices", "friendly": "Energy measuring", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This measures how much energy apps use.", "path": "/usr/libexec/PerfPowerServices", "apple_signed": true, "launchd_label": "com.apple.PerfPowerServices", "launchd_kind": "daemon", "started": "keepalive", "man": "manages structured log archives that enable retrieval of system power and performance data.", "running": true, "found": true }, { "name": "photoanalysisd", "friendly": "Photos", "category": "Photos and media", "verdict": "settle", "what": "Photos is scanning your pictures to find people, places and memories. It stops on its own, and works faster when your Mac is plugged in.", "path": "/System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd", "apple_signed": true, "launchd_label": "com.apple.photoanalysisd", "launchd_kind": "agent", "started": "on_demand", "man": "The macOS photo library analysis agent.", "running": true, "found": true }, { "name": "photolibraryd", "friendly": "Photos", "category": "Photos and media", "verdict": "settle", "what": "Photos is keeping your photo library up to date, often while it syncs with iCloud. It stops on its own.", "path": "/System/Library/PrivateFrameworks/PhotoLibraryServices.framework/Versions/A/Support/photolibraryd", "apple_signed": true, "launchd_label": "com.apple.photolibraryd", "launchd_kind": "agent", "started": "on_demand", "man": "The macOS photo library agent.", "running": true, "found": true }, { "name": "pkd", "friendly": "Add-on manager", "category": "Core macOS", "verdict": "leave", "what": "This keeps track of the add-ons and extensions apps install.", "path": "/usr/libexec/pkd", "apple_signed": true, "launchd_label": "com.apple.pluginkit.pkd", "launchd_kind": "agent", "started": "on_demand", "man": "management and supervision daemon for plug-in services", "running": true, "found": true }, { "name": "PowerChime", "friendly": "Charging sound", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This plays the sound when you plug in the charger.", "path": "/System/Library/CoreServices/PowerChime.app/Contents/MacOS/PowerChime", "apple_signed": true, "launchd_label": "com.apple.powerchime", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "powerd", "friendly": "Power", "category": "Core macOS", "verdict": "leave", "what": "This manages sleep, battery and power settings.", "path": "/System/Library/CoreServices/powerd.bundle/powerd", "apple_signed": true, "launchd_label": "com.apple.powerd", "launchd_kind": "daemon", "started": "keepalive", "man": "Daemon that manages Energy Preferences.", "running": true, "found": true }, { "name": "powerexperienced", "friendly": "Battery care", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This runs battery features like Optimised Battery Charging.", "path": "/usr/libexec/powerexperienced", "apple_signed": true, "launchd_label": "com.apple.powerexperienced", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "privacyaccountingd", "friendly": "Privacy report", "category": "Security and passwords", "verdict": "leave", "what": "This keeps the record behind the privacy report in Settings.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "promotedcontentd", "friendly": "Apple's ads", "category": "Widgets and other apps", "verdict": "leave", "what": "This picks the ads shown in Apple's own apps, like the App Store and News.", "path": "/usr/libexec/promotedcontentd", "apple_signed": true, "launchd_label": "com.apple.ap.promotedcontentd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "QLPreviewGenerationExtension", "friendly": "File previews", "category": "Sound, screen and camera", "verdict": "settle", "what": "This makes preview pictures of your files. It stops once the previews are made.", "path": "/System/Library/Frameworks/QuickLookUI.framework/Versions/A/PlugIns/QLPreviewGenerationExtension.appex/Contents/MacOS/QLPreviewGenerationExtension", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": true }, { "name": "quicklookd", "friendly": "File previews", "category": "Disks, files and backup", "verdict": "settle", "what": "This makes preview pictures of your files. It stops once they're made.", "path": "/System/Library/Frameworks/QuickLook.framework/Versions/A/Resources/quicklookd.app/Contents/MacOS/quicklookd", "apple_signed": true, "launchd_label": "com.apple.quicklook", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "QuickLookUIService", "friendly": "Quick Look", "category": "Sound, screen and camera", "verdict": "leave", "what": "This shows file previews when you press the Space bar.", "path": "/System/Library/Frameworks/QuickLookUI.framework/Versions/A/XPCServices/QuickLookUIService.xpc/Contents/MacOS/QuickLookUIService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "rapportd", "friendly": "Nearby devices", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets your Mac talk to your other Apple devices nearby, for things like Handoff and Universal Clipboard.", "path": "/usr/libexec/rapportd", "apple_signed": true, "launchd_label": "com.apple.rapportd", "launchd_kind": "daemon", "started": "on_demand", "man": "Rapport Daemon.", "running": true, "found": true }, { "name": "recentsd", "friendly": "Recent contacts", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This remembers people you recently emailed or messaged, for suggestions.", "path": "/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/recentsd", "apple_signed": true, "launchd_label": "com.apple.recentsd", "launchd_kind": "agent", "started": "on_demand", "man": "recentsd daemon", "running": true, "found": true }, { "name": "remindd", "friendly": "Reminders", "category": "Messages, mail and contacts", "verdict": "leave", "what": "This syncs your reminders.", "path": "/usr/libexec/remindd", "apple_signed": true, "launchd_label": "com.apple.remindd", "launchd_kind": "agent", "started": "on_demand", "man": "This line parsed for whatis database.", "running": true, "found": true }, { "name": "remotepairingd", "friendly": "Device pairing", "category": "Sound, screen and camera", "verdict": "leave", "what": "This pairs your Mac with your iPhone, iPad or Vision Pro.", "path": "/System/Library/Templates/Data/Library/Apple/System/Library/PrivateFrameworks/RemotePairing.framework/Versions/A/XPCServices/remotepairingd.xpc/Contents/MacOS/remotepairingd", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "replayd", "friendly": "Screen recording", "category": "Sound, screen and camera", "verdict": "settle", "what": "Something is recording or sharing your screen. It stops when the recording stops.", "path": "/usr/libexec/replayd", "apple_signed": true, "launchd_label": "com.apple.replayd", "launchd_kind": "agent", "started": "on_demand", "man": "MacOS daemon to support ReplayKit on macOS", "running": true, "found": true }, { "name": "ReportCrash", "friendly": "Crash report", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "An app just crashed and macOS is writing down what happened. It stops on its own.", "path": "/System/Library/CoreServices/ReportCrash", "apple_signed": true, "launchd_label": "com.apple.ReportCrash.Root", "launchd_kind": "daemon", "started": "on_demand", "man": "Generates crash reports", "running": false, "found": true }, { "name": "revisiond", "friendly": "Document versions", "category": "Core macOS", "verdict": "leave", "what": "This saves older versions of your documents so you can go back. It's normally quiet.", "path": "/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond", "apple_signed": true, "launchd_label": "com.apple.revisiond", "launchd_kind": "daemon", "started": "keepalive", "man": "storage manager for document revisions", "running": true, "found": true }, { "name": "routined", "friendly": "Frequent places", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This learns places you visit often, for things like travel time suggestions. It stays on your Mac.", "path": "/usr/libexec/routined", "apple_signed": true, "launchd_label": "com.apple.routined", "launchd_kind": "agent", "started": "on_demand", "man": "A daemon that learns the historical location patterns of a user.", "running": true, "found": true }, { "name": "rtcreportingd", "friendly": "Call quality reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This reports FaceTime call quality to Apple, if you allowed it.", "path": "/usr/libexec/rtcreportingd", "apple_signed": true, "launchd_label": "com.apple.rtcreportingd", "launchd_kind": "daemon", "started": "on_demand", "man": "Diagnostics and Usage Reporting", "running": true, "found": true }, { "name": "runningboardd", "friendly": "App manager", "category": "Core macOS", "verdict": "leave", "what": "This decides how much power and memory each running app may use.", "path": "/usr/libexec/runningboardd", "apple_signed": true, "launchd_label": "com.apple.runningboardd", "launchd_kind": "daemon", "started": "on_demand", "man": "assertion services daemon", "running": true, "found": true }, { "name": "sandboxd", "friendly": "App safety rules", "category": "Security and passwords", "verdict": "leave", "what": "This keeps each app in its own space so it can't reach what it shouldn't.", "path": "/usr/libexec/sandboxd", "apple_signed": true, "launchd_label": "com.apple.sandboxd", "launchd_kind": "daemon", "started": "on_demand", "man": "sandbox daemon", "running": true, "found": true }, { "name": "ScopedBookmarkAgent", "friendly": "File access", "category": "Disks, files and backup", "verdict": "leave", "what": "This remembers which files and folders you've let an app open.", "path": "/System/Library/CoreServices/ScopedBookmarkAgent", "apple_signed": true, "launchd_label": "com.apple.scopedbookmarksagent.xpc", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "screencaptureui", "friendly": "Screenshots", "category": "Sound, screen and camera", "verdict": "leave", "what": "This is the screenshot tool.", "path": "/System/Library/CoreServices/screencaptureui.app/Contents/MacOS/screencaptureui", "apple_signed": true, "launchd_label": "com.apple.screencaptureui.agent", "launchd_kind": "agent", "started": "on_demand", "man": "screencapture daemon", "running": false, "found": true }, { "name": "ScreenSaverEngine", "friendly": "Screen saver", "category": "Windows, notifications and Focus", "verdict": "settle", "what": "Your screen saver is running. It stops when you move the mouse.", "path": "/System/Library/CoreServices/ScreenSaverEngine.app/Contents/MacOS/ScreenSaverEngine", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": true }, { "name": "screensharingd", "friendly": "Screen Sharing", "category": "Sound, screen and camera", "verdict": "leave", "what": "Someone is viewing or controlling this Mac with Screen Sharing. It stops when they disconnect.", "path": "/System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/MacOS/screensharingd", "apple_signed": true, "launchd_label": "com.apple.screensharing", "launchd_kind": "daemon", "started": "on_demand", "man": "listens for VNC connections from clients.", "running": false, "found": true }, { "name": "ScreenTimeAgent", "friendly": "Screen Time", "category": "Widgets and other apps", "verdict": "leave", "what": "This tracks Screen Time and app limits.", "path": "/System/Library/PrivateFrameworks/ScreenTimeCore.framework/Versions/A/ScreenTimeAgent", "apple_signed": true, "launchd_label": "com.apple.ScreenTimeAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Screen Time Agent", "running": false, "found": true }, { "name": "searchpartyd", "friendly": "Find My", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs Find My for this Mac, your AirTags and your devices.", "path": "/usr/libexec/searchpartyd", "apple_signed": true, "launchd_label": "com.apple.icloud.searchpartyd", "launchd_kind": "daemon", "started": "on_demand", "man": "searchparty daemon", "running": true, "found": true }, { "name": "searchpartyuseragent", "friendly": "Find My", "category": "Network and nearby devices", "verdict": "leave", "what": "This helps Find My locate your devices and AirTags.", "path": "/usr/libexec/searchpartyuseragent", "apple_signed": true, "launchd_label": "com.apple.icloud.searchpartyuseragent", "launchd_kind": "agent", "started": "on_demand", "man": "searchparty user agent", "running": true, "found": true }, { "name": "secd", "friendly": "Passwords", "category": "iCloud and sync", "verdict": "leave", "what": "This keeps your saved passwords safe and syncs them with iCloud Keychain.", "path": "/usr/libexec/secd", "apple_signed": true, "launchd_label": "com.apple.secd", "launchd_kind": "agent", "started": "on_demand", "man": "centralised keychain agent", "running": true, "found": true }, { "name": "secinitd", "friendly": "App safety setup", "category": "Core macOS", "verdict": "leave", "what": "This sets up the security rules for each app as it opens.", "path": "/usr/libexec/secinitd", "apple_signed": true, "launchd_label": "com.apple.secinitd", "launchd_kind": "daemon", "started": "on_demand", "man": "The security policy initialization daemon.", "running": true, "found": true }, { "name": "SecurityAgent", "friendly": "Password prompt", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This shows the window that asks for your password.", "path": "/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent", "apple_signed": true, "launchd_label": "com.apple.security.agent.login", "launchd_kind": "daemon", "started": "on_demand", "man": "Authorization Services Agent", "running": false, "found": true }, { "name": "securityd", "friendly": "Security", "category": "Security and passwords", "verdict": "leave", "what": "This keeps passwords, keys and certificates safe.", "path": "/usr/sbin/securityd", "apple_signed": true, "launchd_label": "com.apple.securityd", "launchd_kind": "daemon", "started": "on_demand", "man": "Security context daemon for keychain and cryptographic operations", "running": true, "found": true }, { "name": "sensorkitd", "friendly": "Research data", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This handles sensor data for research studies you've joined. It's normally idle.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "sharedfilelistd", "friendly": "Recent items", "category": "Core macOS", "verdict": "leave", "what": "This keeps your recent files and the Finder sidebar lists.", "path": "/System/Library/CoreServices/sharedfilelistd", "apple_signed": true, "launchd_label": "com.apple.coreservices.sharedfilelistd", "launchd_kind": "daemon", "started": "on_demand", "man": "User agent which manages lists of file system items", "running": true, "found": true }, { "name": "sharingd", "friendly": "AirDrop and Handoff", "category": "Network and nearby devices", "verdict": "leave", "what": "This runs AirDrop, Handoff and sharing with nearby devices.", "path": "/usr/libexec/sharingd", "apple_signed": true, "launchd_label": "com.apple.sharingd", "launchd_kind": "agent", "started": "keepalive", "man": "Sharing Daemon that enables AirDrop, Handoff, Instant Hotspot, Shared Computers, and Remote Disc in the Finder.", "running": true, "found": true }, { "name": "ShortcutsViewService", "friendly": "Shortcuts", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This shows a shortcut on screen while it runs.", "path": "/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/ShortcutsViewService.xpc/Contents/MacOS/ShortcutsViewService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "SidecarRelay", "friendly": "Sidecar", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets you use an iPad as a second screen.", "path": "/usr/libexec/SidecarRelay", "apple_signed": true, "launchd_label": "com.apple.sidecar-relay", "launchd_kind": "agent", "started": "on_demand", "man": "Sidecar Relay Service", "running": false, "found": true }, { "name": "Siri", "friendly": "Siri", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This shows Siri on screen.", "path": "/System/Library/CoreServices/Siri.app/Contents/MacOS/Siri", "apple_signed": true, "launchd_label": "com.apple.Siri.agent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "siriactionsd", "friendly": "Shortcuts and Siri", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs actions for Siri and the Shortcuts app.", "path": "/System/Library/PrivateFrameworks/VoiceShortcuts.framework/Versions/A/Support/siriactionsd", "apple_signed": true, "launchd_label": "com.apple.siriactionsd", "launchd_kind": "agent", "started": "on_demand", "man": "Daemon for the Shortcuts application", "running": true, "found": true }, { "name": "siriinferenced", "friendly": "Siri", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This helps Siri understand what you asked.", "path": "/System/Library/PrivateFrameworks/SiriInference.framework/Versions/A/siriinferenced", "apple_signed": true, "launchd_label": "com.apple.siriinferenced", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "siriknowledged", "friendly": "Siri suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This learns from your apps so Siri can make suggestions. It stops on its own.", "path": "/usr/libexec/siriknowledged", "apple_signed": true, "launchd_label": "com.apple.siriknowledged", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "SiriNCService", "friendly": "Siri", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This shows Siri results.", "path": "/System/Library/CoreServices/Siri.app/Contents/XPCServices/SiriNCService.xpc/Contents/MacOS/SiriNCService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "smd", "friendly": "Background helpers", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This starts helper programs that apps have asked to run in the background.", "path": "/usr/libexec/smd", "apple_signed": true, "launchd_label": "com.apple.xpc.smd", "launchd_kind": "daemon", "started": "on_demand", "man": "ServiceManagement framework daemon.", "running": true, "found": true }, { "name": "socketfilterfw", "friendly": "Firewall", "category": "Security and passwords", "verdict": "leave", "what": "This is your Mac's firewall. It decides which apps may accept connections.", "path": "/usr/libexec/ApplicationFirewall/socketfilterfw", "apple_signed": true, "launchd_label": "com.apple.alf", "launchd_kind": "daemon", "started": "on_demand", "man": "Application Firewall daemon", "running": true, "found": true }, { "name": "softwareupdated", "friendly": "Software Update", "category": "Updates and App Store", "verdict": "settle", "what": "macOS is downloading or preparing an update. It stops when it's done.", "path": "/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated", "apple_signed": true, "launchd_label": "com.apple.softwareupdated", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "SoftwareUpdateNotificationManager", "friendly": "Update reminders", "category": "Updates and App Store", "verdict": "leave", "what": "This shows reminders that a software update is ready.", "path": "/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Versions/A/Resources/SoftwareUpdateNotificationManager.app/Contents/MacOS/SoftwareUpdateNotificationManager", "apple_signed": true, "launchd_label": "com.apple.SoftwareUpdateNotificationManager", "launchd_kind": "agent", "started": "on_demand", "man": "macOS software update", "running": false, "found": true }, { "name": "speechsynthesisd", "friendly": "Spoken voices", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This reads text out loud. It stops when it's done talking.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "spindump", "friendly": "Freeze report", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "An app stopped responding and macOS is writing a report about it. It stops on its own.", "path": "/usr/sbin/spindump", "apple_signed": true, "launchd_label": "com.apple.spindump", "launchd_kind": "daemon", "started": "on_demand", "man": "Profile entire system during a time interval", "running": false, "found": true }, { "name": "spindump_agent", "friendly": "Freeze report", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This helps macOS write a report when an app stops responding. It stops on its own.", "path": "/usr/libexec/spindump_agent", "apple_signed": true, "launchd_label": "com.apple.spindump_agent", "launchd_kind": "agent", "started": "on_demand", "man": "helper agent for spindump(8)", "running": false, "found": true }, { "name": "Spotlight", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "leave", "what": "This is the Spotlight search bar and its results.", "path": "/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight", "apple_signed": true, "launchd_label": "com.apple.Spotlight", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "spotlightknowledged", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "This is part of Spotlight, the search on your Mac. It gets busy after updates and stops on its own.", "path": "/System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged", "apple_signed": true, "launchd_label": "com.apple.spotlightknowledged", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "spotlightknowledged.importer", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "This is part of Spotlight, the search on your Mac. It gets busy after updates and stops on its own.", "path": "/usr/libexec/spotlightknowledged.importer", "apple_signed": true, "launchd_label": "com.apple.spotlightknowledged.importer", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "spotlightknowledged.updater", "friendly": "Spotlight", "category": "Spotlight and search", "verdict": "settle", "what": "This is part of Spotlight, the search on your Mac. It gets busy after updates and stops on its own.", "path": "/usr/libexec/spotlightknowledged.updater", "apple_signed": true, "launchd_label": "com.apple.spotlightknowledged.updater", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "ssh", "friendly": "Remote connection", "category": "Core macOS", "verdict": "leave", "what": "This is a connection to another computer, started from Terminal.", "path": "/usr/bin/ssh", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "OpenSSH remote login client", "running": true, "found": true }, { "name": "ssh-agent", "friendly": "Remote connection keys", "category": "Core macOS", "verdict": "leave", "what": "This remembers your keys for connecting to other computers.", "path": "/usr/bin/ssh-agent", "apple_signed": true, "launchd_label": "com.openssh.ssh-agent", "launchd_kind": "agent", "started": "on_demand", "man": "OpenSSH authentication agent", "running": true, "found": true }, { "name": "StatusKitAgent", "friendly": "Focus status", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This tells people who message you that your notifications are silenced, if you allow it.", "path": "/System/Library/PrivateFrameworks/StatusKit.framework/StatusKitAgent", "apple_signed": true, "launchd_label": "com.apple.StatusKitAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Agent backing StatusKit framework.", "running": true, "found": true }, { "name": "storagekitd", "friendly": "Disk Utility", "category": "Disks, files and backup", "verdict": "settle", "what": "This helps Disk Utility change a disk. It stops when it's done.", "path": "/usr/libexec/storagekitd", "apple_signed": true, "launchd_label": "com.apple.storagekitd", "launchd_kind": "daemon", "started": "on_demand", "man": "helper for the StorageKit framework.", "running": true, "found": true }, { "name": "storedownloadd", "friendly": "App Store downloads", "category": "Updates and App Store", "verdict": "settle", "what": "The App Store is downloading an app or an update. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd", "apple_signed": true, "launchd_label": "com.apple.storedownloadd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "storekitd", "friendly": "In-app purchases", "category": "Updates and App Store", "verdict": "leave", "what": "This handles purchases and subscriptions inside apps.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "SubmitDiagInfo", "friendly": "Crash reports", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "This sends crash reports to Apple, if you allowed it. It stops when it's done.", "path": "/System/Library/CoreServices/SubmitDiagInfo", "apple_signed": true, "launchd_label": "com.apple.SubmitDiagInfo", "launchd_kind": "daemon", "started": "on_demand", "man": "sends diagnostic information to Apple", "running": true, "found": true }, { "name": "suggestd", "friendly": "Suggestions", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This finds things like events and contacts in your mail and messages so it can suggest them. It works mostly when your Mac is idle.", "path": "/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd", "apple_signed": true, "launchd_label": "com.apple.suggestd", "launchd_kind": "agent", "started": "on_demand", "man": "daemon that processes user content in order to detect contacts, events, named entities, etc.", "running": true, "found": true }, { "name": "suhelperd", "friendly": "Software Update", "category": "Updates and App Store", "verdict": "settle", "what": "This helps Software Update check for and prepare updates. It stops when it's done.", "path": "/System/Library/CoreServices/Software Update.app/Contents/Resources/suhelperd", "apple_signed": true, "launchd_label": "com.apple.suhelperd", "launchd_kind": "daemon", "started": "on_demand", "man": "Helper daemon for softwareupdate - no user initiated interface", "running": true, "found": true }, { "name": "swcd", "friendly": "Website links", "category": "Security and passwords", "verdict": "leave", "what": "This lets apps use your saved website passwords and open website links, when the website allows it.", "path": "/usr/libexec/swcd", "apple_signed": true, "launchd_label": "com.apple.swcd", "launchd_kind": "agent", "started": "on_demand", "man": "Shared Web Credentials Daemon.", "running": false, "found": true }, { "name": "symptomsd", "friendly": "Network health", "category": "Network and nearby devices", "verdict": "leave", "what": "This watches for network problems and helps apps pick the best connection.", "path": "/usr/libexec/symptomsd", "apple_signed": true, "launchd_label": "com.apple.symptomsd", "launchd_kind": "daemon", "started": "on_demand", "man": "Symptom framework service daemon", "running": true, "found": true }, { "name": "syncdefaultsd", "friendly": "iCloud settings sync", "category": "iCloud and sync", "verdict": "settle", "what": "iCloud is syncing your settings between your devices. It stops on its own.", "path": "/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd", "apple_signed": true, "launchd_label": "com.apple.syncdefaultsd", "launchd_kind": "agent", "started": "on_demand", "man": "NSUbiquitousKeyValueStore", "running": true, "found": true }, { "name": "sysdiagnose", "friendly": "Diagnostics", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "macOS is gathering a big diagnostic report, usually because someone asked for one. It stops when it's done.", "path": "/usr/bin/sysdiagnose", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "gathers system-wide diagnostic information helpful in investigating system performance issues", "running": false, "found": true }, { "name": "sysextd", "friendly": "System extensions", "category": "Disks, files and backup", "verdict": "leave", "what": "This installs and manages system extensions, like drivers and security tools.", "path": "/System/Library/Frameworks/SystemExtensions.framework/Versions/A/Helpers/sysextd", "apple_signed": true, "launchd_label": "com.apple.sysextd", "launchd_kind": "daemon", "started": "on_demand", "man": "system extension manager", "running": false, "found": true }, { "name": "syslogd", "friendly": "System log", "category": "Core macOS", "verdict": "leave", "what": "This keeps older-style system logs.", "path": "/usr/sbin/syslogd", "apple_signed": true, "launchd_label": "com.apple.syslogd", "launchd_kind": "daemon", "started": "keepalive", "man": "Apple System Log server", "running": true, "found": true }, { "name": "sysmond", "friendly": "Activity numbers", "category": "Core macOS", "verdict": "leave", "what": "This collects the numbers that Activity Monitor shows.", "path": "/usr/libexec/sysmond", "apple_signed": true, "launchd_label": "com.apple.sysmond", "launchd_kind": "daemon", "started": "on_demand", "man": "system monitor daemon", "running": true, "found": true }, { "name": "syspolicyd", "friendly": "App security check", "category": "Security and passwords", "verdict": "settle", "what": "macOS is checking that an app you opened is safe. It stops on its own.", "path": "/usr/libexec/syspolicyd", "apple_signed": true, "launchd_label": "com.apple.security.syspolicy", "launchd_kind": "daemon", "started": "on_demand", "man": "System Policy daemon", "running": true, "found": true }, { "name": "system_installd", "friendly": "Installing", "category": "Updates and App Store", "verdict": "settle", "what": "macOS is installing software, like an update or an installer package. It stops when it's done.", "path": "/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd", "apple_signed": true, "launchd_label": "com.apple.system_installd", "launchd_kind": "daemon", "started": "on_demand", "man": "macOS software installation daemon", "running": true, "found": true }, { "name": "systemstats", "friendly": "Battery history", "category": "Diagnostics, printing and power", "verdict": "leave", "what": "This records battery and energy use for the Battery settings.", "path": "/usr/sbin/systemstats", "apple_signed": true, "launchd_label": "com.apple.systemstats.daily", "launchd_kind": "daemon", "started": "on_demand", "man": "summarize system stats", "running": true, "found": true }, { "name": "systemstatusd", "friendly": "Status icons", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This shows the camera and microphone dots and other status icons in the menu bar.", "path": "/System/Library/PrivateFrameworks/SystemStatusServer.framework/Support/systemstatusd", "apple_signed": true, "launchd_label": "com.apple.systemstatusd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "SystemUIServer", "friendly": "Menu bar", "category": "Core macOS", "verdict": "leave", "what": "This draws parts of the menu bar at the top of your screen.", "path": "/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer", "apple_signed": true, "launchd_label": "com.apple.SystemUIServer.agent", "launchd_kind": "agent", "started": "on_demand", "man": "Presents status items in the upper right of menu bar", "running": true, "found": true }, { "name": "tailspind", "friendly": "Slowdown report", "category": "Diagnostics, printing and power", "verdict": "settle", "what": "macOS is saving a record of a recent slowdown so it can be looked at later. It stops on its own.", "path": "/usr/libexec/tailspind", "apple_signed": true, "launchd_label": "com.apple.tailspind", "launchd_kind": "daemon", "started": "on_demand", "man": "helper daemon for tailspin(1)", "running": false, "found": true }, { "name": "talagentd", "friendly": "Window restore", "category": "Core macOS", "verdict": "leave", "what": "This reopens your windows when apps or your Mac restart.", "path": "/System/Library/CoreServices/talagentd", "apple_signed": true, "launchd_label": "com.apple.talagent", "launchd_kind": "agent", "started": "on_demand", "man": "helper agent for application lifecycle features", "running": true, "found": true }, { "name": "taskgated", "friendly": "Developer permissions", "category": "Security and passwords", "verdict": "leave", "what": "This decides which programs may inspect other programs, which developer tools need.", "path": "/usr/libexec/taskgated", "apple_signed": true, "launchd_label": "com.apple.taskgated", "launchd_kind": "daemon", "started": "on_demand", "man": "task_for_pid access control daemon taskgated is a system daemon that implements a policy for the task_for_pid system service.\tWhen the kernel is asked for the task port of a process, and preliminary access control checks pass, it invokes this daemon (via launchd) to make the", "running": true, "found": true }, { "name": "tccd", "friendly": "Privacy permissions", "category": "Security and passwords", "verdict": "leave", "what": "This remembers which apps you've allowed to use your camera, microphone, files and more.", "path": "/System/Library/PrivateFrameworks/TCC.framework/Support/tccd", "apple_signed": true, "launchd_label": "com.apple.tccd.system", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "TextInputMenuAgent", "friendly": "Keyboard menu", "category": "Keyboard, input and accessibility", "verdict": "leave", "what": "This shows the keyboard and input menu.", "path": "/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent", "apple_signed": true, "launchd_label": "com.apple.TextInputMenuAgent", "launchd_kind": "agent", "started": "keepalive", "man": null, "running": true, "found": true }, { "name": "thermalmonitord", "friendly": "Heat monitor", "category": "Core macOS", "verdict": "leave", "what": "This watches your Mac's temperature and tells it to slow down when it's too hot.", "path": "/usr/libexec/thermalmonitord", "apple_signed": true, "launchd_label": "com.apple.thermalmonitord", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "timed", "friendly": "Clock", "category": "Core macOS", "verdict": "leave", "what": "This keeps your Mac's clock accurate.", "path": "/usr/libexec/timed", "apple_signed": true, "launchd_label": "com.apple.timed", "launchd_kind": "daemon", "started": "keepalive", "man": "time synchronization daemon", "running": true, "found": true }, { "name": "tipsd", "friendly": "Tips", "category": "Widgets and other apps", "verdict": "settle", "what": "This checks for new tips for the Tips app. It's normally quiet.", "path": "/usr/libexec/tipsd", "apple_signed": true, "launchd_label": "com.apple.tipsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "translationd", "friendly": "Translation", "category": "Siri, suggestions and Apple Intelligence", "verdict": "settle", "what": "This translates text on your Mac, for the Translate app and apps that use it. It stops when it's done.", "path": "/System/Library/Frameworks/Translation.framework/translationd", "apple_signed": true, "launchd_label": "com.apple.translationd", "launchd_kind": "agent", "started": "on_demand", "man": "Daemon that enables Translation features.", "running": false, "found": true }, { "name": "triald", "friendly": "Feature updates", "category": "Updates and App Store", "verdict": "settle", "what": "This downloads small updates to how some macOS features work. It's normally quiet.", "path": "/usr/libexec/triald", "apple_signed": true, "launchd_label": "com.apple.triald", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "trustd", "friendly": "Security check", "category": "Security and passwords", "verdict": "settle", "what": "macOS is checking that websites and apps are who they say they are. It stops on its own.", "path": "/usr/libexec/trustd", "apple_signed": true, "launchd_label": "com.apple.trustd", "launchd_kind": "daemon", "started": "on_demand", "man": "Daemon and LaunchAgent that performs trust evaluations", "running": true, "found": true }, { "name": "tvremoted", "friendly": "Remote control", "category": "Sound, screen and camera", "verdict": "leave", "what": "This lets an Apple TV remote or your iPhone control your Mac.", "path": "/usr/libexec/tvremoted", "apple_signed": true, "launchd_label": "com.apple.tvremoted", "launchd_kind": "agent", "started": "on_demand", "man": "Apple TV Remote services daemon", "running": false, "found": true }, { "name": "UIKitSystem", "friendly": "iPhone and iPad apps", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This helps iPhone and iPad apps run on your Mac.", "path": "/System/Library/CoreServices/UIKitSystem.app/Contents/MacOS/UIKitSystem", "apple_signed": true, "launchd_label": "com.apple.uikitsystemapp", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "universalaccessd", "friendly": "Accessibility", "category": "Keyboard, input and accessibility", "verdict": "leave", "what": "This runs accessibility features like Zoom and VoiceOver settings.", "path": "/usr/sbin/universalaccessd", "apple_signed": true, "launchd_label": "com.apple.universalaccessd", "launchd_kind": "agent", "started": "on_demand", "man": "universal access server", "running": true, "found": true }, { "name": "UniversalControl", "friendly": "Universal Control", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets you use one keyboard and mouse across your Mac and iPad.", "path": "/System/Library/CoreServices/UniversalControl.app/Contents/MacOS/UniversalControl", "apple_signed": true, "launchd_label": "com.apple.ensemble", "launchd_kind": "agent", "started": "on_demand", "man": "Universal Control", "running": false, "found": true }, { "name": "UsageTrackingAgent", "friendly": "Screen Time", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This counts how long you use apps and websites, for Screen Time.", "path": "/System/Library/PrivateFrameworks/UsageTracking.framework/Versions/A/UsageTrackingAgent", "apple_signed": true, "launchd_label": "com.apple.UsageTrackingAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Usage Tracking Agent", "running": false, "found": true }, { "name": "usbaudiod", "friendly": "USB sound", "category": "Sound, screen and camera", "verdict": "leave", "what": "This runs USB speakers, headsets and microphones.", "path": "/System/Library/Audio/Plug-Ins/usbaudio.bundle/Contents/MacOS/usbaudiod", "apple_signed": true, "launchd_label": "com.apple.usbaudiod", "launchd_kind": "daemon", "started": "on_demand", "man": "usbaudiod is a system daemon that runs the USB audio driver.", "running": true, "found": true }, { "name": "usbmuxd", "friendly": "iPhone connection", "category": "Network and nearby devices", "verdict": "leave", "what": "This talks to an iPhone or iPad connected by cable.", "path": "/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd", "apple_signed": true, "launchd_label": "com.apple.usbmuxd", "launchd_kind": "daemon", "started": "keepalive", "man": "iOS communications daemon", "running": true, "found": true }, { "name": "useractivityd", "friendly": "Handoff", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This passes what you're doing to your other Apple devices, for Handoff.", "path": "/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd", "apple_signed": true, "launchd_label": "com.apple.coreservices.useractivityd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "UserEventAgent", "friendly": "Background events", "category": "Core macOS", "verdict": "leave", "what": "This reacts to things like plugging in a device or changing networks.", "path": "/usr/libexec/UserEventAgent", "apple_signed": true, "launchd_label": "com.apple.UserEventAgent-System", "launchd_kind": "daemon", "started": "keepalive", "man": "high-level system event handler", "running": true, "found": true }, { "name": "UserFontManager", "friendly": "Fonts", "category": "Keyboard, input and accessibility", "verdict": "settle", "what": "This manages the fonts on your Mac. It can get busy after you install fonts, then settles.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "usermanagerd", "friendly": "User accounts", "category": "Core macOS", "verdict": "leave", "what": "This manages the user accounts on your Mac.", "path": "/usr/libexec/usermanagerd", "apple_signed": true, "launchd_label": "com.apple.mobile.usermanagerd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "usernoted", "friendly": "Notifications", "category": "Core macOS", "verdict": "leave", "what": "This delivers notifications from your apps.", "path": "/usr/sbin/usernoted", "apple_signed": true, "launchd_label": "com.apple.usernoted", "launchd_kind": "agent", "started": "keepalive", "man": "Notification Center daemon", "running": true, "found": true }, { "name": "UserNotificationCenter", "friendly": "Notification alerts", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This shows alert-style notifications and system messages.", "path": "/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter", "apple_signed": true, "launchd_label": "com.apple.UserNotificationCenterAgent-LoginWindow", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "usernotificationsd", "friendly": "Notifications", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This manages notifications from your apps.", "path": "/System/Library/PrivateFrameworks/UserNotificationsCore.framework/Support/usernotificationsd", "apple_signed": true, "launchd_label": "com.apple.usernotificationsd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "UVCAssistant", "friendly": "Camera", "category": "Sound, screen and camera", "verdict": "settle", "what": "This runs your camera for an app that's using it. It stops when you close the video call.", "path": "/System/Library/Frameworks/CoreMediaIO.framework/Versions/A/Resources/UVCAssistant.systemextension/Contents/MacOS/UVCAssistant", "apple_signed": true, "launchd_label": "com.apple.cmio.uvcassistantextension", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "ViewBridgeAuxiliary", "friendly": "App windows helper", "category": "Sound, screen and camera", "verdict": "leave", "what": "This helps apps show parts of macOS inside their windows.", "path": "/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "voicebankingd", "friendly": "Personal Voice", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This runs Personal Voice, which lets your Mac speak in your own voice.", "path": "/System/Library/PrivateFrameworks/TextToSpeechVoiceBankingSupport.framework/Support/voicebankingd", "apple_signed": true, "launchd_label": "com.apple.voicebankingd", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "VoiceOver", "friendly": "VoiceOver", "category": "Siri, suggestions and Apple Intelligence", "verdict": "leave", "what": "This is VoiceOver, which reads your screen out loud.", "path": "/System/Library/CoreServices/VoiceOver.app/Contents/MacOS/VoiceOver", "apple_signed": true, "launchd_label": "com.apple.VoiceOver", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "VTDecoderXPCService", "friendly": "Video playback", "category": "Sound, screen and camera", "verdict": "settle", "what": "This plays video for an app. It stops when the video stops.", "path": "/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "VTEncoderXPCService", "friendly": "Video export", "category": "Sound, screen and camera", "verdict": "settle", "what": "This turns video into a file when an app records, exports or shares video. It stops when that's done.", "path": "/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTEncoderXPCService.xpc/Contents/MacOS/VTEncoderXPCService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "WallpaperAerialsExtension", "friendly": "Moving wallpaper", "category": "Sound, screen and camera", "verdict": "settle", "what": "Your moving wallpaper is playing. Picking a still wallpaper stops it.", "path": "/System/Library/ExtensionKit/Extensions/WallpaperAerialsExtension.appex/Contents/MacOS/WallpaperAerialsExtension", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": true }, { "name": "WallpaperAgent", "friendly": "Wallpaper", "category": "Sound, screen and camera", "verdict": "leave", "what": "This changes and draws your wallpaper.", "path": "/System/Library/CoreServices/WallpaperAgent.app/Contents/MacOS/WallpaperAgent", "apple_signed": true, "launchd_label": "com.apple.wallpaper.agent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "watchdogd", "friendly": "Freeze detector", "category": "Core macOS", "verdict": "leave", "what": "This checks that macOS is still responding.", "path": "/usr/libexec/watchdogd", "apple_signed": true, "launchd_label": "com.apple.watchdogd", "launchd_kind": "daemon", "started": "on_demand", "man": "watchdog daemon", "running": true, "found": true }, { "name": "webbookmarksd", "friendly": "Safari bookmarks", "category": "Safari and web pages", "verdict": "settle", "what": "This saves and syncs your Safari bookmarks. It stops on its own.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": false, "found": false }, { "name": "WiFiAgent", "friendly": "Wi-Fi", "category": "Network and nearby devices", "verdict": "leave", "what": "This shows Wi-Fi networks and Wi-Fi messages.", "path": "/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent", "apple_signed": true, "launchd_label": "com.apple.wifi.WiFiAgent", "launchd_kind": "agent", "started": "on_demand", "man": "Wi-Fi User agent.", "running": true, "found": true }, { "name": "wifianalyticsd", "friendly": "Wi-Fi quality check", "category": "Network and nearby devices", "verdict": "settle", "what": "This measures how well your Wi-Fi is working. It's normally quiet.", "path": "/usr/libexec/wifianalyticsd", "apple_signed": true, "launchd_label": "com.apple.wifianalyticsd", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "wifip2pd", "friendly": "AirDrop Wi-Fi", "category": "Network and nearby devices", "verdict": "leave", "what": "This lets your Mac connect straight to nearby devices over Wi-Fi, for AirDrop and Sidecar.", "path": "/usr/libexec/wifip2pd", "apple_signed": true, "launchd_label": "com.apple.wifip2pd", "launchd_kind": "daemon", "started": "on_demand", "man": "Daemon responsible for managing peer-to-peer Wi-Fi discovery and data links.", "running": true, "found": true }, { "name": "wifivelocityd", "friendly": "Wi-Fi diagnostics", "category": "Network and nearby devices", "verdict": "settle", "what": "This collects Wi-Fi problem reports when something asks for them. It stops on its own.", "path": "/usr/libexec/wifivelocityd", "apple_signed": true, "launchd_label": "com.apple.wifivelocityd", "launchd_kind": "daemon", "started": "on_demand", "man": "launchd daemon for the WiFiVelocity framework", "running": true, "found": true }, { "name": "WindowManager", "friendly": "Stage Manager", "category": "Windows, notifications and Focus", "verdict": "leave", "what": "This arranges your windows, for Stage Manager and window tiling.", "path": "/System/Library/CoreServices/WindowManager.app/Contents/MacOS/WindowManager", "apple_signed": true, "launchd_label": "com.apple.WindowManager.agent", "launchd_kind": "agent", "started": "on_demand", "man": null, "running": true, "found": true }, { "name": "WindowServer", "friendly": "Your screen", "category": "Core macOS", "verdict": "leave", "what": "This draws everything on your screen. Closing it would log you out.", "path": "/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer", "apple_signed": true, "launchd_label": "com.apple.WindowServer", "launchd_kind": "daemon", "started": "on_demand", "man": "Window management, compositing, and event routing daemon.", "running": true, "found": true }, { "name": "WirelessRadioManagerd", "friendly": "Wireless", "category": "Network and nearby devices", "verdict": "leave", "what": "This keeps Wi-Fi and Bluetooth from getting in each other's way.", "path": "/usr/sbin/WirelessRadioManagerd", "apple_signed": true, "launchd_label": "com.apple.WirelessRadioManager", "launchd_kind": "daemon", "started": "on_demand", "man": "Wireless Radio Manager daemon", "running": true, "found": true }, { "name": "xpcproxy", "friendly": "App launcher", "category": "Core macOS", "verdict": "leave", "what": "This starts small helper programs for apps. Each one only runs for a moment.", "path": "/usr/libexec/xpcproxy", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "configures the execution environment for XPC services.", "running": false, "found": true }, { "name": "XProtect", "friendly": "Malware check", "category": "Security and passwords", "verdict": "settle", "what": "macOS is checking your apps for malware. It stops on its own.", "path": "/System/Library/Templates/Data/Library/Apple/System/Library/CoreServices/XProtect.app/Contents/MacOS/XProtect", "apple_signed": true, "launchd_label": "com.apple.XProtect.daemon.scan", "launchd_kind": "daemon", "started": "on_demand", "man": null, "running": false, "found": true }, { "name": "XProtectBridgeService", "friendly": "Malware check", "category": "Updates and App Store", "verdict": "settle", "what": "macOS is checking your apps for malware. It stops on its own.", "path": "/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XProtectBridgeService.xpc/Contents/MacOS/XProtectBridgeService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": true, "found": true }, { "name": "xprotectd", "friendly": "Malware check", "category": "Security and passwords", "verdict": "settle", "what": "macOS is checking your apps for malware. It stops on its own.", "path": "/usr/libexec/xprotectd", "apple_signed": true, "launchd_label": "com.apple.security.xprotectd", "launchd_kind": "daemon", "started": "keepalive", "man": "XProtect Daemon", "running": true, "found": true }, { "name": "XprotectService", "friendly": "Malware check", "category": "Security and passwords", "verdict": "settle", "what": "macOS is checking your apps for malware. It stops on its own.", "path": "/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": "xpc", "man": null, "running": false, "found": true }, { "name": "zsh", "friendly": "Terminal", "category": "Core macOS", "verdict": "leave", "what": "This runs the commands you type in a Terminal window.", "path": "/bin/zsh", "apple_signed": true, "launchd_label": null, "launchd_kind": null, "started": null, "man": "the Z shell", "running": true, "found": true }, { "name": "-zsh", "friendly": "Terminal", "category": "Core macOS", "verdict": "leave", "what": "This runs the commands you type in a Terminal window.", "path": null, "apple_signed": null, "launchd_label": null, "launchd_kind": null, "started": null, "man": null, "running": true, "found": false } ] }