diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 00000000..92cbba99
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1 @@
+github: [drduh]
diff --git a/14F27_launchd.csv b/14F27_launchd.csv
deleted file mode 100644
index 7884c1b2..00000000
--- a/14F27_launchd.csv
+++ /dev/null
@@ -1,473 +0,0 @@
-filename,label,program,sha256,runatload,comment
-/System/Library/LaunchDaemons/bootps.plist,com.apple.bootpd,"['/usr/libexec/bootpd']",ee73728229f1b355607144e202043aa7e822621dff103b0b4015c014b9638a6d,False,DHCP/BOOTP/NetBoot server
-/System/Library/LaunchDaemons/com.apple.afpfs_afpLoad.plist,com.apple.afpfs_afpLoad,"['/System/Library/Filesystems/AppleShare/afpLoad']",2b0ca270a16f3654d55be53b146af628eeea0aee96b19a6cd15f054a4232ef13,False,
-/System/Library/LaunchDaemons/com.apple.afpfs_checkafp.plist,com.apple.afpfs_checkafp,"['/System/Library/Filesystems/AppleShare/check_afp.app/Contents/MacOS/check_afp']",8a5d384fc83f1c010124b32096ce0f750b19212aabe1b35bb5f1f99df045b58a,False,
-/System/Library/LaunchDaemons/com.apple.AirPlayXPCHelper.plist,com.apple.AirPlayXPCHelper,"['/usr/libexec/AirPlayXPCHelper']",74df0f6db061a04037133a6d3a9d9970ee82632d49a996194a5552b95433edf1,False,
-/System/Library/LaunchDaemons/com.apple.airport.wps.plist,com.apple.airport.wps,"['/usr/libexec/wps']",eb30b37a6b113db509948aabaf65d0fd7ddd7b55150b271f4b2a9b21c3f77724,False,
-/System/Library/LaunchDaemons/com.apple.airportd.plist,com.apple.airportd,"['/usr/libexec/airportd']",26f3ddafa9a9489c345eaf25770f3a10f10c0d238b418c6007ffd8eb777ac929,False,
-/System/Library/LaunchDaemons/com.apple.alf.agent.plist,com.apple.alf,"['/usr/libexec/ApplicationFirewall/socketfilterfw']",117255f04e921f738ae19145e800c369e16362ea4abc203c64198960625d7c98,False,
-/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist,com.apple.AppleFileServer,"['/usr/sbin/AppleFileServer']",ceaa969e4eb22a35293a58c61782860353c769c2c0903d6036fc229f2bef62eb,False,
-/System/Library/LaunchDaemons/com.apple.appleseed.fbahelperd.plist,com.apple.appleseed.fbahelperd,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/fbahelperd']",4b287990324f732c11f4b86f3374366ac6a9314a476bf390239022bc62a01339,False,
-/System/Library/LaunchDaemons/com.apple.applessdstatistics.plist,com.apple.applessdstatistics,"['/usr/libexec/applessdstatistics']",a8bab887ace97ce90189dc8786ad21276a56710bbfd7caa55f4b647a73d07bba,False,
-/System/Library/LaunchDaemons/com.apple.apsd.plist,com.apple.apsd,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsd']",9e0627438a243c51acfe86f5ae66594c6b4a7f80891eadd7d0195038610e3715,True,Apple Push Notification service daemon
-/System/Library/LaunchDaemons/com.apple.aslmanager.plist,com.apple.aslmanager,"['/usr/sbin/aslmanager']",afd40621bc22222dd930cef843240777314cc33ff61a1884609ae4588ad11cf4,False,"Manages rotated files and ASL data written by the syslogd server"
-/System/Library/LaunchDaemons/com.apple.AssetCacheLocatorService.plist,com.apple.AssetCacheLocatorService,"['/System/Library/CoreServices/AssetCacheLocatorService']",b27a1b8140d334f07e627cbab3d2cb6bb303856b0145eccccec2022c184836ca,False,
-/System/Library/LaunchDaemons/com.apple.atrun.plist,com.apple.atrun,"['/usr/libexec/atrun']",de8f7ccd23aa3ca4b6a2da5d6618f36cdd28194b45d637b3500ddd795ee7f348,False,
-/System/Library/LaunchDaemons/com.apple.audio.coreaudiod.plist,com.apple.audio.coreaudiod,"['/usr/sbin/coreaudiod']",244478d343fb1cb734145ea4878528bfcec99c1e3165df09f7fa399904b2f77a,False,daemon used for Core Audio related purposes
-/System/Library/LaunchDaemons/com.apple.auditd.plist,com.apple.auditd,"['/usr/sbin/auditd']",ad5cbbd63073582d87976b9b13dc002c8c7da757113dcae7f56950b50463cc8e,False,
-/System/Library/LaunchDaemons/com.apple.autofsd.plist,com.apple.autofsd,"['/usr/libexec/autofsd']",9586e46faeacf8d658385146e506ae8ff182e02d106a3e5daeaf58544f1c1245,False,
-/System/Library/LaunchDaemons/com.apple.automountd.plist,com.apple.automountd,"['/usr/libexec/automountd']",0a40f0d0a320b820d4fedb8c67f3a5b06d1da52afd4df3405ec8327741a7689b,False,
-/System/Library/LaunchDaemons/com.apple.awacsd.plist,com.apple.awacsd,"['/usr/libexec/awacsd']",c7afa36b1135d419311cff418f0444eedff304308636e6c39a48a2724987b905,False,
-/System/Library/LaunchDaemons/com.apple.awdd.plist,com.apple.awdd,"['/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd']",c2cd1c8df06775bdfe11816acff1e0082f12543628afcc58931f4c0fe73f2dfc,False,
-/System/Library/LaunchDaemons/com.apple.backupd-auto.plist,com.apple.backupd-auto,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper', '-launchd']",b89b8b764f5f3fad583f0a4270a77f3c28c3e7038924c8cca6cc0483eadeccfd,True,
-/System/Library/LaunchDaemons/com.apple.backupd.plist,com.apple.backupd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd']",b2bb5f51b3a22940eeddb91527ee7bf1fa85f8141ead9d83d85112e2977a549f,False,
-/System/Library/LaunchDaemons/com.apple.blued.plist,com.apple.blued,"['/usr/sbin/blued']",9ba4274e527b7600b3139bcfd47e9fff45076a50b59c54d87bd913491cb39203,False,
-/System/Library/LaunchDaemons/com.apple.bluetoothaudiod.plist,com.apple.bluetoothaudiod,"['/usr/sbin/bluetoothaudiod']",78092909d56f9dbb73d2d01faf4e540788dd6b14c4a158f8ec9f186aafdc5065,False,
-/System/Library/LaunchDaemons/com.apple.bluetoothReporter.plist,com.apple.bluetoothReporter,"['/System/Library/Frameworks/IOBluetooth.framework/Versions/A/Resources/BluetoothReporter', '--dumpPacketLog', '/private/var/log/bluetooth.pklg']",752664d7e3cf56e7963bcb7baba2469576582b0a97d0dfe4569e1f967bab631b,False,
-/System/Library/LaunchDaemons/com.apple.bnepd.plist,com.apple.bnepd,"['/usr/sbin/bnepd']",c569041b7381f1ed8963c3c890872597fc7067c054365f0fb005cd0ef53db332,False,
-/System/Library/LaunchDaemons/com.apple.bsd.dirhelper.plist,com.apple.bsd.dirhelper,"['/usr/libexec/dirhelper']",95b66b9e9b011a7586132c28fac0c546063cde4576c45a9f83e0f5dc813b8929,True,
-/System/Library/LaunchDaemons/com.apple.cache_delete.plist,com.apple.cache_delete,"['/System/Library/PrivateFrameworks/CacheDelete.framework/deleted']",911430f12769f2bad289697879b9368a483b617aaeaf21d8f70b9c6f6f246ac6,False,
-/System/Library/LaunchDaemons/com.apple.cfprefsd.xpc.daemon.plist,com.apple.cfprefsd.xpc.daemon,"['/usr/sbin/cfprefsd', 'daemon']",ee0443bdcc80cc7b43c308b65ea6df39092c8d7ab8072ee20be1863d6f737565,False,
-/System/Library/LaunchDaemons/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",fd81c20bf7774f746b8dd29a04ab1108e712b1db4e0d85432dfeb31065e4e7dc,False,
-/System/Library/LaunchDaemons/com.apple.cmio.AppleCameraAssistant.plist,com.apple.cmio.AppleCameraAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/AppleCamera.plugin/Contents/Resources/AppleCameraAssistant']",000e71ea89fb4e27fe4f58335e845eeeb8d2710d79d3b9bedd33bc35519fcd05,False,
-/System/Library/LaunchDaemons/com.apple.cmio.AVCAssistant.plist,com.apple.cmio.AVCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/AVC.plugin/Contents/Resources/AVCAssistant']",ed8c0826150c6f679e52e75d7acbaa456b9bbffa2334989f4ff97367da0a703d,False,
-/System/Library/LaunchDaemons/com.apple.cmio.IIDCVideoAssistant.plist,com.apple.cmio.IIDCVideoAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/IIDC.plugin/Contents/Resources/IIDCVideoAssistant']",3b5b28e060f170823dfebd146fc1e4da69dc9a0343f723320b5e7e5443d308ce,False,
-/System/Library/LaunchDaemons/com.apple.cmio.iOSScreenCaptureAssistant.plist,com.apple.cmio.iOSScreenCaptureAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/iOSScreenCapture.plugin/Contents/Resources/iOSScreenCaptureAssistant']",1edbe422d274cbfa7a654ca6dba06787c7e7126d6e58f9e8b827c37461ef2b43,False,
-/System/Library/LaunchDaemons/com.apple.cmio.VDCAssistant.plist,com.apple.cmio.VDCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/VDC.plugin/Contents/Resources/VDCAssistant']",327c9f4cd7bcbecd5715e05f4f2a5c7017fa4b50700ad5c3b16b1daa99380163,False,
-/System/Library/LaunchDaemons/com.apple.comsat.plist,com.apple.comsat,"['/usr/libexec/comsat']",48fc089c0f46835804c2c43de8bb46570f8aa0c2153c0709622057b88aad6de0,False,
-/System/Library/LaunchDaemons/com.apple.configd.plist,com.apple.configd,"['/usr/libexec/configd']",5e46c09664bf4ff1a9f9fbe3377a32d9964db91b5e97f1d346ba6044888c6a68,False,
-/System/Library/LaunchDaemons/com.apple.configureLocalKDC.plist,com.apple.configureLocalKDC,"['/usr/libexec/configureLocalKDC']",f6afc2f328af2217addc06c515158cb41af43099e1bbe0f200429e5bba46385d,False,
-/System/Library/LaunchDaemons/com.apple.coreduetd.osx.plist,com.apple.coreduetd,"['/usr/libexec/coreduetd']",5a4b3b719cf075110fe712bb426581fc7e04201889181b2cd2e265726b05babc,True,
-/System/Library/LaunchDaemons/com.apple.CoreRAID.plist,com.apple.CoreRAID,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Resources/CoreRAIDServer']",2bb00530d9834a90e558d056dba365e6177b7a74e2ddf900843164e41708106e,True,
-/System/Library/LaunchDaemons/com.apple.coreservices.appleevents.plist,com.apple.coreservices.appleevents,"['/System/Library/CoreServices/appleeventsd', '--server']",8750a65885a5967349da317cc37ef0416ff15e9914535c879b262fcb0a5cd5c5,True,
-/System/Library/LaunchDaemons/com.apple.coreservices.appleid.passwordcheck.plist,com.apple.coreservices.appleid.passwordcheck,"['/System/Library/CoreServices/AppleIDAuthAgent', '--checkpassword']",e953287f86876b6f6f7c612a002bbee12257584238d0cc00108844610cd337c5,False,
-/System/Library/LaunchDaemons/com.apple.coreservices.launchservicesd.plist,com.apple.coreservices.launchservicesd,"['/System/Library/CoreServices/launchservicesd']",1c7f99fdf56022209e54ea11d3df163647ac4da3de7fc7e327b36ad438e35183,True,
-/System/Library/LaunchDaemons/com.apple.coreservicesd.plist,com.apple.coreservicesd,"['/System/Library/CoreServices/coreservicesd']",1b53a88adef807e454dbb9ac295eb2816b17f141edbceec7fb34294983faa3c4,False,
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoraged.plist,com.apple.corestorage.corestoraged,"['/usr/libexec/corestoraged']",14352f9fa45cf099c45fcafa0e304977a22b7b0e7b1f76a2daf3805f10729312,False,
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoragehelperd.plist,com.apple.corestorage.corestoragehelperd,"['/usr/libexec/corestoragehelperd']",08783fcdc6b8e662c46b53f64f5f8e3661f7c543870eb3110e8f8c066e433414,False,
-/System/Library/LaunchDaemons/com.apple.coresymbolicationd.plist,com.apple.coresymbolicationd,"['/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd']",7b7da74376add4d2a2387d75de663d30e17e4d359356cf4bcc32c7142c3f5e95,False,
-/System/Library/LaunchDaemons/com.apple.CrashReporterSupportHelper.plist,com.apple.CrashReporterSupportHelper,"['/System/Library/CoreServices/CrashReporterSupportHelper', 'server-init']",db89e8d3bc6437e0c8b1863f8559eba60cbd2fa27307375e94d8503311a0f652,False,
-/System/Library/LaunchDaemons/com.apple.ctkd.plist,com.apple.ctkd,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkd', '-s']",98b1ce0f11935bd05f648670a85f0a95c6f7901229e097e3fc0cd6b48b15c7f3,False,
-/System/Library/LaunchDaemons/com.apple.cvmsServ.plist,com.apple.cvmsServ,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer']",fc887d34d2140ffd5c2da196e35afc4af769cd15a338dd06a9ede90fb38c164e,False,
-/System/Library/LaunchDaemons/com.apple.DesktopServicesHelper.plist,com.apple.DesktopServicesHelper,"['/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper']",09c24ddc3093efbec45e325c4c8d360679abaae1d43bc589d07aa4c1cb23fefe,False,
-/System/Library/LaunchDaemons/com.apple.diagnosticd.plist,com.apple.diagnosticd,"['/usr/libexec/diagnosticd']",bc7ddb0a3fa8a68e822300fd69ea03049ac4f1862161350fb84a5ab8f8260adc,False,
-/System/Library/LaunchDaemons/com.apple.diskarbitrationd.plist,com.apple.diskarbitrationd,"['/usr/libexec/diskarbitrationd']",6b7fb8cf028fe061153012bbaad89787b3ba7acc63143e4a63ae77092bbd04fc,False,
-/System/Library/LaunchDaemons/com.apple.diskmanagementd.plist,com.apple.diskmanagementd,"['/usr/sbin/diskmanagementd']",6f148d0fbd992ee18ba8279b77dfb7498740e8ba377eb78af09ba9810e7681be,False,
-/System/Library/LaunchDaemons/com.apple.displaypolicyd.plist,com.apple.displaypolicyd,"['/usr/libexec/displaypolicyd']",ebab1741c8a8a89585bec10edd34d86fa2a5e12890c8445d9a042a8854351c33,True,
-/System/Library/LaunchDaemons/com.apple.distnoted.xpc.daemon.plist,com.apple.distnoted.xpc.daemon,"['/usr/sbin/distnoted', 'daemon']",4ebd678363ad903feb5d1b1a47841be323126de20ca2ceb4a82fb7c7fad305f6,False,
-/System/Library/LaunchDaemons/com.apple.dnsextd.plist,com.apple.dnsextd,"['/usr/sbin/dnsextd', '-launchd']",7065ed06690308de7969b08ada0ff9a787f429d64424551965073b3b9b6a5d95,False,
-/System/Library/LaunchDaemons/com.apple.dpaudiothru.plist,com.apple.dpaudiothru,"['/usr/libexec/dpaudiothru']",e4b7bfd8553d088da7921f321ca7f9e7907f8288d0f1e0cc7a91f4ccc3595429,False,
-/System/Library/LaunchDaemons/com.apple.dpd.plist,com.apple.dpd,"['/usr/libexec/dpd']",bbb6b265dfb52de30afa36817ec4c4ca5ef8ce5e955a3217630bf4d5d565ddbd,False,
-/System/Library/LaunchDaemons/com.apple.dspluginhelperd.plist,com.apple.dspluginhelperd,"['/usr/libexec/dspluginhelperd']",cfbf61bb44791035853cd90ed096b0644ea614330c44d86349040c84a35c0efa,False,
-/System/Library/LaunchDaemons/com.apple.DumpGPURestart.plist,com.apple.DumpGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/DumpGPURestart']",00520b19a06325a8309c25684dc1641893915fdbb6d9995b1cef15361a9e0b59,False,
-/System/Library/LaunchDaemons/com.apple.DumpPanic.plist,com.apple.DumpPanic,"['/System/Library/CoreServices/DumpPanic']",55e668726f7c265bae2202f21a186ad9c27157d373e5d8bfce6fa846aeb7e49b,True,
-/System/Library/LaunchDaemons/com.apple.dvdplayback.setregion.plist,com.apple.dvdplayback.setregion,"['/usr/bin/setregion']",ac4c6cd6cc5ddcd23e11e9125d81dc128fae513534d6d383ea7e8f898be8f2c0,False,
-/System/Library/LaunchDaemons/com.apple.dynamic_pager.plist,com.apple.dynamic_pager,"['/sbin/dynamic_pager', '-F', '/private/var/vm/swapfile']",71efeae467ad751380d2d005533601318a50bb8f5d4d4226e0c659f124849b3f,False,
-/System/Library/LaunchDaemons/com.apple.eapolcfg_auth.plist,com.apple.eapolcfg_auth,"['/System/Library/PrivateFrameworks/EAP8021X.framework/Resources/eapolcfg_auth']",d9b258f3fa2e40714910a1ea4d3befaf0d18b8bfad1fa1d348ec667d309bb1e9,False,
-/System/Library/LaunchDaemons/com.apple.efax.plist,com.apple.efax,"['/usr/bin/fax', 'answer']",2ac62536538d805afb108c26c8b2fe81ae2ab00700b175661ece2ec2af22a341,False,
-/System/Library/LaunchDaemons/com.apple.efilogin-helper.plist,com.apple.efilogin-helper,"['/System/Library/PrivateFrameworks/EFILogin.framework/Resources/efilogin-helper']",b927b543a2de72b1a03b7cdc22150c27a7d052659c3cc4b38c2f105464e63e9f,False,
-/System/Library/LaunchDaemons/com.apple.emlog.plist,com.apple.emlog,"['/usr/libexec/emlog.pl']",5328f0d109c2b421f0845c0d0fe0efb58734297dca5f8708dc5bda4fea57f634,False,
-/System/Library/LaunchDaemons/com.apple.emond.aslmanager.plist,com.apple.emond.aslmanager,"['/usr/sbin/aslmanager', '-s', '/var/log/eventmonitor']",afd40621bc22222dd930cef843240777314cc33ff61a1884609ae4588ad11cf4,False,
-/System/Library/LaunchDaemons/com.apple.emond.plist,com.apple.emond,"['/sbin/emond']",882a32ecc92f1e4d319d338a14c772b5a879db61fa35c9423461d4b8594f1f70,False,
-/System/Library/LaunchDaemons/com.apple.eppc.plist,com.apple.AEServer,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/AE.framework/Versions/A/Support/AEServer', '--debug']",84f873b2f93195c65dbb979ccbc983887d8ce78408ca0a9c448c72b1ec23562a,False,
-/System/Library/LaunchDaemons/com.apple.familycontrols.plist,com.apple.familycontrols,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/parentalcontrolsd']",bc47958d6df458640bc7f417cefee4a0e17f7a1c7b6d0132e6db2840c9913559,False,
-/System/Library/LaunchDaemons/com.apple.FileCoordination.plist,com.apple.FileCoordination,"['/usr/sbin/filecoordinationd']",2c85be3ee7964309b1cdab1ae7711837b1fbf9727ea3109fbabe844423351c96,False,
-/System/Library/LaunchDaemons/com.apple.FileSyncAgent.sshd.plist,com.apple.FileSyncAgent.sshd,"['/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/FileSyncAgent_sshd-keygen-wrapper', '-i', '-f', '/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/FileSyncAgent_sshd_config']",d24e7e74b9b82c2e0ac6ac47e1f29248d81246d7b58ae4efaf84f34d1a74ef93,False,
-/System/Library/LaunchDaemons/com.apple.findmymac.plist,com.apple.findmymacd,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacd']",2ad3b4f3264316a60fe5d5a7d191abc545f2df4f063a9591ede892ccd2ff386b,False,
-/System/Library/LaunchDaemons/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",44f224b2846ea0e7e6d920f396bc54e64c6ed629c33d2a8820515738be5cdb6d,False,"iCloud Find My Mac feature daemon"
-/System/Library/LaunchDaemons/com.apple.firmwaresyncd.plist,com.apple.firmwaresyncd,"['/usr/libexec/firmwaresyncd']",989ac9675f4d52eb23efc79a0174c756f8d0dd38ef8153563b23c79c32cbab89,True,
-/System/Library/LaunchDaemons/com.apple.fontd.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",dc55f9e3fb42a2ad38aac323e66223fc3d4a924fe7fc834f3934c8111b5c2141,False,
-/System/Library/LaunchDaemons/com.apple.fontmover.plist,com.apple.fontmover,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontmover', '-d']",928ad77ae1e1afbd6d72d86804a2070e3f5511939aec23a30d42d6bd40ede922,False,
-/System/Library/LaunchDaemons/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",236492be703611b65e521c918c895a156171665767ab6830e3a4478c4df5e881,False,
-/System/Library/LaunchDaemons/com.apple.fseventsd.plist,com.apple.fseventsd,"['/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd']",b527479c44fd984191e2791b78aef6417a107b474c3f51ecbe762a4ba565e31b,False,
-/System/Library/LaunchDaemons/com.apple.ftp-proxy.plist,com.apple.ftp-proxy,"['/usr/libexec/ftp-proxy']",a09af3a7a9e14313fd37aef137fd0149aec0084b972bde9e05327e98776108b5,False,
-/System/Library/LaunchDaemons/com.apple.GameController.gamecontrollerd.plist,com.apple.GameController.gamecontrollerd,"['/usr/libexec/gamecontrollerd']",e05f63d76fffeecd142baaabe49ca73fbcaf21641bf06e057f4a12a0d6b20f6e,False,
-/System/Library/LaunchDaemons/com.apple.getty.plist,com.apple.getty,"['/usr/libexec/getty', 'std.9600', 'console']",ee02574d38415e8af9cc0ec4323cb33383ca3261ff3c5cc266927afdab5fc70e,False,
-/System/Library/LaunchDaemons/com.apple.gkreport.plist,com.apple.gkreport,"['/usr/libexec/gkreport']",67d87aca1bb268cbb4578f637f0c2ceec3cc1d6cc259eb7584bec0eac2fb34c7,False,
-/System/Library/LaunchDaemons/com.apple.GSSCred.plist,com.apple.GSSCred,"['/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred']",77c0ddfc39112b0da7e3ff361c898a0f723fad4f478075951ffc00409ccde71a,False,
-/System/Library/LaunchDaemons/com.apple.gssd.plist,com.apple.gssd,"['/usr/sbin/gssd']",f3ef230d1452a6a07feab3401d54b5d74c64abe6c5918fb41973cf948a758814,False,
-/System/Library/LaunchDaemons/com.apple.hdiejectd.plist,com.apple.hdiejectd,"['/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd']",438ef740356633dabbccd6c5783361a88798666c1ad79f7ec1843b1a3b56854e,False,
-/System/Library/LaunchDaemons/com.apple.hidd.plist,com.apple.hidd,"['/usr/libexec/hidd']",53c6e91c199a34950005dae13c1e3938bc1f539e00f91ee18435369b7b6003bf,False,
-/System/Library/LaunchDaemons/com.apple.icloud.findmydeviced.plist,com.apple.icloud.findmydeviced,"['/usr/libexec/findmydeviced']",a1e92e968f08a3608edd19e58554d612593c689a8fb4f8c4884961af73d2a77b,False,
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",05a40a54c28ec6b2ab3d550e90125f7fad3709e5111a0dff7b1946c07f05b9fb,True,
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesd.plist,com.apple.iconservices.iconservicesd,"['/System/Library/CoreServices/iconservicesd']",b93d87270c6f30b2febd86f8c07af5e4654ae2cc0b6fda9081f97285c2a4e1cc,True,
-/System/Library/LaunchDaemons/com.apple.IFCStart.plist,com.apple.IFCStart,"['/usr/libexec/ifcstart']",4eb0f6ec472ab5431b50dad038bf1711134e785c832840d0a56db680f020969b,True,
-/System/Library/LaunchDaemons/com.apple.ifdreader.plist,com.apple.ifdreader,"['/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader']",77d5836c8ea1f5c9836848996d7a5faf7f76de6cb11640b91fbec5442da3423e,False,
-/System/Library/LaunchDaemons/com.apple.installandsetup.systemmigrationd.plist,com.apple.installandsetup.systemmigrationd,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/systemmigrationd']",c1e2b96f17dd60ae36b56759fd9d15b220c846ded904b47503e42a573479d9cd,False,
-/System/Library/LaunchDaemons/com.apple.installd.plist,com.apple.installd,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",b46bc3a8209f8530f7e16a5fd29f988d0cdccaa6a15dd445e3ce3d5e0697a2b5,False,
-/System/Library/LaunchDaemons/com.apple.IOAccelMemoryInfoCollector.plist,com.apple.IOAccelMemoryInfoCollector,"['/usr/libexec/IOAccelMemoryInfoCollector']",889eb805fcc8d4c68d5bbbf50f4b7715b65b43fb67731a13f8167c8c0a493b34,False,
-/System/Library/LaunchDaemons/com.apple.IOBluetoothUSBDFU.plist,com.apple.IOBluetoothUSBDFU,"['/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothUSBDFU.kext/Contents/Resources/IOBluetoothUSBDFUTool']",2d34c22b0b50aefca31d5bc556867cc4822019c4e81cb9dd8ae41d6ac92dc1a1,False,
-/System/Library/LaunchDaemons/com.apple.kcproxy.plist,com.apple.kcproxy,"['/usr/libexec/kcproxy']",7992ec521b021a8377bdb5c1ab5683eb4fe7cb958f5baaa9d09fbc41ee138398,False,
-/System/Library/LaunchDaemons/com.apple.kdumpd.plist,com.apple.kdumpd,"['/usr/libexec/kdumpd', '/PanicDumps']",fd4ea4b00b93e4dd1fb0d30b703ce6aff011ae80faca9fa60aa4dd5956a4e8b5,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.digest-service.plist,com.apple.Kerberos.digest-service,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/digest-service']",22851ca673f960c0e9086c00b4da61a03515d42d8464b8108f5fa85cfeb2a699,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kadmind.plist,com.apple.Kerberos.kadmind,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind']",73f0206d7667b0facf57033253474a022357432afc80926df1463d1f55af9402,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kcm.plist,com.apple.Kerberos.kcm,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm', '--launchd']",62f8f7d25e41f07eb61b28a1d7377eefd2b16cfc4a4947bb2a83e3ae5a365532,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist,com.apple.Kerberos.kdc,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc']",78fb0995e32980948b242e49474ff96b08a7445d2b2d6236fbf53cc102dec79e,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kpasswdd.plist,com.apple.Kerberos.kpasswdd,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kpasswdd']",b27c723d30de5763c45a81de77a700ff6bde24118bd2dc06428a511468389424,False,
-/System/Library/LaunchDaemons/com.apple.KernelEventAgent.plist,com.apple.KernelEventAgent,"['/usr/sbin/KernelEventAgent']",daddcc7434163375810ca3867165b1471b30818b2ddbd3c1ad5aa5268e886cb1,False,"Responsible for displaying disk full and unresponsive file server messages"
-/System/Library/LaunchDaemons/com.apple.kextd.plist,com.apple.kextd,"['/usr/libexec/kextd']",7f0ce8497cca7dae5150fb10c84e33b0b2bed0b87d82fef5c0de4a4e04670ac8,False,
-/System/Library/LaunchDaemons/com.apple.kuncd.plist,com.apple.kuncd,"['/usr/libexec/kuncd']",19459bd269e33f99c3b10b48161709ee63b15bdc482872a6e3f543c2a731c694,False,
-/System/Library/LaunchDaemons/com.apple.locate.plist,com.apple.locate,"['/usr/libexec/locate.updatedb']",42bdf79e638bb3f4db220b39475edd8b83d441580a192c71ea3285735e066eea,False,
-/System/Library/LaunchDaemons/com.apple.locationd.plist,com.apple.locationd,"['/usr/libexec/locationd']",0736e0dd1ce04ff499c968a23a3eb18d2d8d900086968c407341c94dc9d10099,False,Location daemon
-/System/Library/LaunchDaemons/com.apple.lockd.plist,com.apple.lockd,"['/usr/sbin/rpc.lockd']",7597b85ae9fc0612e46d4b87ef7f0434d35a07696b04b6d44f03ea5bf257d06a,False,
-/System/Library/LaunchDaemons/com.apple.logind.plist,com.apple.logind,"['/System/Library/CoreServices/logind']",83f00af483a362e86df65fc0313d47653b05c0d1b3b5913bd50b870b702faac3,True,
-/System/Library/LaunchDaemons/com.apple.loginwindow.LFVTracer.plist,com.apple.loginwindow.LFVTracer,"['/System/Library/CoreServices/loginwindow.app/Contents/Resources/LegacyFileVaultMessageTracer']",ec96c6326a7923d656ac96325e5c5669f0fccfae61083cf292f7ff0289f106da,False,
-/System/Library/LaunchDaemons/com.apple.loginwindow.plist,com.apple.loginwindow,"['/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow', 'console']",c14aa55ac8c5fea96f50d08d5b533e1c516701d385444b20860c20a1247df4e1,False,
-/System/Library/LaunchDaemons/com.apple.logkextloadsd.plist,com.apple.logkextloadsd,"['/usr/libexec/logkextloadsd']",f38715cbe145f7d3429af16293cab23455b201f9fdd19fdb1b230529554dcc9b,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.cloudconfigurationd.plist,com.apple.ManagedClient.cloudconfigurationd,"['/usr/libexec/cloudconfigurationd']",1e54e92cc9dca9bb25ce3fe9b5c7db754312a0b6f3b107667e5fe7fad73ce932,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist,com.apple.ManagedClient.enroll,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-e']",b2c8ee5eb2db75ccfa21dd664488ade48fde5e95b988fe33d1e2e12be4452c35,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.plist,com.apple.ManagedClient,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient']",b2c8ee5eb2db75ccfa21dd664488ade48fde5e95b988fe33d1e2e12be4452c35,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.startup.plist,com.apple.ManagedClient.startup,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-i']",b2c8ee5eb2db75ccfa21dd664488ade48fde5e95b988fe33d1e2e12be4452c35,True,
-/System/Library/LaunchDaemons/com.apple.mbicloudsetupd.plist,com.apple.mbicloudsetupd,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbicloudsetupd']",723dfefe0192e4ad9e25f11899306e0bfaa2f07ab5e023ce1d73bc45c0a88ce9,False,
-/System/Library/LaunchDaemons/com.apple.mdmclient.daemon.plist,com.apple.mdmclient.daemon,"['/usr/libexec/mdmclient', 'daemon']",8b29d46bf93f8b33ead6d9d4d4341f25256ef8d61389978ac39e90dd3fed4617,True,
-/System/Library/LaunchDaemons/com.apple.mDNSResponder.plist,com.apple.mDNSResponder.reloaded,"['/usr/sbin/mDNSResponder', '-launchd', '-noMulticastAdvertisements']",db34b37c427762aeb76a9eef26f33dc3586ffe8eaffdf4d1f8492c99a0477db6,False,
-/System/Library/LaunchDaemons/com.apple.mDNSResponderHelper.plist,com.apple.mDNSResponderHelper.reloaded,"['/usr/sbin/mDNSResponderHelper']",8a600f239de7716fbb7ddd1615b261919050f5c722638a0a409cc97fd0ac8f84,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.index.plist,com.apple.metadata.mds.index,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores']",7869efc52c2e822a313f21674d320a044f8042e7b8b6d641b918e9a3e263e6ec,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.plist,com.apple.metadata.mds,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds']",2b22795c111c8512c461ffdf438eec611b08036bbd467b344301f2169af9a30a,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.scan.plist,com.apple.metadata.mds.scan,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-scan', '-c', 'MDSSyncScanWorker', '-m', 'com.apple.metadata.mds.scan']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.spindump.plist,com.apple.metadata.mds.spindump,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'none', '-c', 'MDSSpinDumpWorker', '-m', 'com.apple.metadata.mds.spindump']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchDaemons/com.apple.MobileFileIntegrity.plist,com.apple.MobileFileIntegrity,"['/usr/libexec/amfid']",8e6585e67d76a2f7897d0a89e27c4fe21349640ab237d7b0afc2db194e123cfb,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.echosvc.plist,com.apple.msrpc.echosvc,"['/usr/libexec/rpcsvchost', '-launchd', 'echosvc.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.lsarpc.plist,com.apple.msrpc.lsarpc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'lsarpc.bundle', 'dssetup.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.mdssvc.plist,com.apple.msrpc.mdssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'mdssvc.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.netlogon.plist,com.apple.msrpc.netlogon,"['/usr/libexec/rpcsvchost', '-launchd', 'netlogon.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.srvsvc.plist,com.apple.msrpc.srvsvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'srvsvc.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.wkssvc.plist,com.apple.msrpc.wkssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'wkssvc.bundle']",2ab324d33fc4b1853877528c3e46c4919b913b5a485532df22d190ccaa808fc5,False,
-/System/Library/LaunchDaemons/com.apple.mtmd.plist,com.apple.mtmd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd']",9a8133c80a4ff974c3cc94aa2e7e71bfdb74d5a7b3ce8e52e9c06cea3afd88d5,True,
-/System/Library/LaunchDaemons/com.apple.mtmfs.plist,com.apple.mtmfs,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmfs', '--tcp', '--resvport', '--listen', 'localhost', '--oneshot', '--noportmap', '--nobrowse']",73ab85c294c7b79123dbcda1c25711280307d45d7daa3ea039c706bb2010cced,True,
-/System/Library/LaunchDaemons/com.apple.nehelper.plist,com.apple.nehelper,"['/usr/libexec/nehelper']",58a612c581062b6f1f0ae1bbf581f5348154f7553a82677d92330491935646e4,False,
-/System/Library/LaunchDaemons/com.apple.nesessionmanager.plist,com.apple.nesessionmanager,"['/usr/libexec/nesessionmanager']",7948674dcc024f9c44514470288c4070c76b7efef83a961b161007c1edbd2b82,False,
-/System/Library/LaunchDaemons/com.apple.netauth.sys.auth.plist,com.apple.netauth.sys.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent', '--sys']",15e3d0f498e5fbd131fa0fe32ac54af6c7595d618ab98cf38cb1adfac7063a88,False,
-/System/Library/LaunchDaemons/com.apple.netauth.sys.gui.plist,com.apple.netauth.sys.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent', '--sys']",5e1ff53d5740591660f0f85d909a61bb5b08491cdd29c4dc57a3cf7e28825e49,False,
-/System/Library/LaunchDaemons/com.apple.netbiosd.plist,com.apple.netbiosd,"['/usr/sbin/netbiosd']",d8af971604b8617c9f4c776e31463c0d1f994b3636e8983739f5a41a61306cf8,False,"netbiosd is responsible for interacting with NetBIOS networks."
-/System/Library/LaunchDaemons/com.apple.NetBootClientStatus.plist,com.apple.NetBootClientStatus,"['/usr/sbin/NetBootClientStatus']",818bbf68426f3187915ffdea714004eb57de594f098e7be7ef83e65645cc7ecb,True,
-/System/Library/LaunchDaemons/com.apple.networkd.plist,com.apple.networkd,"['/usr/libexec/networkd']",b99aa46133eeb9f82b5c431455cf249616fb98303e591587408ea1280185a20b,False,network daemon
-/System/Library/LaunchDaemons/com.apple.networkd_privileged.plist,com.apple.networkd_privileged,"['/usr/libexec/networkd_privileged']",e773080f87880ed0b24bdd222fd8497b4e2f84d44035caaeefc41359592af8d8,False,
-/System/Library/LaunchDaemons/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",065eb6ca7c5e3ec8f97cdeef69d65939a81e7a4c9fe2656c47c70f4de0841443,False,
-/System/Library/LaunchDaemons/com.apple.NetworkLinkConditioner.plist,com.apple.nlcd,"['/usr/libexec/nlcd']",5281f78356fffb4e9844bac54bd83659a6bde537609884c61d4bf10890ddee23,False,
-/System/Library/LaunchDaemons/com.apple.NetworkSharing.plist,com.apple.NetworkSharing,"['/usr/libexec/InternetSharing']",c651196eb946fb6f0675e12f39743b568a96eb18ac3af58dc069eecfd8a10578,False,
-/System/Library/LaunchDaemons/com.apple.newsyslog.plist,com.apple.newsyslog,"['/usr/sbin/newsyslog']",adb6b77c997727d03b9087879dd546e513b337fb311de5897b767d53a9aec624,False,
-/System/Library/LaunchDaemons/com.apple.nfsconf.plist,com.apple.nfsconf,"['/sbin/mount_nfs', 'configupdate']",7bee79771a2e8af2e6d4d9714a245997c0426a7b3fe0ab779eaa87b2bed1bc82,True,
-/System/Library/LaunchDaemons/com.apple.nfsd.plist,com.apple.nfsd,"['/sbin/nfsd']",fe31798175817576a226b53322be7ce0c5e7224c1bc0b5d7e21254a848dc0c36,False,
-/System/Library/LaunchDaemons/com.apple.nis.ypbind.plist,com.apple.nis.ypbind,"['/usr/sbin/ypbind']",2a7d40ecb1189a64b11062aad0ee15557193a714792de7f879a04cb00c7af627,False,
-/System/Library/LaunchDaemons/com.apple.noticeboard.state.plist,com.apple.noticeboard.state,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated']",9d5cb80f6d4df2ab0efc7ca2bc4e2980cc655fa82d8ee355845692eeab938cf7,False,
-/System/Library/LaunchDaemons/com.apple.notifyd.plist,com.apple.notifyd,"['/usr/sbin/notifyd']",1c09e946ed973590916a4daf082a8bb596d2d8c74992e17f7f1efd4d5663d0a0,False,
-/System/Library/LaunchDaemons/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond_privileged,"['/usr/libexec/nsurlsessiond', '--privileged']",13718923aa29862e4225846e29f29ab9ab5109dcb87727fc414d7d2be788ef08,False,
-/System/Library/LaunchDaemons/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",5ff8b9555bc60225f879c89f8588872d42508f99d5bae9b4d84c529a912a22e7,False,
-/System/Library/LaunchDaemons/com.apple.ocspd.plist,com.apple.ocspd,"['/usr/sbin/ocspd']",a2d569b138a894e0a83bd791ef5f2af36f0d85bfaec4610c08e86051c9396e7d,False,"Performs caching and network fetching of CRLs and OCSP responses, used by Security.framework during certificate verification"
-/System/Library/LaunchDaemons/com.apple.odproxyd.plist,com.apple.odproxyd,"['/usr/libexec/odproxyd']",2af2d6649b37271b3d1f4569f66247687c2eea5537972da8c21d8c4093e920fe,False,
-/System/Library/LaunchDaemons/com.apple.ODSAgent.plist,com.apple.ODSAgent,"['/System/Library/CoreServices/ODSAgent.app/Contents/MacOS/ODSAgent', '-launchd']",86b1e8701eb55aea3fb086a35306b9149f2b8ed7515cbe524eb35cf0505395f0,False,
-/System/Library/LaunchDaemons/com.apple.opendirectoryd.plist,com.apple.opendirectoryd,"['/usr/libexec/opendirectoryd']",70a25df43706e9fa5e653e2990526ad5ff9ced360ec16a5ade2333544213cbba,False,
-/System/Library/LaunchDaemons/com.apple.pacemaker.plist,com.apple.pacemaker,"['/usr/libexec/pacemaker', '-b', '-e', '0.0001', '-a', '10']",64c7210d8161f862ced2603e7e716bbbf3dd6c85802cebaeba1a88e65d2cb424,False,
-/System/Library/LaunchDaemons/com.apple.PasswordService.plist,com.apple.PasswordService,"['/usr/sbin/PasswordService', '-n']",1b2e8ee7b929b24defd3b612189db99ab0966bc09da5bf483675b72fc1dbbec6,False,
-/System/Library/LaunchDaemons/com.apple.PCIELaneConfigTool.plist,com.apple.PCIELaneConfigTool,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIELaneConfigTool']",a76bbbe759aad613ff18ad6c26dcab5aa7d0b4994a658f48628ffc319bb13962,False,
-/System/Library/LaunchDaemons/com.apple.periodic-daily.plist,com.apple.periodic-daily,"['/usr/libexec/periodic-wrapper', 'daily']",48c844734fd94e7a4b22f6180d3c15202bd411cd5ffaa835105b8c2c66ec2ec8,False,
-/System/Library/LaunchDaemons/com.apple.periodic-monthly.plist,com.apple.periodic-monthly,"['/usr/libexec/periodic-wrapper', 'monthly']",48c844734fd94e7a4b22f6180d3c15202bd411cd5ffaa835105b8c2c66ec2ec8,False,
-/System/Library/LaunchDaemons/com.apple.periodic-weekly.plist,com.apple.periodic-weekly,"['/usr/libexec/periodic-wrapper', 'weekly']",48c844734fd94e7a4b22f6180d3c15202bd411cd5ffaa835105b8c2c66ec2ec8,False,
-/System/Library/LaunchDaemons/com.apple.pfctl.plist,com.apple.pfctl,"['/sbin/pfctl']",41a9ea890f187bc62b9cb8789db3f1ac533a1f0af2a221029eab59e36551ca5e,True,
-/System/Library/LaunchDaemons/com.apple.pfd.plist,com.apple.pfd,"['/usr/libexec/pfd', '-d']",ae82283592ce9d60b3f16f8e6e10fc79e8d4d7dd75bce6ff239eeb3fef79df13,False,
-/System/Library/LaunchDaemons/com.apple.platform.ptmd.plist,com.apple.platform.ptmd,"['/usr/libexec/ptmd']",1a0badf94c446ad897fa9014c73322af742b857e9453c42ebcb93f0d50808067,True,
-/System/Library/LaunchDaemons/com.apple.postgres.plist,com.apple.postgres,"['/Applications/Server.app/Contents/ServerRoot/usr/bin/xpostgres', '-a', '/Library/Server/PostgreSQL For Server Services/Config/com.apple.postgres.plist']",UNKNOWN,False,Legacy or server app
-/System/Library/LaunchDaemons/com.apple.powerd.plist,com.apple.powerd,"['/System/Library/CoreServices/powerd.bundle/powerd']",d1f5caece5dcb79e7ec4c954e3a77bb3b8477bbd74f52cc1ac34504796587246,False,
-/System/Library/LaunchDaemons/com.apple.powerd.swd.plist,com.apple.powerd.swd,"['/System/Library/CoreServices/powerd.bundle/swd']",997e33b28b0abc345a3720f3d0459fb7d15d0e8be06d1e91ba8d2efb5e3f664f,False,
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.admintool.plist,com.apple.preferences.timezone.admintool,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/TimeZoneAdminTool']",ee6e51396a9b649947bf78abea8c9206b0f0c0e4cfe98544371d4367231d81bd,False,
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.auto.plist,com.apple.preferences.timezone.auto,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/timezoned.app/Contents/MacOS/timezoned']",97f3f470b3f41919dc5b4e0b218a2c902e80da0a8c9b849350698406ccb0dc34,False,
-/System/Library/LaunchDaemons/com.apple.printtool.daemon.plist,com.apple.printtool.daemon,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'daemon']",8d7167dfdcac008960d3e370517196ef8bf04859e8f907c78f7807aff2598ae8,False,
-/System/Library/LaunchDaemons/com.apple.racoon.plist,com.apple.racoon,"['/usr/sbin/racoon', '-D']",7d69b41215112484bc41607e071415155e85bcf7d54d40ce5f1576de380e0b6d,False,Built-in VPN key management daemon
-/System/Library/LaunchDaemons/com.apple.RemoteDesktop.PrivilegeProxy.plist,com.apple.RemoteDesktop.PrivilegeProxy,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/VNCPrivilegeProxy']",d88f0f33186868aa6636871e22b9d25de96d046b1cd0acb34a4e19b7a52926d7,False,
-/System/Library/LaunchDaemons/com.apple.remotepairtool.plist,com.apple.RemotePairTool,"['/System/Library/CoreServices/RemotePairTool']",750a4f32df8c5e1ff9d992e90a98990efd6c4d0d033f3d0778ca3b50c986df56,False,
-/System/Library/LaunchDaemons/com.apple.ReportCrash.Root.plist,com.apple.ReportCrash.Root,"['/System/Library/CoreServices/ReportCrash']",11d31bae0610afec73405f2f2defd1b1db18d8ee690df09c7140af4710881709,False,
-/System/Library/LaunchDaemons/com.apple.ReportPanicService.plist,com.apple.ReportPanicService,"['/System/Library/CoreServices/ReportPanicService']",a5863a88099a5f14a6992235dc4828d56f2bba2c4a011c34f1501edef877913c,False,
-/System/Library/LaunchDaemons/com.apple.revisiond.plist,com.apple.revisiond,"['/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond']",f1ba71b754f622fdd9b5b3c34f08ff71b857a5173059dc754ac7a9869bcccf06,True,
-/System/Library/LaunchDaemons/com.apple.RFBEventHelper.plist,com.apple.RFBEventHelper,"['/System/Library/CoreServices/RFBEventHelper.bundle/Contents/MacOS/RFBEventHelperd']",c4c826afee190df98c9d0c5eacf303dd13c8870626d20c6850b300325a3da48d,False,
-/System/Library/LaunchDaemons/com.apple.rpcbind.plist,com.apple.rpcbind,"['/usr/sbin/rpcbind']",40798e3aa867b98814c6c5ffaacd15e56514d8ab866d2ef2f86f921e4489f357,False,
-/System/Library/LaunchDaemons/com.apple.sandboxd.plist,com.apple.sandboxd,"['/usr/libexec/sandboxd', '-n', 'PluginProcess', '-n', '']",40f3402bf6d084c319f50b7e6989d286706325c5f90b7068c3ceaddad99aa8bb,False,
-/System/Library/LaunchDaemons/com.apple.SCHelper.plist,com.apple.SCHelper,"['/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Helpers/SCHelper']",3a5463904d73efa07bdc972afdaa8183d83739f6543ad445e2f6e402fdb513ff,False,
-/System/Library/LaunchDaemons/com.apple.screensharing.plist,com.apple.screensharing,"['/System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/MacOS/screensharingd']",c02003ee7ba729185c2b3272aae7c8829854de3e251575492195856cc4b74a8f,False,
-/System/Library/LaunchDaemons/com.apple.scsid.plist,com.apple.scsid,"['/usr/libexec/scsid']",d94baf8458de18da383cadc52b6c3a56bab7fb7d15bbca6250737dea80909120,True,
-/System/Library/LaunchDaemons/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",2d479d0a9c84e0cfe65d9bd81e1f593de621612f0374b0daf5e69e548bd66b80,False,
-/System/Library/LaunchDaemons/com.apple.security.agentMain.plist,com.apple.security.agentMain,"['/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/SecurityAgent.xpc/Contents/MacOS/SecurityAgent']",68ac4c762911f781c1c047c7ab92d6466e621cc3d78fed6b78d8eb688abc57a6,False,
-/System/Library/LaunchDaemons/com.apple.security.authhost.plist,com.apple.security.authhost,"['/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/authorizationhost.xpc/Contents/MacOS/authorizationhost']",7aec336bd38bad27dbe6d56fc5cc07fb00895505bf776697dbf19424af360d5f,False,
-/System/Library/LaunchDaemons/com.apple.security.FDERecoveryAgent.plist,com.apple.security.FDERecoveryAgent,"['/usr/libexec/FDERecoveryAgent']",0d1982ce9d8ade6dd6c8ceca641e31c2f98c9f2c5ca8c544201aef21e7a23f89,True,
-/System/Library/LaunchDaemons/com.apple.security.syspolicy.plist,com.apple.security.syspolicy,"['/usr/libexec/syspolicyd']",254f85025403cbab37b89a5fc641a2b35c2be26767a2fbfcf9e4726068a8b40a,False,
-/System/Library/LaunchDaemons/com.apple.securityd.plist,com.apple.securityd,"['/usr/sbin/securityd', '-i']",4f748e5caec6d87df71991110c7f1c48a1d7808314cd3dd78c24f44a5cd327c6,True,
-/System/Library/LaunchDaemons/com.apple.securityd_service.plist,com.apple.securityd_service,"['/usr/libexec/securityd_service']",5019cb7c55e6b593d7cc5165bda671a4e2b918dab9a331741255e40f72711289,False,
-/System/Library/LaunchDaemons/com.apple.sessionlogoutd.plist,com.apple.sessionlogoutd,"['/System/Library/CoreServices/sessionlogoutd']",b1a5b7b09f11940150172cf152239ee3c55a4667270e111f530f80c51f242146,False,
-/System/Library/LaunchDaemons/com.apple.smb.preferences.plist,com.apple.smb.preferences,"['/usr/libexec/smb-sync-preferences']",6a03ec8037b35207a4269757e6d4d4543a1523fe9694a90ecda5684b6ea5966b,True,
-/System/Library/LaunchDaemons/com.apple.smbd.plist,com.apple.smbd,"['/usr/sbin/smbd']",a2037aa53864f50db0bd0b3aeeeb85bc3b6281128c3da9375db0d790d939aaec,False,
-/System/Library/LaunchDaemons/com.apple.softwareupdate_download_service.plist,com.apple.softwareupdate_download_service,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service']",57434feed2c56cdfb486f80f20646bde3aff1489033c2dde6a5b78a764ab54f7,False,
-/System/Library/LaunchDaemons/com.apple.softwareupdate_firstrun_tasks.plist,com.apple.softwareupdatecheck.initial,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_firstrun_tasks', '-BuildTagCache', 'YES']",a54ecf8d1c486df0874f51b743c6dcd502bccd5c0e8911b136e608e0a969b249,True,
-/System/Library/LaunchDaemons/com.apple.softwareupdated.plist,com.apple.softwareupdated,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated']",9b58f4fe20cf11b4b2bd8035db3e61db56a6f8aaac22d1baace5e6f15b68b913,False,
-/System/Library/LaunchDaemons/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",77800391daaf9b9dd56eda8222c7c75d743d0433039b886764d0c7ba6dc03908,False,
-/System/Library/LaunchDaemons/com.apple.spindump.plist,com.apple.spindump,"['/usr/sbin/spindump']",80f552b7561ceb2017cf47d729ff38903e1183886c4da6860411108ac7eece56,False,
-/System/Library/LaunchDaemons/com.apple.stackshot.plist,com.apple.stackshot,"['/usr/libexec/stackshot', '-t', '-O']",69f19ff0cc6caa239b328737e771b9d5158e2a590740d990f305dfb4658b0c0e,False,
-/System/Library/LaunchDaemons/com.apple.statd.notify.plist,com.apple.statd.notify,"['/usr/sbin/rpc.statd', '-n']",81ee4af0e22e6451ad599b737b47fb4ae544f7891ad83960b8aac9f1d23197da,True,
-/System/Library/LaunchDaemons/com.apple.storagekitd.plist,com.apple.storagekitd,"['/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd']",504b92896aa152dee22e407c299119d354d8e756eac9f8852db3179dc3e2394c,False,
-/System/Library/LaunchDaemons/com.apple.storereceiptinstaller.plist,com.apple.storereceiptinstaller,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/ReceiptInstaller']",401d0a39bb34eabd11ce2bc6ae76a5cc244435a58e91d3b843edef53026e0b08,False,
-/System/Library/LaunchDaemons/com.apple.SubmitDiagInfo.plist,com.apple.SubmitDiagInfo,"['/System/Library/CoreServices/SubmitDiagInfo', 'server-init']",95eb5aa7761667ad373c4478ee9a52e32a224dbee86be1726b699b60f1ddebcd,False,"Sends diagnostic information to Apple"
-/System/Library/LaunchDaemons/com.apple.suhelperd.plist,com.apple.suhelperd,"['/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd']",d751262ea13269bb5d3d929bf6cbddd2db2dee555482bcda0aeac381216a780d,False,
-/System/Library/LaunchDaemons/com.apple.syslogd.plist,com.apple.syslogd,"['/usr/sbin/syslogd']",f262ae3cee8001ec63e5c72a4228b7b3ca9b9c84a59e73e801952fd6ead570bb,False,
-/System/Library/LaunchDaemons/com.apple.sysmond.plist,com.apple.sysmond,"['/usr/libexec/sysmond']",f1042a555db65ae1d15cd6003f5f5ea01a351dc2fa1687594069dc1b7fd62ed6,False,
-/System/Library/LaunchDaemons/com.apple.systemkeychain.plist,com.apple.systemkeychain,"['/usr/sbin/systemkeychain', '-d']",ad4c1616df2786f1847457655ca1cfa41e665929a8f9869c034be19a2e04e7fd,False,
-/System/Library/LaunchDaemons/com.apple.systempreferences.installer.plist,com.apple.systempreferences.install,"['/Applications/System Preferences.app/Contents/Resources/installAssistant']",49adcce27e18e86c86a9a0615c2959f74d7ab0c235fdb83f660ffc3c898282b5,False,
-/System/Library/LaunchDaemons/com.apple.systemstats.analysis.plist,com.apple.systemstats.analysis,"['/usr/sbin/systemstats', '--xpc']",4aecb7d07b0b2989e9a24b35002680cdbc87754831bea1d32d5efec7d124501e,False,
-/System/Library/LaunchDaemons/com.apple.systemstats.daily.plist,com.apple.systemstats.daily,"['/usr/sbin/systemstats', '--daily']",4aecb7d07b0b2989e9a24b35002680cdbc87754831bea1d32d5efec7d124501e,False,
-/System/Library/LaunchDaemons/com.apple.systemstatsd.plist,com.apple.systemstatsd,"['/usr/libexec/systemstatsd']",33bd61c3c82f6c1b00ec2f7d756f58809cb33f0566af3e23daa768f51089de6b,False,
-/System/Library/LaunchDaemons/com.apple.taskgated-helper.plist,com.apple.taskgated-helper,"['/usr/libexec/taskgated-helper']",98b5ffe6898d34734b511944e26f05683ef20d71682be0e1bfff42495e7193a9,False,
-/System/Library/LaunchDaemons/com.apple.taskgated.plist,com.apple.taskgated,"['/usr/libexec/taskgated', '-s']",4c8b36e8c78728e75f00f86711bd7247a82b90230fe69929c8e9d41f113a99e9,False,
-/System/Library/LaunchDaemons/com.apple.tccd.system.plist,com.apple.tccd.system,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd', 'system']",a796f973dea81ada2768b828ce95a2ecda4a8d39e12634a119b8333ac5004f30,False,
-/System/Library/LaunchDaemons/com.apple.thermald.plist,com.apple.thermald,"['/usr/libexec/thermald']",8e50866ebe64bbc7e46cbbdea75c30fb61bf18c43d3bcbc2f650ec760e29188a,True,"Thermal management daemon"
-/System/Library/LaunchDaemons/com.apple.TMCacheDelete.plist,com.apple.TMCacheDelete,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete']",279541928916eac0a538f6f4208f604fc29008149ad721d18adcbf02b8911d58,False,
-/System/Library/LaunchDaemons/com.apple.TrustEvaluationAgent.system.plist,com.apple.TrustEvaluationAgent.system,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",1b26f322605aaee84eca81cc8b4481593682276a1efe28080374a12e97b4bd49,False,
-/System/Library/LaunchDaemons/com.apple.ucupdate.plist,com.apple.ucupdate.plist,"['/usr/libexec/ucupdate', '-m', '/usr/share/ucupdate/microcode.dat']",5c158c23b4e241dc9e73e2edc162cbea1d791b5c83933518092032767e6e235d,True,
-/System/Library/LaunchDaemons/com.apple.uninstalld.plist,com.apple.uninstalld,"['/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld']",a6021d9950561452543f2c06de4d85a5fc0a7c5644ba87a69e829180574beaf9,False,
-/System/Library/LaunchDaemons/com.apple.unmountassistant.sysagent.plist,com.apple.unmountassistant.sysagent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/Resources/UASysAgent']",cb2daefe26b63909776500dedf26b07288d4bf72e3b9360c60cd2a9f1ab03fd3,False,
-/System/Library/LaunchDaemons/com.apple.updateEFIDesktopPicture.plist,com.apple.updateEFIDesktopPicture,"['/usr/sbin/kextcache', '-u', '/']",6ccd8e5f5f074ebc2ccc7e4847c94fbcd68e7cb83a42a3cc1baeee098aceb886,False,
-/System/Library/LaunchDaemons/com.apple.usbd.plist,com.apple.usbd,"['/usr/libexec/usbd']",01b0d0b102932f46d3e4ed89cbdf987c7614aa536def7a731f2cdad557ebe70c,False,
-/System/Library/LaunchDaemons/com.apple.usbmuxd.plist,com.apple.usbmuxd,"['/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd', '-launchd']",3437dd791960d11e9b8baea43f2896222bd38201e6bb7e0ed3607ba8145169f5,True,
-/System/Library/LaunchDaemons/com.apple.UserEventAgent-System.plist,com.apple.UserEventAgent-System,"['/usr/libexec/UserEventAgent', '(System)']",f7796fba68d4936f231fccc098c5b8ddfee88c2c04da85217374736724604527,False,
-/System/Library/LaunchDaemons/com.apple.UserNotificationCenter.plist,com.apple.UserNotificationCenter,"['/System/Library/CoreServices/uncd']",cffa1c92e97e69903cc65e0c31c9a4ce3d6dbf820cfb0ce771c388620af114c6,False,
-/System/Library/LaunchDaemons/com.apple.uucp.plist,com.apple.uucp,"['/usr/sbin/uucico', '-l', '-D']",aff3ee38a7b21d8f0132420a0c273e6a0fd8c9a260bc07e71fa827fb55472aa9,False,
-/System/Library/LaunchDaemons/com.apple.var-db-dslocal-backup.plist,com.apple.var-db-dslocal-backup,"['/usr/bin/xar', '-c', '-f', 'dslocal-backup.xar', 'dslocal']",1c21d4b35c8a3b57d0a1c01b98bcb24cb8b22361437443252bd9745e9ffa721a,False,
-/System/Library/LaunchDaemons/com.apple.vsdbutil.plist,com.apple.vsdbutil,"['/usr/sbin/vsdbutil', '-i']",9f7471376fb2065bc795d3b10eec1b73f01d56d18c1ea698b9d1e3cb23f84914,False,
-/System/Library/LaunchDaemons/com.apple.warmd.plist,com.apple.warmd,"['/usr/libexec/warmd']",ab5f216da4b534a7954d81e6346cabe40fb0b61ae68820cd1dbcf5bc40215010,True,
-/System/Library/LaunchDaemons/com.apple.watchdogd.plist,com.apple.watchdogd,"['/usr/libexec/watchdogd']",1a902c228dc0205a15952c4e32e5904b71ed31b5d07d5f561170c093df959714,True,
-/System/Library/LaunchDaemons/com.apple.wdhelper.plist,com.apple.wdhelper,"['/usr/libexec/wdhelper']",58e5bc3281d3df4a78fe709cae5b2ee9e03d60388a111f6fef746ffb7a4ff985,True,
-/System/Library/LaunchDaemons/com.apple.wifid.plist,com.apple.wifid,"['/usr/libexec/wifid']",3b39e4c4f727dadb2408a103f888ccc3b3bd36c81354cfd1b5f8d60a56e7c17e,False,
-/System/Library/LaunchDaemons/com.apple.WindowServer.plist,com.apple.WindowServer,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/CoreGraphics.framework/Resources/WindowServer', '-daemon']",5aeef41aa1d11765fcf945f0f4fd06d92b9f9e9321c9fff3630292e91f116856,False,
-/System/Library/LaunchDaemons/com.apple.wirelessproxd.plist,com.apple.wirelessproxd,"['/usr/sbin/wirelessproxd']",01f61680ba859fe47639d13feb0ac561717e439e151e42160cc185ad150283da,False,
-/System/Library/LaunchDaemons/com.apple.wwand.plist,com.apple.wwand,"['/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport.kext/Contents/Resources/wwand']",5e06305b18b0a825c4838a36198d88affda212531b79536a9556e9e6aca7e39f,False,
-/System/Library/LaunchDaemons/com.apple.xpc.smd.plist,com.apple.xpc.smd,"['/usr/libexec/smd']",0c7ab24c6ca525eff9862cddcb85604f64d275a21d69d81f4fa598e4ca6a3a8d,False,
-/System/Library/LaunchDaemons/com.apple.xsan.plist,com.apple.xsan,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsand']",6b4eb0c3926ed6881b54806ecb09adcfda60884e712998bdb1fd665a3b9044b4,False,
-/System/Library/LaunchDaemons/com.apple.xsandaily.plist,com.apple.xsandaily,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsandaily']",8e4b2ce51250d0ced9283308e72f449fbc825e9d36abd96f001b4b9ab0a29788,False,
-/System/Library/LaunchDaemons/com.apple.xscertadmin.plist,com.apple.xscertadmin,"['/usr/sbin/xscertadmin', 'update']",ce4b29f44c6f36b013acc14ba74e3cfba60bf6065e8897587c1e9870b8389d21,False,
-/System/Library/LaunchDaemons/com.apple.xscertd-helper.plist,com.apple.xscertd-helper,"['/usr/libexec/xscertd-helper']",452904eda1b18e60f1f8a9ef25263a46109b0a55139899ef31c0ca9d9c424cb1,False,
-/System/Library/LaunchDaemons/com.apple.xscertd.plist,com.apple.xscertd,"['/usr/libexec/xscertd']",2497a607b54d53632711982723ce41ab4b234a3bd840e15663b44f86add25910,False,
-/System/Library/LaunchDaemons/com.vix.cron.plist,com.vix.cron,"['/usr/sbin/cron']",990449103d9ac9e1b203a533dcb129aca703f95fd8769cce296fd152c0656593,False,
-/System/Library/LaunchDaemons/exec.plist,com.apple.rexecd,"['/usr/libexec/rexecd']",6291e0322167fcd46e1270f204aa37579507d5b8b1be533517d008fb8e8c2fe5,False,
-/System/Library/LaunchDaemons/finger.plist,com.apple.fingerd,"['/usr/libexec/fingerd', '-s']",9368bf01f1745d59f05510271b150b6eb9b5f910582a9ec69d6a09f5b8a6dd38,False,
-/System/Library/LaunchDaemons/ftp.plist,com.apple.ftpd,"['/usr/libexec/ftpd']",3e349907a6ac1966f57015e640fcecf57bbf639551e17e8ceb3a8da4a926d132,False,
-/System/Library/LaunchDaemons/login.plist,com.apple.rlogind,"['/usr/libexec/rlogind']",16555925df9bfb05f95409e50b7d0ef2cd9e29ac448684336dbc83007824c7ce,False,
-/System/Library/LaunchDaemons/ntalk.plist,com.apple.ntalkd,"['/usr/libexec/ntalkd']",68dc8a0d4c9db33c10abcc8264dd0f32c902c8d637cc9734db22b77b44b4a0b6,False,
-/System/Library/LaunchDaemons/org.apache.httpd.plist,org.apache.httpd,"['/usr/sbin/httpd', '-D', 'FOREGROUND']",eeb139ccc447210b45fc2acd54fdeb04173016b545b865461b34c00c9752f59a,False,
-/System/Library/LaunchDaemons/org.cups.cups-lpd.plist,org.cups.cups-lpd,"['/usr/libexec/cups/daemon/cups-lpd', '-o', 'document-format=application/octet-stream']",18dea332a780110ff8a605f2788200e4d0f8ddf70505771190036952a63670b7,False,
-/System/Library/LaunchDaemons/org.cups.cupsd.plist,org.cups.cupsd,"['/usr/sbin/cupsd', '-l']",UNKNOWN,False,
-/System/Library/LaunchDaemons/org.net-snmp.snmpd.plist,org.net-snmp.snmpd,"['/usr/sbin/snmpd']",48e7e796bfad1ff6ab945bc08140e2a115699db9beffd2bff867484990c7b18c,False,
-/System/Library/LaunchDaemons/org.ntp.ntpd.plist,org.ntp.ntpd,"['/usr/libexec/ntpd-wrapper']",20064c70f48c140d8e6f2ba4f50f518ca56c22388828160ad3148f958e6fdbbd,False,"Wrapper for ntpdate/ntpd called by launchd"
-/System/Library/LaunchDaemons/org.openldap.slapd.plist,org.openldap.slapd,"['/usr/libexec/slapd']",b4a31b1764470ec25a610c83143bb0d4b5fa7ae37177d0745bbd4bf9fe75ed67,False,"Slapd is the stand-alone LDAP daemon."
-/System/Library/LaunchDaemons/org.postfix.master.plist,org.postfix.master,"['/usr/libexec/postfix/master']",a290d7bebe616c34445cd5ce779452ff968a389350c74f6d5369b40c2331f9ae,False,
-/System/Library/LaunchDaemons/shell.plist,com.apple.rshd,"['/usr/libexec/rshd']",314a3d1daab34881d1c40ab6dabe76636088781b84a7735c662b43b977a0e9de,False,"Remote shell server"
-/System/Library/LaunchDaemons/ssh.plist,com.openssh.sshd,"['/usr/libexec/sshd-keygen-wrapper']",9c89666fd071abd203f044ab7b3fd416decafe4468ff2e20a50b6d72f94809e2,False,"Wrapper for OpenSSH SSH daemon called by launchd"
-/System/Library/LaunchDaemons/telnet.plist,com.apple.telnetd,"['/usr/libexec/telnetd']",ee525304d91db1dc97dfcc96ed53ff5095f15ccad8940ff102f562470d1eeba1,False,
-/System/Library/LaunchDaemons/tftp.plist,com.apple.tftpd,"['/usr/libexec/tftpd', '-i', '/private/tftpboot']",3cadaf30dce95d1be9c1f93ba5a621ab5f76308f22fa104fe38e31e6ea338aac,False,"TFTP server daemon"
-/System/Library/LaunchAgents/com.apple.accountsd.plist,com.apple.accountsd,"['/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd']",3d7a899b4daf02c6c6bf7360491d65ec3cd143b361ff7fd1e13bd2f00cadaa25,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.abd.plist,com.apple.AddressBook.abd,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookManager.app/Contents/MacOS/AddressBookManager']",df7326b58ca754838bcdbd5792bd469079e92290149491a5a3ff96ba6711eefd,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.AssistantService.plist,com.apple.AddressBook.AssistantService,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/ABAssistantService.app/Contents/MacOS/ABAssistantService']",7f8133585bf640e5824a192e5d76b1168e2c02f588a498c3086a7369679d34f0,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist,com.apple.AddressBook.SourceSync,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookSourceSync.app/Contents/MacOS/AddressBookSourceSync']",349631eda29cc48a5e878aa2ccbe15003fff29b220b85db47fe8570456d157b6,False,
-/System/Library/LaunchAgents/com.apple.AirPlayUIAgent.plist,com.apple.AirPlayUIAgent,"['/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent', '--launchd']",06ffda934d168537e6b8d5465754990d4a93ae956ac3e66aae8d42112b4b3690,False,
-/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist,com.apple.AirPortBaseStationAgent,"['/System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent', '--launchd']",7f354b607cb9ace16f14e9799dfbb28a2a256745bc72ce8266d9278a2da12090,False,
-/System/Library/LaunchAgents/com.apple.alf.useragent.plist,com.apple.alf.useragent,"['/usr/libexec/ApplicationFirewall/Firewall']",b380dd676502c4b8e720de167e34a2d9764952e9f89814d946a8d0531488a5f4,False,
-/System/Library/LaunchAgents/com.apple.aos.migrate.plist,com.apple.aos.migrate,"['/System/Library/CoreServices/AOSMigrateAgent']",f564c52c1f64f4349a6914f676b01b7d3182c709ab36f5fa22000a6c5139e4b5,False,
-/System/Library/LaunchAgents/com.apple.AOSHeartbeat.plist,com.apple.AOSHeartbeat,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSHeartbeat.app/Contents/MacOS/AOSHeartbeat']",53663a1eae9ffa5de50cd9967b04330ce8d80bfc87a7fff0a61efdd19e711309,True,
-/System/Library/LaunchAgents/com.apple.AOSPushRelay.plist,com.apple.AOSPushRelay,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSPushRelay.app/Contents/MacOS/AOSPushRelay']",b9a95a920964fc77a6bfcbd1338b7c7eb12b837ac3a312a6b68e036b6a4a16e1,False,
-/System/Library/LaunchAgents/com.apple.AppleGraphicsWarning.plist,com.apple.AppleGraphicsWarning,"['/System/Library/CoreServices/AppleGraphicsWarning.app/Contents/MacOS/AppleGraphicsWarning']",a935862ecfe10ae6064abffdf84a144cab899b4efb387bfd88bb62b042e3163b,False,
-/System/Library/LaunchAgents/com.apple.appleseed.seedusaged.plist,com.apple.appleseed.seedusaged,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged']",9fdb2f54a618daec5bea7b30bca7438772bf8226d3cca89acc937cdaa7f34166,True,
-/System/Library/LaunchAgents/com.apple.appsleepd.plist,com.apple.appsleep,"['/usr/sbin/appsleepd']",be713f379b4ebbb4f55a92911c884b5caf4fd8d8baaf4fee48641ec778b1c378,False,
-/System/Library/LaunchAgents/com.apple.appstoreupdateagent.plist,com.apple.appstoreupdateagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/appstoreupdateagent']",b19cac536d8f3781ecdca762e787e5e439c9ff7427d5c9192c2f3ac40c312006,False,
-/System/Library/LaunchAgents/com.apple.apsctl.plist,com.apple.apsctl,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsctl', 'login']",144a7dc16c23ff48e7a7eb0a971236a38451a4ba42527401fb4ab2e121c2d08e,True,
-/System/Library/LaunchAgents/com.apple.askpermissiond.plist,com.apple.askpermissiond,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond']",d2cd4af641f2c3374db6293716ac9d871d87c8d2d59b1edfc1be32fdce0c952f,True,
-/System/Library/LaunchAgents/com.apple.AskPermissionUI.plist,com.apple.AskPermissionUI,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/AskPermissionUI.app/Contents/MacOS/AskPermissionUI']",1095261fa0a0692816c891e5b79d625b110a5d0e64d3d5988caae0fd9bc1d95d,False,
-/System/Library/LaunchAgents/com.apple.assistant_service.plist,com.apple.assistant_service,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistant_service']",a961d88edbb88b1fb56d9ca0114b7460e9c3db239f845ae2f2fd82eb31c43a30,False,
-/System/Library/LaunchAgents/com.apple.assistantd.plist,com.apple.assistantd,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd']",ba86929e8e25563fece6c4751caa10f4c8d66d218980b2da9c7e204cf79e7eb4,False,
-/System/Library/LaunchAgents/com.apple.AssistiveControl.plist,com.apple.AssistiveControl,"['/System/Library/Input Methods/Switch Control.app/Contents/MacOS/Switch Control', 'launchd', '-s']",bac8fd238e96a4827022dd96ecafa17f6c45de52fc1170368795df5922600592,False,
-/System/Library/LaunchAgents/com.apple.BezelUI.plist,com.apple.BezelUIServer,"['/System/Library/LoginPlugins/BezelServices.loginPlugin/Contents/Resources/BezelUI/BezelUIServer']",3adab7f03a370748ff6f5bf64cdb6a14829b9af2afe6f847b3d6abc5d43f149c,False,
-/System/Library/LaunchAgents/com.apple.bird.plist,com.apple.bird,"['/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird']",b5a7ff5f26909c61e1b74ebf05175c4f36f351040805b9690b0ae30b7e76c91e,False,Documents in the Cloud feature daemon
-/System/Library/LaunchAgents/com.apple.bluetoothUIServer.plist,com.apple.bluetoothUIServer,"['/System/Library/CoreServices/BluetoothUIServer.app/Contents/MacOS/BluetoothUIServer']",30185d9a2fb77c91ee54847908e914d825d2ecfc98a45b29742b4b1a56105463,False,
-/System/Library/LaunchAgents/com.apple.btsa.plist,com.apple.btsa,"['/System/Library/CoreServices/Bluetooth Setup Assistant.app/Contents/MacOS/Bluetooth Setup Assistant', '-autoConfigure']",ecc195a5184bc049c1c28e153a10294e5557c1521c66880d0f812810cab4d031,False,
-/System/Library/LaunchAgents/com.apple.CalendarAgent.plist,com.apple.CalendarAgent,"['/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent']",5aceef7a44e8d33af5c667213503d11a66d454d1a152418bcef5bd272c8b3709,True,
-/System/Library/LaunchAgents/com.apple.CallHistoryPluginHelper.plist,com.apple.CallHistoryPluginHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper']",38f73a67ff9bf0182f1571d126608cf0f84a3f1395d6d25d3bdc1a4685b81d9c,False,
-/System/Library/LaunchAgents/com.apple.CallHistorySyncHelper.plist,com.apple.CallHistorySyncHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper']",7b5ab82587c0ddc9ce5dae2edbce8204754ee9bc745fc747ef9fa57701fce92a,False,
-/System/Library/LaunchAgents/com.apple.cfnetwork.AuthBrokerAgent.plist,com.apple.cfnetwork.AuthBrokerAgent,"['/System/Library/CoreServices/AuthBrokerAgent']",65e1e94ecc5423f400c96d6d05cd772dc31a69853ee085eec06ce0a068538f3f,False,
-/System/Library/LaunchAgents/com.apple.cfnetwork.cfnetworkagent.plist,com.apple.cfnetwork.cfnetworkagent,"['/System/Library/CoreServices/CFNetworkAgent']",6f6cb9c91afd47d5cba567ecd0e47169984439808861f9e4ce412d5edfd9083e,False,
-/System/Library/LaunchAgents/com.apple.cfprefsd.xpc.agent.plist,com.apple.cfprefsd.xpc.agent,"['/usr/sbin/cfprefsd', 'agent']",ee0443bdcc80cc7b43c308b65ea6df39092c8d7ab8072ee20be1863d6f737565,False,
-/System/Library/LaunchAgents/com.apple.cloudd.plist,com.apple.cloudd,"['/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd']",09f5a3d9efc27cdfa8a12d3178838a325428eb7f27de0c312189a3a4caf08499,False,
-/System/Library/LaunchAgents/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",fd81c20bf7774f746b8dd29a04ab1108e712b1db4e0d85432dfeb31065e4e7dc,False,
-/System/Library/LaunchAgents/com.apple.cloudpaird.plist,com.apple.cloudpaird,"['/System/Library/CoreServices/cloudpaird']",2fbeeead9c6842e3dfe18980677b94338c1266269a83825e918ff84a2381d01a,False,
-/System/Library/LaunchAgents/com.apple.cloudphotosd.plist,com.apple.cloudphotosd,"['/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd']",e2061ceed1d0fc5d2f0044920ba40caa8ab82a877c3950eb995b2ff37d198761,False,
-/System/Library/LaunchAgents/com.apple.cmfsyncagent.plist,com.apple.cmfsyncagent,"['/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent.app/Contents/MacOS/CMFSyncAgent']",a60d57386a7bcc9434b75e738ecf2168d890848515196e73845338e15dff94a1,False,
-/System/Library/LaunchAgents/com.apple.ContainerRepairAgent.plist,com.apple.ContainerRepairAgent,"['/usr/libexec/AppSandbox/ContainerRepairAgent']",639a03ffc1d1b1ae1e51dd254dfe1ff1fc3c2aab3eac3ef5f67a3573d944106f,False,
-/System/Library/LaunchAgents/com.apple.CoreAuthentication.daemon.plist,com.apple.CoreAuthentication.daemon,"['/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd']",55e1f916f65afdc5b193ed86e09aa9368d7de7baef68eab534dd06573959c7af,False,
-/System/Library/LaunchAgents/com.apple.coredata.externalrecordswriter.plist,com.apple.coredata.externalrecordswriter,"['/System/Library/Frameworks/CoreData.framework/Versions/A/Resources/ExternalRecordsWriter']",ee43c511f248140043308d2f81201bf1cc98e966f26679927990eb617cdf7b45,False,
-/System/Library/LaunchAgents/com.apple.CoreLocationAgent.plist,com.apple.CoreLocationAgent,"['/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent']",c7cfb6c1f02fc6d4e70c952ddbeb9743e434770c06af54995ea3e5062fda2a42,False,
-/System/Library/LaunchAgents/com.apple.CoreRAIDAgent.plist,com.apple.CoreRAIDAgent,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Versions/A/Resources/CoreRAIDAgent']",83b7084552d7986f390fc787244e9c5d1ec09f597a36aff7431150bc2a2c40a3,False,
-/System/Library/LaunchAgents/com.apple.coreservices.appleid.authentication.plist,com.apple.coreservices.appleid.authentication,"['/System/Library/CoreServices/AppleIDAuthAgent']",e953287f86876b6f6f7c612a002bbee12257584238d0cc00108844610cd337c5,True,
-/System/Library/LaunchAgents/com.apple.coreservices.lsactivity.plist,com.apple.coreservices.lsactivity,"['/System/Library/CoreServices/lsuseractivityd']",a37bdd06bf1aa72a5cdb313f0448383a85e193c53ce95547ef7cc6669e4bd585,False,
-/System/Library/LaunchAgents/com.apple.coreservices.uiagent.plist,com.apple.coreservices.uiagent,"['/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServicesUIAgent']",3c51d870fc698d88c268aa6ff0d570f576db8d2608bd3297bb42b32aad56cc40,False,
-/System/Library/LaunchAgents/com.apple.csuseragent.plist,com.apple.csuseragent,"['/System/Library/CoreServices/CSUserAgent']",0257c7be5b94332a7da97bac8c8078e436da36330814293b694a6b882596bb11,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386.plist,com.apple.cvmsCompAgent_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",ef4533621bf2fec7241e31a823c1a5f196634eb0e90e23b671ea2443c1f72cd2,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386_1.plist,com.apple.cvmsCompAgent_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",ef4533621bf2fec7241e31a823c1a5f196634eb0e90e23b671ea2443c1f72cd2,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64.plist,com.apple.cvmsCompAgent_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",ef4533621bf2fec7241e31a823c1a5f196634eb0e90e23b671ea2443c1f72cd2,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64_1.plist,com.apple.cvmsCompAgent_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",ef4533621bf2fec7241e31a823c1a5f196634eb0e90e23b671ea2443c1f72cd2,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386.plist,com.apple.cvmsCompAgentLegacy_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",2c0ce33a125ebe67574cac63fed946e005bef67a8b98423e5345d286d5fea1eb,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386_1.plist,com.apple.cvmsCompAgentLegacy_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",2c0ce33a125ebe67574cac63fed946e005bef67a8b98423e5345d286d5fea1eb,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64.plist,com.apple.cvmsCompAgentLegacy_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",2c0ce33a125ebe67574cac63fed946e005bef67a8b98423e5345d286d5fea1eb,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64_1.plist,com.apple.cvmsCompAgentLegacy_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",2c0ce33a125ebe67574cac63fed946e005bef67a8b98423e5345d286d5fea1eb,False,
-/System/Library/LaunchAgents/com.apple.DiagnosticReportCleanup.plist,com.apple.DiagnosticReportCleanup.plist,"['/System/Library/CoreServices/SubmitDiagInfo', 'cleanup']",95eb5aa7761667ad373c4478ee9a52e32a224dbee86be1726b699b60f1ddebcd,False,
-/System/Library/LaunchAgents/com.apple.diagnostics_agent.plist,com.apple.diagnostics_agent,"['/System/Library/CoreServices/diagnostics_agent']",e54ee7df0479e93e40e06021cb8ce6acd41ceec6ecc520ef2c920532142dfbba,True,
-/System/Library/LaunchAgents/com.apple.DictationIM.plist,com.apple.DictationIM,"['/System/Library/Input Methods/DictationIM.app/Contents/MacOS/DictationIM']",91428895cdc80ac1882d4bdba81f216cf768aa24509d7921aa4c17ef00fb244a,False,
-/System/Library/LaunchAgents/com.apple.DiskArbitrationAgent.plist,com.apple.DiskArbitrationAgent,"['/System/Library/Frameworks/DiskArbitration.framework/Versions/A/Support/DiskArbitrationAgent']",86cc9ec535453f8bbf1c0a54585a6fe2e2c4e72d32f9ed6a5c2950614b8f26fc,False,
-/System/Library/LaunchAgents/com.apple.distnoted.xpc.agent.plist,com.apple.distnoted.xpc.agent,"['/usr/sbin/distnoted', 'agent']",4ebd678363ad903feb5d1b1a47841be323126de20ca2ceb4a82fb7c7fad305f6,False,
-/System/Library/LaunchAgents/com.apple.Dock.plist,com.apple.Dock.agent,"['/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock']",91044587bcdc7240fab5f956316a4097e228b85b1bdd7f4278b71160d9d71008,False,
-/System/Library/LaunchAgents/com.apple.dt.CommandLineTools.installondemand.plist,com.apple.dt.CommandLineTools.installondemand,"['/System/Library/CoreServices/Install Command Line Developer Tools.app/Contents/MacOS/Install Command Line Developer Tools']",743c4811145ec52a34ef4008a6ab7056c80fb43be79e075e49d4c760c65e6ad1,False,
-/System/Library/LaunchAgents/com.apple.EscrowSecurityAlert.plist,com.apple.EscrowSecurityAlert,"['/System/Library/PrivateFrameworks/CloudServices.framework/Resources/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert']",5979f434dac0d288074d4e83d58e256f8ac5a83b646cfab6e60118e98c583580,False,
-/System/Library/LaunchAgents/com.apple.familycircled.plist,com.apple.familycircled,"['/System/Library/PrivateFrameworks/FamilyCircle.framework/Versions/A/Resources/familycircled']",ab782e1434b26f7d8add4d4c5c535194e5979970e3522d413ae760b354925fce,False,
-/System/Library/LaunchAgents/com.apple.familycontrols.useragent.plist,com.apple.familycontrols.useragent,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/ParentalControls.app/Contents/MacOS/ParentalControls']",58e953e2acac88574e2a492f2ecb6847e11d24a35951e6e80f4a351e51afa847,False,
-/System/Library/LaunchAgents/com.apple.familynotificationd.plist,com.apple.familynotificationd,"['/System/Library/PrivateFrameworks/FamilyNotification.framework/Versions/A/Resources/Family.app/Contents/MacOS/Family']",0babebdc1ab35fd1b61f42d95c25a3bf1837e130fa6ce3b77af8797fb83a21bc,False,
-/System/Library/LaunchAgents/com.apple.FileStatsAgent.plist,com.apple.FileStatsAgent,"['/usr/sbin/FileStatsAgent']",53295110bb131d02aa26d3f1ea97e64aab89456bc01e577568331f4299658fb4,False,
-/System/Library/LaunchAgents/com.apple.FileSyncAgent.PHD.plist,com.apple.FileSyncAgent.PHD,"['/System/Library/CoreServices/FileSyncAgent.app/Contents/MacOS/FileSyncAgent', '-launchedByLaunchd', '-PHDPlist']",72ab59cd59ec866d0ada2c57d6c169986697bcf27c648aa433dd310a6419a6b2,False,
-/System/Library/LaunchAgents/com.apple.FilesystemUI.plist,com.apple.FilesystemUI,"['/System/Library/CoreServices/KernelEventAgent.bundle/FileSystemUIAgent.app/Contents/MacOS/FileSystemUIAgent']",48b3f83d79a50e81db200efde01b157dcc3c7bdfeebccf3476e53604cf726743,False,
-/System/Library/LaunchAgents/com.apple.Finder.plist,com.apple.Finder,"['/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder']",b94ef8d3893fefb91c4ab7c7048fadbcaae4ffbb70f10f3f0a2059baee57bc5c,False,
-/System/Library/LaunchAgents/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",44f224b2846ea0e7e6d920f396bc54e64c6ed629c33d2a8820515738be5cdb6d,False,
-/System/Library/LaunchAgents/com.apple.fontd.useragent.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",dc55f9e3fb42a2ad38aac323e66223fc3d4a924fe7fc834f3934c8111b5c2141,False,
-/System/Library/LaunchAgents/com.apple.FontRegistryUIAgent.plist,com.apple.FontRegistryUIAgent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/FontRegistryUIAgent.app/Contents/MacOS/FontRegistryUIAgent']",f25d23090740ac62b44e40633d95473581bfd3e2aef6b6ee577b7fe02f0e950d,False,
-/System/Library/LaunchAgents/com.apple.FontValidator.plist,com.apple.ATS.FontValidator,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidator']",b834051e4de54a8c272055bcc6d585150b5296cb93211d520537e56784dc86e4,False,
-/System/Library/LaunchAgents/com.apple.FontValidatorConduit.plist,com.apple.ATS.FontValidatorConduit,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidatorConduit']",687132f17b7902037a653ec9e9f604a6c9fc9b358d5b19b2749956e1bd44deba,False,
-/System/Library/LaunchAgents/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",236492be703611b65e521c918c895a156171665767ab6830e3a4478c4df5e881,False,"Registers and validates font for the system"
-/System/Library/LaunchAgents/com.apple.gamed.plist,com.apple.gamed,"['/System/Library/PrivateFrameworks/GameCenterFoundation.framework/Versions/A/gamed']",de1f435de0332d441f35699811ce2fcfa5627d17d1720d51b94bb66589b50e91,False,
-/System/Library/LaunchAgents/com.apple.helpd.plist,com.apple.helpd,"['/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/helpd']",1db419e7a9bb1326bc88e2d5f980e43868675ded4aa92320d365b67f6b4285f1,True,
-/System/Library/LaunchAgents/com.apple.icbaccountsd.plist,com.apple.icbaccountsd,"['/usr/libexec/icbaccountsd']",36d50465f7d96755c34311af525ccf826b17ed6182b13c25d72055eb990f8ffa,False,
-/System/Library/LaunchAgents/com.apple.icloud.fmfd.plist,com.apple.icloud.fmfd,"['/usr/libexec/fmfd']",d4445bf99b575d68979eba1afad8cf96bcbd6da3a49988a35f48c165cba0abe7,False,
-/System/Library/LaunchAgents/com.apple.iCloudUserNotifications.plist,com.apple.iCloudUserNotificationsd,"['/System/Library/PrivateFrameworks/AOSAccounts.framework/Versions/A/Resources/iCloudUserNotificationsd.app/Contents/MacOS/iCloudUserNotificationsd']",bb1c90dbc526615a8fb847f64eecf4313f85015fd83a8530f02497ae5ce5d05c,False,
-/System/Library/LaunchAgents/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",05a40a54c28ec6b2ab3d550e90125f7fad3709e5111a0dff7b1946c07f05b9fb,True,
-/System/Library/LaunchAgents/com.apple.identityservicesd.plist,com.apple.identityservicesd,"['/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd']",7598133371db81cd70f857fdb18af8e1c740c7d3829e50f98ce4a751567656f0,False,
-/System/Library/LaunchAgents/com.apple.idsremoteurlconnectionagent.plist,com.apple.idsfoundation.IDSRemoteURLConnectionAgent,"['/System/Library/PrivateFrameworks/IDSFoundation.framework/IDSRemoteURLConnectionAgent.app/Contents/MacOS/IDSRemoteURLConnectionAgent']",16b5a0539db8d741cb8670a49cd44b2659812ae0199fe07f3dc82a8534d315d2,False,
-/System/Library/LaunchAgents/com.apple.imagent.plist,com.apple.imagent,"['/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent']",4125a42e700e756cfcb8c75f2c6f05766294ae696ad27f6d5200a701ccc006c2,False,
-/System/Library/LaunchAgents/com.apple.imklaunchagent.plist,com.apple.imklaunchagent,"['/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent']",8fb3918f5f54e6d28b66fd6221b270d394d602c687779c070fafee9c3a741e12,False,
-/System/Library/LaunchAgents/com.apple.IMLoggingAgent.plist,com.apple.IMLoggingAgent,"['/System/Library/PrivateFrameworks/IMFoundation.framework/IMLoggingAgent']",5f4e679211fde7698a97c3437a44d93c176371faf1d1403bb225de385aaf2b86,False,
-/System/Library/LaunchAgents/com.apple.imtransferagent.plist,com.apple.imcore.imtransferagent,"['/System/Library/PrivateFrameworks/IMTransferServices.framework/IMTransferAgent.app/Contents/MacOS/IMTransferAgent']",8785487c2a3441b9b8d3467f2623ea5369b39d491dafe4bef2a027dde293ed11,False,
-/System/Library/LaunchAgents/com.apple.installd.user.plist,com.apple.installd.user,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",b46bc3a8209f8530f7e16a5fd29f988d0cdccaa6a15dd445e3ce3d5e0697a2b5,False,
-/System/Library/LaunchAgents/com.apple.isst.plist,com.apple.isst,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/isst']",f0a644be0ca75851ecc9fa1cc138a26bb51e9b026b41413d2dbcfb712c5460a5,True,
-/System/Library/LaunchAgents/com.apple.java.InstallOnDemand.plist,com.apple.java.InstallOnDemandAgent,"['/System/Library/Java/Support/CoreDeploy.bundle/Contents/Download Java Components.app/Contents/MacOS/Download Java Components']",fffbc4080e9f82b938d4d1936e2a1bd71ad34079a3a60aec9d9ed0ec82b340ec,False,
-/System/Library/LaunchAgents/com.apple.java.updateSharing.plist,com.apple.java.updateSharing,"['/System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/bin/updateSharingD']",9915961f73f12784b52312c6a33e790277a4f63d68856df40dabf11a6689a6aa,False,
-/System/Library/LaunchAgents/com.apple.lateragent.plist,com.apple.lateragent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent']",c54755a4963612ea977b67c3ce010dee57ab9edd7bed040a445d3a3ca82906be,False,
-/System/Library/LaunchAgents/com.apple.locationmenu.plist,com.apple.locationmenu,"['/System/Library/CoreServices/LocationMenu.app/Contents/MacOS/LocationMenu']",686a3164f78304cd257fb3fc4e3aaaf6ae00b655c9200e679c815f6d422da596,False,
-/System/Library/LaunchAgents/com.apple.lookupd.plist,com.apple.lookupd,"['/System/Library/PrivateFrameworks/Lookup.framework/Resources/com.apple.lookupd']",bcafd8702e3873c70d854f979de6ab1a795144c76d34a9f4468291b225bc84d6,False,
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.agent.plist,com.apple.ManagedClientAgent.agent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-a']",82837b866c39e09e59cc7571d91f4b0ff03bcae2172d792040346809e44f61f3,False,
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist,com.apple.ManagedClientAgent.enrollagent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-j']",82837b866c39e09e59cc7571d91f4b0ff03bcae2172d792040346809e44f61f3,False,
-/System/Library/LaunchAgents/com.apple.Maps.pushdaemon.plist,com.apple.Maps.mapspushd,"['/System/Library/CoreServices/mapspushd']",14f9533a178a67b07ad41909bb975ccce8eeb65598a3ed688f3e677c2548de24,False,
-/System/Library/LaunchAgents/com.apple.maspushagent.plist,com.apple.maspushagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/maspushagent']",4dd458c87050ce1ff872f5fdcde52248bc560359e1e2df10bd3edc167ab162a7,False,
-/System/Library/LaunchAgents/com.apple.mbloginhelper.user.plist,com.apple.mbloginhelper.user,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbloginhelper']",3d82e300b9b4b9d55f6ed502a7ed57b4c0a1b54d2f15f211ca03faa4a7d2b363,False,
-/System/Library/LaunchAgents/com.apple.mbpluginhost.user.plist,com.apple.mbpluginhost.user,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbpluginhost']",efecf1f7975a645585503638ad64da6e962896eb271838063fb94778e205c8fe,False,
-/System/Library/LaunchAgents/com.apple.mdmclient.agent.plist,com.apple.mdmclient.agent,"['/usr/libexec/mdmclient', 'agent']",8b29d46bf93f8b33ead6d9d4d4341f25256ef8d61389978ac39e90dd3fed4617,False,
-/System/Library/LaunchAgents/com.apple.mdmclient.cloudconfig.agent.plist,com.apple.mdmclient.cloudconfig.agent,"['/usr/libexec/mdmclient', 'cloudconfig']",8b29d46bf93f8b33ead6d9d4d4341f25256ef8d61389978ac39e90dd3fed4617,False,
-/System/Library/LaunchAgents/com.apple.mdworker.32bit.plist,com.apple.mdworker.32bit,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker32', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.32bit']",c6cc15ce98e449c50e65d3c608873ab643d498a880d47fc8600c54271824f419,False,
-/System/Library/LaunchAgents/com.apple.mdworker.bundles.plist,com.apple.mdworker.bundles,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-bundle', '-c', 'MDSImporterBundleFinder', '-m', 'com.apple.mdworker.bundles']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.isolation.plist,com.apple.mdworker.isolation,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.isolation']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.lsb.plist,com.apple.mdworker.lsb,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.lsb']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.mail.plist,com.apple.mdworker.mail,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-mail', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.mail']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.shared.plist,com.apple.mdworker.shared,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.shared']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.single.plist,com.apple.mdworker.single,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.single']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.mdworker.sizing.plist,com.apple.mdworker.sizing,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-sizing', '-c', 'MDSSizingWorker', '-m', 'com.apple.mdworker.sizing']",2938803e03f7a91177a8cdb5cc163a14fa6897cd940e36a080caf4397237b24b,False,
-/System/Library/LaunchAgents/com.apple.metadata.mdflagwriter.plist,com.apple.metadata.mdflagwriter,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter']",6568285a864541b1fba665d3435cf1edb47a1abad433a03ede780fde1285ca67,False,
-/System/Library/LaunchAgents/com.apple.metadata.mdwrite.plist,com.apple.metadata.mdwrite,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdwrite']",9f877be1f5aad67a4ba30b48eafd360b17510820ac191ea21ab306f57a20ad24,False,
-/System/Library/LaunchAgents/com.apple.metadata.SpotlightNetHelper.plist,com.apple.metadata.SpotlightNetHelper,"['/System/Library/PrivateFrameworks/ParsecUI.framework/Versions/A/Support/SpotlightNetHelper.app/Contents/MacOS/SpotlightNetHelper']",3f514febde925557180e545d66f56b7103c3213571f46fffa679f4613b78b958,False,
-/System/Library/LaunchAgents/com.apple.midiserver.plist,com.apple.midiserver,"['/System/Library/Frameworks/CoreMIDI.framework/MIDIServer']",322512311919f457dbb444120355d97a2b3693340173e98e2ca023a123d9715f,False,
-/System/Library/LaunchAgents/com.apple.neagent.plist,com.apple.neagent,"['/usr/libexec/neagent']",0ccc6239f32d17a38b4d14f66cdfe6a519b723dc2c8a04d8f5909e8a342c24cd,False,
-/System/Library/LaunchAgents/com.apple.netauth.user.auth.plist,com.apple.netauth.user.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent']",15e3d0f498e5fbd131fa0fe32ac54af6c7595d618ab98cf38cb1adfac7063a88,False,
-/System/Library/LaunchAgents/com.apple.netauth.user.gui.plist,com.apple.netauth.user.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent']",5e1ff53d5740591660f0f85d909a61bb5b08491cdd29c4dc57a3cf7e28825e49,False,
-/System/Library/LaunchAgents/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",065eb6ca7c5e3ec8f97cdeef69d65939a81e7a4c9fe2656c47c70f4de0841443,False,
-/System/Library/LaunchAgents/com.apple.noticeboard.agent.plist,com.apple.noticeboard.agent,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent']",7f1a6566b86116397ca7f45d4c34427ddac9336f96860320241b46e3649557d5,False,
-/System/Library/LaunchAgents/com.apple.notificationcenterui.plist,com.apple.notificationcenterui.agent,"['/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter']",f96a3150a159eb7366838ec2cf46bfa46dc8a72aa3138174ecb05431eaf3604a,False,
-/System/Library/LaunchAgents/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond,"['/usr/libexec/nsurlsessiond']",13718923aa29862e4225846e29f29ab9ab5109dcb87727fc414d7d2be788ef08,False,
-/System/Library/LaunchAgents/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",5ff8b9555bc60225f879c89f8588872d42508f99d5bae9b4d84c529a912a22e7,False,
-/System/Library/LaunchAgents/com.apple.PackageKit.InstallStatus.plist,com.apple.PackageKit.InstallStatus,"['/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress']",ce64d192639f14beb40b19cdebda7115be7ca8f9cf0cd47f70b53ef10a424bea,False,
-/System/Library/LaunchAgents/com.apple.parentalcontrols.check.plist,com.apple.parentalcontrols.check,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/pcdCheck']",7c2914dee11946ab55e77fdd6b053e0a587a45528f97e9700da48e3ba20de4f9,True,
-/System/Library/LaunchAgents/com.apple.pboard.plist,com.apple.pboard,"['/usr/sbin/pboard']",e3c03ab4aa169ae62d5336b594b9ab5b8d4025eaf86c67bb499a4f7ec94c4e89,False,
-/System/Library/LaunchAgents/com.apple.pbs.plist,com.apple.pbs,"['/System/Library/CoreServices/pbs']",eeb35b878409a4525ccb04813751b9d73c95ace512aa7b445d6b224e0dd90aeb,False,Services menu daemon
-/System/Library/LaunchAgents/com.apple.PCIESlotCheck.plist,com.apple.PCIESlotCheck,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIESlotCheck']",ad373c88713ef9eb0b08ce7620f9ab7a4025a396d636a4bcd2e93924c6bd8194,True,
-/System/Library/LaunchAgents/com.apple.photolibraryd.plist,com.apple.photolibraryd,"['/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd']",634627fe240899fefe142fd98e7a8f039c2e00f7851aba6b838893a870e5c3fa,False,
-/System/Library/LaunchAgents/com.apple.PhotoLibraryMigrationUtility.XPC.plist,com.apple.PhotoLibraryMigrationUtility.XPC,"['/System/Library/CoreServices/Photo Library Migration Utility.app/Contents/MacOS/Photo Library Migration Utility', '-server']",94e77d46f8b69f475458e54e589c14896fd8b056e5af6e864da668e7d409a921,False,
-/System/Library/LaunchAgents/com.apple.pictd.plist,com.apple.pictd,"['/usr/sbin/pictd']",760cf3c134aa0424d821c76e208cccb7790a99ab6e8eb1d7652e066e6d7d3868,False,
-/System/Library/LaunchAgents/com.apple.pluginkit.pkd.plist,com.apple.pluginkit.pkd,"['/usr/libexec/pkd']",b908c4aa13948b1beb720f37662e68a51ea5702a075fac7baa4c334ec5fe213b,False,
-/System/Library/LaunchAgents/com.apple.pluginkit.pkreporter.plist,com.apple.pluginkit.pkreporter,"['/usr/libexec/pkreporter']",f52278285a36f07e78dcd61c3f4ee5a130506eb9fffbe346f6b8725005fce930,False,
-/System/Library/LaunchAgents/com.apple.powerchime.plist,com.apple.powerchime,"['/System/Library/CoreServices/PowerChime.app/Contents/MacOS/PowerChime']",3ee542b421c0532d99da6c7cdafd29f5e08ec1a24d1ca742e21da656999bc64f,True,
-/System/Library/LaunchAgents/com.apple.printtool.agent.plist,com.apple.printtool.agent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'agent']",8d7167dfdcac008960d3e370517196ef8bf04859e8f907c78f7807aff2598ae8,False,
-/System/Library/LaunchAgents/com.apple.printuitool.agent.plist,com.apple.printuitool.agent,"['/System/Library/PrivateFrameworks/PrintingPrivate.framework/Versions/A/PrintUITool']",8b42723e266feea8cd110735b209fcba53aa9b11946bd0ac6f77cfb9a0797d01,False,
-/System/Library/LaunchAgents/com.apple.PubSub.Agent.plist,com.apple.PubSub.Agent,"['/System/Library/Frameworks/PubSub.framework/Versions/A/Resources/PubSubAgent.app/Contents/MacOS/PubSubAgent']",696f83554c3c1bb5b9593094b9e8d185245f6358913ba65d4b50b829a05e773b,False,
-/System/Library/LaunchAgents/com.apple.quicklook.32bit.plist,com.apple.quicklook.32bit,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd32.app/Contents/MacOS/quicklookd32']",be61b836c97057226e5d37a4d06112c874ecb6424e8d3982866c778ded00207b,False,
-/System/Library/LaunchAgents/com.apple.quicklook.config.plist,com.apple.quicklook.config,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookconfig']",7df47f9165a05306f12c9f8249f43306f613e0ef83db32a5a8e5b9efec3392bb,False,
-/System/Library/LaunchAgents/com.apple.quicklook.plist,com.apple.quicklook,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd']",aa4eda5e8f424c13a674d2a2c0ee1fdfa414da8f222b5fbf135c5ebd9b7c0f37,False,
-/System/Library/LaunchAgents/com.apple.quicklook.ui.helper.plist,com.apple.quicklook.ui.helper,"['/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper']",b967b916ec565e14e196034805057b9a0baf285272d476bb8667e828c5e7b325,False,
-/System/Library/LaunchAgents/com.apple.rcd.plist,com.apple.rcd,"['/System/Library/CoreServices/rcd.app/Contents/MacOS/rcd']",5ebc2a9d3a8f0faea36473802c73c10c72cb183027b5f4f5653cb456e12ec6eb,False,
-/System/Library/LaunchAgents/com.apple.recentsd.plist,com.apple.recentsd,"['/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/recentsd']",8cc5699c84d27fec401202f2ca3111dbf44d5c729086c2af561b8a2e950bf2eb,False,
-/System/Library/LaunchAgents/com.apple.ReclaimSpaceAgent.plist,com.apple.reclaimspace,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/ReclaimSpaceAgent.app/Contents/MacOS/ReclaimSpaceAgent']",13f86bf0b5b633b5f625eb28f27c36b59d34e7d7394f1acd8134584a78d6415f,False,
-/System/Library/LaunchAgents/com.apple.RemoteDesktop.plist,com.apple.RemoteDesktop.agent,"['/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent']",9824ce5f1e6d1437c61995b9bb2c5dcf6699eaf8ed265ffa2db2724a33277068,False,
-/System/Library/LaunchAgents/com.apple.ReportCrash.plist,com.apple.ReportCrash,"['/System/Library/CoreServices/ReportCrash']",11d31bae0610afec73405f2f2defd1b1db18d8ee690df09c7140af4710881709,False,"Analyzes crashing processes and saves a crash report to disk"
-/System/Library/LaunchAgents/com.apple.ReportCrash.Self.plist,com.apple.ReportCrash.Self,"['/System/Library/CoreServices/ReportCrash']",11d31bae0610afec73405f2f2defd1b1db18d8ee690df09c7140af4710881709,False,
-/System/Library/LaunchAgents/com.apple.ReportGPURestart.plist,com.apple.ReportGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/ReportGPURestart']",99017bae5bc7224f0b4de7fa25dfeff36624d04ccbfc8bacbd8c981f8e077298,False,
-/System/Library/LaunchAgents/com.apple.ReportPanic.plist,com.apple.ReportPanic,"['/System/Library/CoreServices/ReportPanic.app/Contents/MacOS/ReportPanic']",3d617b0f9fdc355dcaef7cf13bb90f495cb7b1cacd95223ab32fe459b1832559,False,
-/System/Library/LaunchAgents/com.apple.rtcreportingd.plist,com.apple.rtcreportingd,"['/usr/libexec/rtcreportingd']",3fbeb636957805aa0b6fc97561229382a99b4f66e69636065aed30e2c7dd34a0,False,
-/System/Library/LaunchAgents/com.apple.SafariCloudHistoryPushAgent.plist,com.apple.SafariCloudHistoryPushAgent,"['/usr/libexec/SafariCloudHistoryPushAgent']",4fbae811ff1e29e87db1767bbb9ba7fd2a7a33677be10081aa07e2ebe2ccef5f,False,
-/System/Library/LaunchAgents/com.apple.safaridavclient.plist,com.apple.safaridavclient,"['/System/Library/PrivateFrameworks/BookmarkDAV.framework/Helpers/SafariDAVClient']",31c5020a85ad516b4dd1664e0df835262e184ad4524a3e873e0ded83bf2c3028,False,
-/System/Library/LaunchAgents/com.apple.SafariNotificationAgent.plist,com.apple.SafariNotificationAgent,"['/usr/libexec/SafariNotificationAgent']",005fbc2d29562ad1391cd91f2a442515e8c9d41746747c48891efc2d34949a6b,False,
-/System/Library/LaunchAgents/com.apple.sbd.plist,com.apple.sbd,"['/System/Library/PrivateFrameworks/CloudServices.framework/Resources/com.apple.sbd']",34e1d75751bf7cf4cdfe37f24939e36768528ef7829f28e3de65fda2090a7027,False,
-/System/Library/LaunchAgents/com.apple.scopedbookmarkagent.xpc.plist,com.apple.scopedbookmarksagent.xpc,"['/System/Library/CoreServices/ScopedBookmarkAgent']",b6b63e6ca3a8c72c291ac885e23f7fd1289f4d2350ee0ef45a49ee7da17dea9b,False,
-/System/Library/LaunchAgents/com.apple.ScreenReaderUIServer.plist,com.apple.ScreenReaderUIServer,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Resources/ScreenReaderUIServer.app/Contents/MacOS/ScreenReaderUIServer']",066a2429a4bee41fa5108fc974be643d38d070d8115db3475345be238974af1a,False,
-/System/Library/LaunchAgents/com.apple.screensharing.agent.plist,com.apple.screensharing.agent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/MacOS/ScreensharingAgent']",05ca7b40ad7185ba8fbb7daee5c27613439d7d65916783ea99b4b523a4918843,False,
-/System/Library/LaunchAgents/com.apple.screensharing.MessagesAgent.plist,com.apple.screensharing.MessagesAgent,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer']",9d373f654b3126a17da5732847ce53bc508f88fd0c9a04958503a8b39e6797c4,False,
-/System/Library/LaunchAgents/com.apple.scrod.plist,com.apple.scrod,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Frameworks/ScreenReaderOutput.framework/Resources/scrod']",563f4b919dc884e3e6c3442189b432a853eab9b27d40f2d54e2d45b769db9067,False,
-/System/Library/LaunchAgents/com.apple.secd.plist,com.apple.secd,"['/usr/libexec/secd']",27e902dcb1bbc233aba270cdc47dc3f180eea82054451e9f82493a38ea5768e4,False,
-/System/Library/LaunchAgents/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",2d479d0a9c84e0cfe65d9bd81e1f593de621612f0374b0daf5e69e548bd66b80,False,
-/System/Library/LaunchAgents/com.apple.security.agentStub.plist,com.apple.security.agentStub,"['/System/Library/Frameworks/Security.framework/Versions/A/XPCServices/com.apple.security.agentStub.xpc/Contents/MacOS/com.apple.security.agentStub']",48751d407580ef6d5791e11f64abcdb1759d8fd5092b19f3c31d745b94f8cfb5,False,
-/System/Library/LaunchAgents/com.apple.security.cloudkeychainproxy.plist,com.apple.security.cloudkeychainproxy3,"['/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy']",ba369d61cdf991b7a2cfbe6ae58163419085f41524a1f066e65efa3279623c34,False,
-/System/Library/LaunchAgents/com.apple.security.DiskUnmountWatcher.plist,com.apple.security.DiskUnmountWatcher,"['/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher']",7f32e4d95b443c24a15e949b71bb8dc2573a519add226b5a6d0956faa268820e,False,
-/System/Library/LaunchAgents/com.apple.security.keychain-circle-notification.plist,com.apple.security.keychain-circle-notification,"['/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification']",17badb80843863d7f0de2dc5c714c504d5bd5ba9a156ac5b495b21d14f77baa1,True,
-/System/Library/LaunchAgents/com.apple.sharingd.plist,com.apple.sharingd,"['/usr/libexec/sharingd']",7d2a323dd30d24a485d6353062c25904a135dd3661e3900e3c1f207261941340,True,"Sharing Daemon that enables AirDrop, Handoff, Instant Hotspot, Shared Computers, and Remote Disc in the Finder"
-/System/Library/LaunchAgents/com.apple.soagent.plist,com.apple.soagent,"['/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent']",7824f5fa09a221ccc0f1e43cc885f14e4e74ab32b5f12f13433bd3fc4c01bc78,True,
-/System/Library/LaunchAgents/com.apple.SocialPushAgent.plist,com.apple.SocialPushAgent,"['/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent']",09e95ef3e1a63a082d48c9ea262aa7c38c829120c92a4fe519853c20f840e70b,True,
-/System/Library/LaunchAgents/com.apple.softwareupdate_notify_agent.plist,com.apple.softwareupdate_notify_agent,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent']",03ceb53da607d7ba9e74281b6b375b370a199a70cabee627789410d653945dd2,False,
-/System/Library/LaunchAgents/com.apple.speech.speechdatainstallerd.plist,com.apple.speech.speechdatainstallerd,"['/System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd']",56203560e0b8a7718c38cf31b2078172aa8f516d940e17954607e2ab039e22c1,False,
-/System/Library/LaunchAgents/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",77800391daaf9b9dd56eda8222c7c75d743d0433039b886764d0c7ba6dc03908,False,
-/System/Library/LaunchAgents/com.apple.speech.synthesisserver.plist,com.apple.speech.synthesisserver,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app/Contents/MacOS/SpeechSynthesisServer', 'launchd']",fdcaaf3587864ea44b2be1ff3ac1b5abcd3b002d900802e38924935572a6c1bd,False,
-/System/Library/LaunchAgents/com.apple.spindump_agent.plist,com.apple.spindump_agent,"['/usr/libexec/spindump_agent']",117f4e8f70a6ae4df035e6cf8331c47bfd8476bdad52befea8ee899c3feaf779,True,
-/System/Library/LaunchAgents/com.apple.Spotlight.plist,com.apple.Spotlight,"['/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight']",00f3e93555b31d091aa3a3eae64cc9b40866b88ff6443debb5551496c76cf286,False,
-/System/Library/LaunchAgents/com.apple.SSInvitationAgent.plist,com.apple.ssinvitationagent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/Support/SSInvitationAgent.app/Contents/MacOS/SSInvitationAgent']",00147d867d1877289befb788585d2b52d587affd2106ebbe4942b98e9d3e1ac0,False,
-/System/Library/LaunchAgents/com.apple.storeaccountd.plist,com.apple.storeaccountd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd']",782e9096108b989cb2727f3f3690e3c8c1c4e730a4a3f64d6ac01c68d2c217c0,False,
-/System/Library/LaunchAgents/com.apple.storeassetd.plist,com.apple.storeassetd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd']",af9f96f90046ae642530b6361515bb3b3f12da5cf35e6902bd91bb9d1fc9b64b,False,
-/System/Library/LaunchAgents/com.apple.storedownloadd.plist,com.apple.storedownloadd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd']",21f76e85a125d921da627889035e7492f24f69d97911f62126c5d1f2a99c4751,False,
-/System/Library/LaunchAgents/com.apple.storeinappd.plist,com.apple.storeinappd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeinappd']",6960315a31de1202225c02b2e8a800a2e36881340e54b9c70f188dc5f64c1b2e,False,
-/System/Library/LaunchAgents/com.apple.storelegacy.plist,com.apple.storelegacy,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy']",849148c3139a043345f8a6cd4a05b4bfa480e92f8dab7a244f4460cce48259e1,False,
-/System/Library/LaunchAgents/com.apple.storeuid.plist,com.apple.storeuid,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid']",286744bc1a08efb34b092a5b5f4db5ce6f73ca2944d9024bbdb131d489efbe43,False,
-/System/Library/LaunchAgents/com.apple.syncdefaultsd.plist,com.apple.syncdefaultsd,"['/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd']",afa1bf425723ed04e8cf7cc735d62aa108a1c718745248b372e30768454c321c,False,
-/System/Library/LaunchAgents/com.apple.syncservices.SyncServer.plist,com.apple.syncservices.SyncServer,"['/System/Library/Frameworks/SyncServices.framework/Versions/Current/Resources/SyncServer.app/Contents/MacOS/SyncServer']",6be4cf2b4b7b2349bd14f7267016ed95a1c8efd55b58e3a728ca56a4365541c6,False,
-/System/Library/LaunchAgents/com.apple.syncservices.uihandler.plist,com.apple.syncservices.uihandler,"['/System/Library/PrivateFrameworks/SyncServicesUI.framework/Versions/Current/Resources/syncuid.app/Contents/MacOS/syncuid']",97d5e255e450d1c540c2b2455d87c254d4324104d85bea865dc55a9ac2899997,False,
-/System/Library/LaunchAgents/com.apple.systemprofiler.plist,com.apple.systemprofiler,"['/Applications/Utilities/System Information.app/Contents/MacOS/System Information']",4ed286261ac32d3127b874c762e03b3e17e995ece61d4f876b438543a8e08c5b,False,
-/System/Library/LaunchAgents/com.apple.SystemUIServer.plist,com.apple.SystemUIServer.agent,"['/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer']",78129cc82bb67111d03393b7847dc3dfe8d4a8e65bdd2a507c576f1030c9caa5,False,
-/System/Library/LaunchAgents/com.apple.talagent.plist,com.apple.talagent,"['/System/Library/CoreServices/talagent']",e4d0287de8a5564a63ea58c08491f9cb2e10d10e4b44d05e30f4a897fbe0a419,True,
-/System/Library/LaunchAgents/com.apple.tccd.plist,com.apple.tccd,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd']",a796f973dea81ada2768b828ce95a2ecda4a8d39e12634a119b8333ac5004f30,False,
-/System/Library/LaunchAgents/com.apple.telephonyutilities.callservicesd.plist,com.apple.telephonyutilities.callservicesd,"['/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd']",35dc7976267cb9ebc5a32c7da07b71b7c1fe17ac059750ab80f5149343d4d9fa,False,
-/System/Library/LaunchAgents/com.apple.thermaltrap.plist,com.apple.thermaltrap,"['/System/Library/CoreServices/ThermalTrap.app/Contents/MacOS/ThermalTrap']",0112552c9f8a427d28a514546ec50f20cbadfb42b04012e34bab3bbcbbe6e3ae,False,
-/System/Library/LaunchAgents/com.apple.tiswitcher.plist,com.apple.tiswitcher,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/TISwitcher.app/Contents/MacOS/TISwitcher']",4b66318ea1458489cf88b5d835833fb741b6c50f6054aff9712a5b24c6dd5600,False,
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.plist,com.apple.TMHelperAgent,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent']",15b8a5f63c2e7a0e2714b56cad095ea7a771105665573dc7e1d8ead6aeac17a5,False,
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.SetupOffer.plist,com.apple.TMHelperAgent.SetupOffer,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent', '-offer']",15b8a5f63c2e7a0e2714b56cad095ea7a771105665573dc7e1d8ead6aeac17a5,False,
-/System/Library/LaunchAgents/com.apple.TrustEvaluationAgent.plist,com.apple.TrustEvaluationAgent,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",1b26f322605aaee84eca81cc8b4481593682276a1efe28080374a12e97b4bd49,False,
-/System/Library/LaunchAgents/com.apple.universalaccessAuthWarn.plist,com.apple.universalaccessAuthWarn,"['/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/Resources/universalAccessAuthWarn.app/Contents/MacOS/universalAccessAuthWarn', 'launchd', '-s']",ad7e1bf892cb003b79e36f16976efc5824481f9928aa833cb9c0df344f759734,False,
-/System/Library/LaunchAgents/com.apple.universalaccesscontrol.plist,com.apple.universalaccesscontrol,"['/System/Library/CoreServices/UniversalAccessControl.app/Contents/MacOS/UniversalAccessControl', 'launchd', '-s']",d9ad78e0bfdd13fc7dd83f2da99e36ae1ef9d15cda0bbcdb7a51bffade3b2c85,False,
-/System/Library/LaunchAgents/com.apple.universalaccessd.plist,com.apple.universalaccessd,"['/usr/sbin/universalaccessd', 'launchd', '-s']",8dcfb866a9cb760a84e684abb64e2184a58d7499bc2ab49eb0231ba7b9c2326c,True,
-/System/Library/LaunchAgents/com.apple.unmountassistant.useragent.plist,com.apple.unmountassistant.useragent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/MacOS/UnmountAssistantAgent']",03e73b1faaf0e2b3288abbbe99b24e80f68ee50142ed33c2967681376de2c686,False,
-/System/Library/LaunchAgents/com.apple.USBAgent.plist,com.apple.USBAgent,"['/usr/libexec/USBAgent']",0901226b5aa286df8e066f63c56721fd2b33a77ea3003378ee3b6edc38c230e6,False,
-/System/Library/LaunchAgents/com.apple.UserEventAgent-Aqua.plist,com.apple.UserEventAgent-Aqua,"['/usr/libexec/UserEventAgent', '(Aqua)']",f7796fba68d4936f231fccc098c5b8ddfee88c2c04da85217374736724604527,False,
-/System/Library/LaunchAgents/com.apple.UserEventAgent-LoginWindow.plist,com.apple.UserEventAgent-LoginWindow,"['/usr/libexec/UserEventAgent', '(LoginWindow)']",f7796fba68d4936f231fccc098c5b8ddfee88c2c04da85217374736724604527,False,
-/System/Library/LaunchAgents/com.apple.usernoted.plist,com.apple.usernoted,"['/usr/sbin/usernoted']",d3443ebd1a3c4cfac65450a0b604921545ca6f00a0c31f561fd62d685b0fe652,True,
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent-LoginWindow.plist,com.apple.UserNotificationCenterAgent-LoginWindow,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter', '-loginwindow']",1bf235701e0342eff339c58d31145ca04c2c294710ebdbf2e44c7c4a19054986,False,
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent.plist,com.apple.UserNotificationCenterAgent,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter']",1bf235701e0342eff339c58d31145ca04c2c294710ebdbf2e44c7c4a19054986,False,
-/System/Library/LaunchAgents/com.apple.VoiceOver.plist,com.apple.VoiceOver,"['/System/Library/CoreServices/VoiceOver.app/Contents/MacOS/VoiceOver', 'launchd', '-s']",09b3af75553c02abeee20440df42aa53a60d6ebe5dbf9117b026e3c225af3342,False,
-/System/Library/LaunchAgents/com.apple.warmd_agent.plist,com.apple.warmd_agent,"['/usr/libexec/warmd_agent']",a69ce892b387e921abd4e37b9bc20e2acc4fd7240df4a1cffb5b7b07e13bf46a,False,
-/System/Library/LaunchAgents/com.apple.webinspectord.plist,com.apple.webinspectord,"['/usr/libexec/webinspectord']",f7627044d750976d1a2950a51a5cce6c8ac2862e5cca0114991f660e87db4c89,False,
-/System/Library/LaunchAgents/com.apple.WebKit.PluginAgent.plist,com.apple.WebKit.PluginAgent,"['/System/Library/Frameworks/WebKit.framework/Frameworks/WebKitLegacy.framework/WebKitPluginAgent']",485183b5b26a740788fb5b750f49d53faf1375c226c2102e06a2fdcd16440a8b,False,
-/System/Library/LaunchAgents/com.apple.wifi.WiFiAgent.plist,com.apple.wifi.WiFiAgent,"['/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent']",a17532f72e22aba9b0da2313e13a513604ce88ea4f46d395dc48f1e333d838d8,True,
-/System/Library/LaunchAgents/com.apple.xmigrationhelper.user.plist,com.apple.xmigrationhelper.user,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/XibalbaHelper.bundle/Contents/Resources/XibalbaHelper']",08425dbb5195627ab4128486d0412888279d3a71a4c79281f6242e06ad144c57,False,
-/System/Library/LaunchAgents/com.apple.xpc.loginitemregisterd.plist,com.apple.xpc.loginitemregisterd,"['/usr/libexec/loginitemregisterd']",71cb24c70e28758ad51fc6254b185ad2307e655a7f89ab9cb71214e9ad29d673,False,
-/System/Library/LaunchAgents/com.apple.xpc.otherbsd.plist,com.apple.xpc.otherbsd,"['/usr/libexec/otherbsd']",cfab8357f446fe8d01429793f09a3557ddd339dc800154973f72c2f85b341a8f,False,
-/System/Library/LaunchAgents/com.apple.ZoomWindow.plist,com.apple.ZoomWindow,"['/System/Library/CoreServices/ZoomWindow.app/Contents/MacOS/ZoomWindowStarter', 'launchd', '-s']",651fe76ae8123d49a86f5f985d7f8d992b5c0fb0c12624f76c9dc9c067b306c7,False,
-/System/Library/LaunchAgents/org.openbsd.ssh-agent.plist,org.openbsd.ssh-agent,"['/usr/bin/ssh-agent', '-l']",f935284f985656128e89666cea294a54973187f9df616c5c507d874e1131333a,False,
diff --git a/15B42_launchd.csv b/15B42_launchd.csv
deleted file mode 100644
index 12a270b0..00000000
--- a/15B42_launchd.csv
+++ /dev/null
@@ -1,522 +0,0 @@
-filename,label,program,sha256,runatload,comment
-/System/Library/LaunchDaemons/bootps.plist,com.apple.bootpd,"['/usr/libexec/bootpd']",1fb58c6e6d793a8aae7c7a3c2ee8105b6a4dacc1e0a0d4b933e13796efe32bad,False,
-/System/Library/LaunchDaemons/com.apple.afpfs_afpLoad.plist,com.apple.afpfs_afpLoad,"['/System/Library/Filesystems/AppleShare/afpLoad']",aa7ee53b418c76045eae3602d48a1d50fa18c4dec80c626c66d4a7d0b6f23b13,False,
-/System/Library/LaunchDaemons/com.apple.afpfs_checkafp.plist,com.apple.afpfs_checkafp,"['/System/Library/Filesystems/AppleShare/check_afp.app/Contents/MacOS/check_afp']",402b5da2b144083411b530832cc2e7934f0ef21fc4a4d0973941fd1c801e9a9d,False,
-/System/Library/LaunchDaemons/com.apple.airplaydiagnostics.server.mac.plist,com.apple.airplaydiagnostics.server.mac,"['/AppleInternal/Applications/AirPlayDiagnostics.app/Contents/Resources/AirPlayDiagnosticsServer']",UNKNOWN,False,
-/System/Library/LaunchDaemons/com.apple.AirPlayXPCHelper.plist,com.apple.AirPlayXPCHelper,"['/usr/libexec/AirPlayXPCHelper']",e52378179e2440645f35320f0d300e211d78a24e1b0668725876e1134644d563,False,
-/System/Library/LaunchDaemons/com.apple.airport.wps.plist,com.apple.airport.wps,"['/usr/libexec/wps']",eb9a83daa1d26b5706c8c3266a646379d97f4cd19e385c35ecb95982634b3960,False,
-/System/Library/LaunchDaemons/com.apple.airportd.plist,com.apple.airportd,"['/usr/libexec/airportd']",720b9e284fa9e7ae75fbc767ee451c0d2a0925220a81c2f2b9a0a4be0f3cec1a,False,
-/System/Library/LaunchDaemons/com.apple.akd.plist,com.apple.akd,"['/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd']",ebe9a30b733eba1ac21dfdcd6aaa171552fcbdf8cec766ab92599e4d28ad01e9,False,
-/System/Library/LaunchDaemons/com.apple.alf.agent.plist,com.apple.alf,"['/usr/libexec/ApplicationFirewall/socketfilterfw']",f239a31b93995d1e190e01b14609c62c7cdecd8af658359a0bc4e533c16f5a58,False,
-/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist,com.apple.AppleFileServer,"['/usr/sbin/AppleFileServer']",4551009dfe94a2cd3f94db58b1c8c0aca1799d84e8ea777ecb79b03fd83fcfb8,False,
-/System/Library/LaunchDaemons/com.apple.appleseed.fbahelperd.plist,com.apple.appleseed.fbahelperd,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/fbahelperd']",bacb0de6d48a7ded43153e5cd9a1f526772c5b296bba8a56524a03da792a78cc,False,
-/System/Library/LaunchDaemons/com.apple.applessdstatistics.plist,com.apple.applessdstatistics,"['/usr/libexec/applessdstatistics']",a78fdd395d3f65aa3983442b36d8576d0ac60c847814b51689659c3702c501b9,False,
-/System/Library/LaunchDaemons/com.apple.apsd.plist,com.apple.apsd,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsd']",6e87998c7147683f37f100718d20f4acecc7a3fd4b51828fe9fa3a9c6918c4e0,True,
-/System/Library/LaunchDaemons/com.apple.aslmanager.plist,com.apple.aslmanager,"['/usr/sbin/aslmanager']",0cc960b8e81af9c707b3eadde2cd58cd25f75eee9e9d13743564260b7aae93f8,False,
-/System/Library/LaunchDaemons/com.apple.AssetCacheLocatorService.plist,com.apple.AssetCacheLocatorService,"['/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/Contents/MacOS/AssetCacheLocatorService', '-d']",9fc8f8803aef72446b8e88d3451351e572d8e0f26f0fa8ede7632721c6b50b91,False,
-/System/Library/LaunchDaemons/com.apple.atrun.plist,com.apple.atrun,"['/usr/libexec/atrun']",7e5e95eaa7f1b1b217cb2267ac61704def4d935b47221cff47f235e8b40212be,False,
-/System/Library/LaunchDaemons/com.apple.audio.coreaudiod.plist,com.apple.audio.coreaudiod,"['/usr/sbin/coreaudiod']",98816f79011049b952ac5474c46b957c9deecc30e480567bca7ac280ef6c4556,False,
-/System/Library/LaunchDaemons/com.apple.audio.systemsoundserverd.plist,com.apple.audio.systemsoundserverd,"['/usr/sbin/systemsoundserverd']",dccab8c15098c6344dadfb3b8b5db34459f2b07a9ff4493b1f019217ac63671f,False,
-/System/Library/LaunchDaemons/com.apple.auditd.plist,com.apple.auditd,"['/usr/sbin/auditd']",ba1306ee0249524dbde802311fd8161e50c56e375cbd2f4ff394cb2fb022d1a7,False,
-/System/Library/LaunchDaemons/com.apple.autofsd.plist,com.apple.autofsd,"['/usr/libexec/autofsd']",d6f95edbf0789c83d2b704b696062e565c2e9df28c90597c21bb1f459851c552,False,
-/System/Library/LaunchDaemons/com.apple.automountd.plist,com.apple.automountd,"['/usr/libexec/automountd']",b34f4e1d646c3e88d5448175e70f8303f26b6dc99f7ffebee402d5d6ee49d82b,False,
-/System/Library/LaunchDaemons/com.apple.avbdeviced.plist,com.apple.avbdeviced,"['/usr/sbin/avbdeviced']",434b32980a150b5a64ebfd82becb4df02547de46c4e8aae2a5787e2ca1eb5a39,False,
-/System/Library/LaunchDaemons/com.apple.awacsd.plist,com.apple.awacsd,"['/usr/libexec/awacsd']",bae0f1f532e40daf2d5995b85e31588567566a3bdc8871b87cc24ce9bb856e72,False,
-/System/Library/LaunchDaemons/com.apple.awdd.plist,com.apple.awdd,"['/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd']",1a7b9d2d1c6ebec84820ad8dfbaf66d2d8ae1407962314d23d23427ce899bddf,False,
-/System/Library/LaunchDaemons/com.apple.backupd-auto.plist,com.apple.backupd-auto,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper', '-launchd']",463de5a4dd856de8cafb3a49581b473495d93f799247c56c613ed9628b707e3a,True,
-/System/Library/LaunchDaemons/com.apple.backupd.plist,com.apple.backupd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd']",9e6ab70e56424b9bde5dd283233d8cb4db33a22a88ec95938f74b883f8b92ad0,False,
-/System/Library/LaunchDaemons/com.apple.blued.plist,com.apple.blued,"['/usr/sbin/blued']",1f15f61cd44acc2ca1c595089cda9b066197129efe3b82bb4a7f3d517bec90fc,False,
-/System/Library/LaunchDaemons/com.apple.bluetoothaudiod.plist,com.apple.bluetoothaudiod,"['/usr/sbin/bluetoothaudiod']",70574f069a56cbb42564e2fdacbbea02abdd624aa85be237a43dbcf7646970ea,False,
-/System/Library/LaunchDaemons/com.apple.bluetoothReporter.plist,com.apple.bluetoothReporter,"['/System/Library/Frameworks/IOBluetooth.framework/Versions/A/Resources/BluetoothReporter', '--dumpPacketLog', '/private/var/log/bluetooth.pklg']",7cf5b2aa9e40a598cb51081a2e19447c5240cf3378f252f2371d1e6e1f7ab729,False,
-/System/Library/LaunchDaemons/com.apple.bnepd.plist,com.apple.bnepd,"['/usr/sbin/bnepd']",b781c32b04e04444f677f99ba95d75da247512cf46701e49cc931d5e03459d5a,False,
-/System/Library/LaunchDaemons/com.apple.bsd.dirhelper.plist,com.apple.bsd.dirhelper,"['/usr/libexec/dirhelper']",6cd5a61231f96039fa54d878675711bd175b0bd228b9ad8a5810e0bd29828ac3,True,
-/System/Library/LaunchDaemons/com.apple.cache_delete.plist,com.apple.cache_delete,"['/System/Library/PrivateFrameworks/CacheDelete.framework/deleted']",d6bdf4bd8ad09611d88088c8c9d6dd760280eed839069b5d4d4bbac4ca002927,False,
-/System/Library/LaunchDaemons/com.apple.cfprefsd.xpc.daemon.plist,com.apple.cfprefsd.xpc.daemon,"['/usr/sbin/cfprefsd', 'daemon']",a61315c2cf11733e6a511a0fdb0ffd239e402b0d00cc6a9e408a458d32e447c2,False,
-/System/Library/LaunchDaemons/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",591cd2e0c50ab5dd84d2225eb80928c9717c523a0f2c98289b72639bec31a5ea,False,
-/System/Library/LaunchDaemons/com.apple.cmio.AppleCameraAssistant.plist,com.apple.cmio.AppleCameraAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/AppleCamera.plugin/Contents/Resources/AppleCameraAssistant']",c53c282b68f2a974da4ce2ea8524333733861618d7106f22b89edcbf859ace21,False,
-/System/Library/LaunchDaemons/com.apple.cmio.AVCAssistant.plist,com.apple.cmio.AVCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/AVC.plugin/Contents/Resources/AVCAssistant']",e43851b70cd29c6c9486ab187898c9fe15084ecd600d71af36cf816785759e7a,False,
-/System/Library/LaunchDaemons/com.apple.cmio.IIDCVideoAssistant.plist,com.apple.cmio.IIDCVideoAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/IIDC.plugin/Contents/Resources/IIDCVideoAssistant']",64fc8d3d53ac72e7b9b8a09dfdfe00b42869319a73bb52d5533454e3a54bd2b9,False,
-/System/Library/LaunchDaemons/com.apple.cmio.iOSScreenCaptureAssistant.plist,com.apple.cmio.iOSScreenCaptureAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/iOSScreenCapture.plugin/Contents/Resources/iOSScreenCaptureAssistant']",f41e9b740b9f6bc51126db22645415106af892e1a72077f31eec2ba8bf55cc0d,False,
-/System/Library/LaunchDaemons/com.apple.cmio.VDCAssistant.plist,com.apple.cmio.VDCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/VDC.plugin/Contents/Resources/VDCAssistant']",71753e97cfb4215f45e1bd744b9de737516f763f34e41d34d02b3d1157f687a5,False,
-/System/Library/LaunchDaemons/com.apple.colorsyncd.plist,com.apple.colorsyncd,"['/usr/libexec/colorsyncd']",0cdbec11c6840f05f458fec60b62f0e41daf94ce7b8db32795b8e253c6c8b463,False,
-/System/Library/LaunchDaemons/com.apple.CommCenterRootHelper.plist,com.apple.CommCenterRootHelper,"['/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenterRootHelper']",7fb5a0fae07635e91d7ab57c8ac002f80faa35fce52591c0ba89328973d631fd,False,
-/System/Library/LaunchDaemons/com.apple.comsat.plist,com.apple.comsat,"['/usr/libexec/comsat']",2fadf4f2c86ce2e5c2e101e501bc08aac2ae6b1e646ec6f4f8323f5204b0126d,False,
-/System/Library/LaunchDaemons/com.apple.configd.plist,com.apple.configd,"['/usr/libexec/configd']",65f14d0d63c194f12589dd192fbf6710acaf6fab54afc585a292bf2be66a3258,False,
-/System/Library/LaunchDaemons/com.apple.configureLocalKDC.plist,com.apple.configureLocalKDC,"['/usr/libexec/configureLocalKDC']",f6afc2f328af2217addc06c515158cb41af43099e1bbe0f200429e5bba46385d,False,
-/System/Library/LaunchDaemons/com.apple.corecaptured.plist,com.apple.corecaptured,"['/usr/libexec/corecaptured']",dfc0b7dc5e73be4877181e784276952b5b9df428cb1d3ef6da6a8d272226debc,False,
-/System/Library/LaunchDaemons/com.apple.coreduetd.osx.plist,com.apple.coreduetd,"['/usr/libexec/coreduetd']",9c09263200a3c46d6a7286b25fac0bf98af33ea28da48956041007bb591a887f,True,
-/System/Library/LaunchDaemons/com.apple.CoreRAID.plist,com.apple.CoreRAID,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Resources/CoreRAIDServer']",bd664036790b56c5935292eb90e4f02a4d4f11e9db43e084674f9e05159688d2,True,
-/System/Library/LaunchDaemons/com.apple.coreservices.appleevents.plist,com.apple.coreservices.appleevents,"['/System/Library/CoreServices/appleeventsd', '--server']",515a0dda7baaf7b33738bb9296fe39816674c5945fdcbc2657d8024e9598d13b,True,
-/System/Library/LaunchDaemons/com.apple.coreservices.appleid.passwordcheck.plist,com.apple.coreservices.appleid.passwordcheck,"['/System/Library/CoreServices/AppleIDAuthAgent', '--checkpassword']",6dc9534c6040b6a73a0e0291bd1061e87353163866cbf100df04c94fd5f60f09,False,
-/System/Library/LaunchDaemons/com.apple.coreservices.launchservicesd.plist,com.apple.coreservices.launchservicesd,"['/System/Library/CoreServices/launchservicesd']",02e165a00bf1aa54d36f86f7694056a124f2923a6f951de50ccbb2354e33245f,True,
-/System/Library/LaunchDaemons/com.apple.coreservices.sharedfilelistd.plist,com.apple.coreservices.sharedfilelistd,"['/System/Library/CoreServices/sharedfilelistd', '--enable-legacy-services']",f97eb14ce64afc014edb83bd0d24f1fa26bce7ae5613a8175e723b500fe3af09,False,
-/System/Library/LaunchDaemons/com.apple.coreservicesd.plist,com.apple.coreservicesd,"['/System/Library/CoreServices/coreservicesd']",5ef5417a64a68c97d14fd8c9dcff54620ccbb852ef96e48c5bf5df6cf53aeedf,False,
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoraged.plist,com.apple.corestorage.corestoraged,"['/usr/libexec/corestoraged']",b3776610b17659e667844e6a7684e70c425af58585f562f8a8086d41a997052a,False,
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoragehelperd.plist,com.apple.corestorage.corestoragehelperd,"['/usr/libexec/corestoragehelperd']",669adc725a3a8fb6511757e609fc9c5f9c00621613d736418b39be832ee5eb2f,False,
-/System/Library/LaunchDaemons/com.apple.coresymbolicationd.plist,com.apple.coresymbolicationd,"['/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd']",d9eb1142fec68ee8fc0931bb9fe97230481d058e0058179a6638c5d64ca7f26f,False,
-/System/Library/LaunchDaemons/com.apple.CrashReporterSupportHelper.plist,com.apple.CrashReporterSupportHelper,"['/System/Library/CoreServices/CrashReporterSupportHelper', 'server-init']",dc023b52c431da09ba4a65741413f4e612e89730f9329b94a58be5344bde264c,False,
-/System/Library/LaunchDaemons/com.apple.csrutil.report.plist,com.apple.csrutil.report,"['/usr/bin/csrutil', 'report']",427d32edd4d5257fad9820bd8504bc9ac8b0416e1a8ce066c10c16ab6d3b23bd,False,
-/System/Library/LaunchDaemons/com.apple.ctkd.plist,com.apple.ctkd,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkd', '-s']",1eefefb7ebb56ce8f642eda690b261aa09fa9c2b1286ea2a4962cd7fd9f16956,False,
-/System/Library/LaunchDaemons/com.apple.cvmsServ.plist,com.apple.cvmsServ,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer']",064116685e4da7a2a7c38e3f650cdc32a7b0278d6b273c05fecd11ef00af75a6,False,
-/System/Library/LaunchDaemons/com.apple.DesktopServicesHelper.plist,com.apple.DesktopServicesHelper,"['/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper']",0c3b2d3f59b1ed40f7021caa1ced41db61d956407a52a16654f7cb51e8f44211,False,
-/System/Library/LaunchDaemons/com.apple.diagnostic.uuidpathd.plist,com.apple.diagnostic.uuidpathd,"['/usr/libexec/uuidpathd']",64aa9d7f87b0b36f91dd103ff7867d6e59f7e48793e74fda279c282fa0e0efb0,False,
-/System/Library/LaunchDaemons/com.apple.diagnosticd.plist,com.apple.diagnosticd,"['/usr/libexec/diagnosticd']",f83fbaaa2b27061f59d70dc71a6a3e5ff4a57be2f13b9898fd62b869e964666d,False,
-/System/Library/LaunchDaemons/com.apple.diskarbitrationd.plist,com.apple.diskarbitrationd,"['/usr/libexec/diskarbitrationd']",7d422098b13b036e5cda7c7104e49fda409f18e4b4483ea4aca3cd0ba49172df,False,
-/System/Library/LaunchDaemons/com.apple.diskmanagementd.plist,com.apple.diskmanagementd,"['/usr/libexec/diskmanagementd']",a9d94066d046e9aa65ab5cdeade5468c70849ebb3a9fb88ca8ffe5fdd9e4f0b4,False,
-/System/Library/LaunchDaemons/com.apple.diskmanagementstartup.plist,com.apple.diskmanagementstartup,"['/usr/libexec/diskmanagementstartup']",8d41a35e3cbde7162c45e9a49bde7608c4516bdde254794d1da23a01716a315e,True,
-/System/Library/LaunchDaemons/com.apple.displaypolicyd.plist,com.apple.displaypolicyd,"['/usr/libexec/displaypolicyd']",53fd267f8d3b090edc83de9b82dda314f368ee068857ee8e33fd155d2c845415,True,
-/System/Library/LaunchDaemons/com.apple.distnoted.xpc.daemon.plist,com.apple.distnoted.xpc.daemon,"['/usr/sbin/distnoted', 'daemon']",cd4d8ac051c418b02bd98e36191638e5733f17521e23594bed2e579a24b3b77e,False,
-/System/Library/LaunchDaemons/com.apple.dnsextd.plist,com.apple.dnsextd,"['/usr/sbin/dnsextd', '-launchd']",3f9c88f85a9c9b8c06fe2694ab782e54b886ba9b4958946a7f0f904d91656514,False,
-/System/Library/LaunchDaemons/com.apple.dpaudiothru.plist,com.apple.dpaudiothru,"['/usr/libexec/dpaudiothru']",1aa55a38d9e2b2d3576009aee77321c69d80bace5319f264a3ae9c8bbb4dfe58,False,
-/System/Library/LaunchDaemons/com.apple.dpd.plist,com.apple.dpd,"['/usr/libexec/dpd']",8294d9fd036ceb0365bb3770703fced22dd433c100febbc1a4ddb6a719e8d73e,False,
-/System/Library/LaunchDaemons/com.apple.dspluginhelperd.plist,com.apple.dspluginhelperd,"['/usr/libexec/dspluginhelperd']",25c7361bca24e2cb561d3fc1ad63db309f83861704a5fb3e944e3980726c72fc,False,
-/System/Library/LaunchDaemons/com.apple.DumpGPURestart.plist,com.apple.DumpGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/DumpGPURestart']",efa156603c492d9e270329aabfd089d68b4d3adddc75145d879c92045f88dbca,False,
-/System/Library/LaunchDaemons/com.apple.DumpPanic.plist,com.apple.DumpPanic,"['/System/Library/CoreServices/DumpPanic']",cbf53abc262d011d7ef4ad567fbd880f9f69e7e44dff90be88bb471f7d2bc275,True,
-/System/Library/LaunchDaemons/com.apple.dvdplayback.setregion.plist,com.apple.dvdplayback.setregion,"['/usr/bin/setregion']",86a184c4235a51dede14e5cba3bc313f096162827b88ee826ae3611399757cb6,False,
-/System/Library/LaunchDaemons/com.apple.dynamic_pager.plist,com.apple.dynamic_pager,"['/sbin/dynamic_pager', '-F', '/private/var/vm/swapfile']",fe0b55fae0d5267c5e720e602fa96e46d3401814e9333c0c4741503e7a9b8c14,False,
-/System/Library/LaunchDaemons/com.apple.eapolcfg_auth.plist,com.apple.eapolcfg_auth,"['/System/Library/PrivateFrameworks/EAP8021X.framework/Resources/eapolcfg_auth']",5335b841273eaaee3420ee29a3a5c662f7399d8f701960c48dfabaa69a49a87e,False,
-/System/Library/LaunchDaemons/com.apple.efax.plist,com.apple.efax,"['/usr/bin/fax', 'answer']",2ac62536538d805afb108c26c8b2fe81ae2ab00700b175661ece2ec2af22a341,False,
-/System/Library/LaunchDaemons/com.apple.efilogin-helper.plist,com.apple.efilogin-helper,"['/System/Library/PrivateFrameworks/EFILogin.framework/Resources/efilogin-helper']",bdfbcfb0a99a5f7a64b87e793c0289980feb6158beebd061f4a8cdfd47b98a25,False,
-/System/Library/LaunchDaemons/com.apple.emlog.plist,com.apple.emlog,"['/usr/libexec/emlog.pl']",5328f0d109c2b421f0845c0d0fe0efb58734297dca5f8708dc5bda4fea57f634,False,
-/System/Library/LaunchDaemons/com.apple.emond.aslmanager.plist,com.apple.emond.aslmanager,"['/usr/sbin/aslmanager', '-s', '/var/log/eventmonitor']",0cc960b8e81af9c707b3eadde2cd58cd25f75eee9e9d13743564260b7aae93f8,False,
-/System/Library/LaunchDaemons/com.apple.emond.plist,com.apple.emond,"['/sbin/emond']",194e418cc6489f10b50e68f62da52b946346fdeb419f085f07aa0e9377d8039f,False,
-/System/Library/LaunchDaemons/com.apple.eppc.plist,com.apple.AEServer,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/AE.framework/Versions/A/Support/AEServer', '--debug']",44244e09a2b2f6f5e298719c08570211cea022f975a7f2e8900df41643f52012,False,
-/System/Library/LaunchDaemons/com.apple.familycontrols.plist,com.apple.familycontrols,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/parentalcontrolsd']",54c666480aed445003bfb6767a5264d7b61047d9c89ad2fe84b13d3c4d5349d5,False,
-/System/Library/LaunchDaemons/com.apple.FileCoordination.plist,com.apple.FileCoordination,"['/usr/sbin/filecoordinationd']",4f7b2e113c093392944863a1ca2de032f6ac43cca40137877baf92dc434df1eb,False,
-/System/Library/LaunchDaemons/com.apple.FileSyncAgent.sshd.plist,com.apple.FileSyncAgent.sshd,"['/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/FileSyncAgent_sshd-keygen-wrapper', '-i', '-f', '/System/Library/CoreServices/FileSyncAgent.app/Contents/Resources/FileSyncAgent_sshd_config']",d24e7e74b9b82c2e0ac6ac47e1f29248d81246d7b58ae4efaf84f34d1a74ef93,False,
-/System/Library/LaunchDaemons/com.apple.findmymac.plist,com.apple.findmymacd,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacd']",0d29a187da15d0b06899e696af28f705fd4e85b9fea17928ec5aa70c995066b2,False,
-/System/Library/LaunchDaemons/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",dfab96f82fd0b7c27876f6ef598f83fc8cacc252821712618c7841c9c7fe468f,False,
-/System/Library/LaunchDaemons/com.apple.firmwaresyncd.plist,com.apple.firmwaresyncd,"['/usr/libexec/firmwaresyncd']",d0e9d3fd0b08d12f17d45f8384be14e6ab76593eb40490297bb0d49671f61037,True,
-/System/Library/LaunchDaemons/com.apple.fontd.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",ad981c152635554225f9de818e4bad5aa563fc0cec4ee78193e3c99a7c225bc9,False,
-/System/Library/LaunchDaemons/com.apple.fontmover.plist,com.apple.fontmover,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontmover', '-d']",45a5edbf9c0b1411a13eeedf4d4c067b23c140086b917dbfaab8e58b4243e861,False,
-/System/Library/LaunchDaemons/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",efa01df0e9fb04d45f32142447a1f68f6b53e58a47ba0998f468180fc809ad5e,False,
-/System/Library/LaunchDaemons/com.apple.fseventsd.plist,com.apple.fseventsd,"['/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd']",79bfd8f34542aefd860b21f4fe8645299a0f01b9b4b16558e54c23e5b952f086,False,
-/System/Library/LaunchDaemons/com.apple.ftp-proxy.plist,com.apple.ftp-proxy,"['/usr/libexec/ftp-proxy']",de5f7986646c213543d65dd535ca54a89d464876077034f45160a095050f8f90,False,
-/System/Library/LaunchDaemons/com.apple.GameController.gamecontrollerd.plist,com.apple.GameController.gamecontrollerd,"['/usr/libexec/gamecontrollerd']",edbb7239e048aa2cd9ce5f31c26f09ca8de7dcfd2526136128ee4b27686302e3,False,
-/System/Library/LaunchDaemons/com.apple.getty.plist,com.apple.getty,"['/usr/libexec/getty', 'std.9600', 'console']",885afd28fa1bbd68ee27bc9983b412b443021c7b4297386706e1a49cc297d1ce,False,
-/System/Library/LaunchDaemons/com.apple.gkreport.plist,com.apple.gkreport,"['/usr/libexec/gkreport']",67d87aca1bb268cbb4578f637f0c2ceec3cc1d6cc259eb7584bec0eac2fb34c7,False,
-/System/Library/LaunchDaemons/com.apple.GSSCred.plist,com.apple.GSSCred,"['/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred']",ad0f1d1f6d98f9e7320dec7d49a725d288a1e7aa752ee0147bae9a30cfd7cb68,False,
-/System/Library/LaunchDaemons/com.apple.gssd.plist,com.apple.gssd,"['/usr/sbin/gssd']",36cc87f599fafd8e202d819cc0eeca5c140ee38a1a600e69624ba2a00018fcf1,False,
-/System/Library/LaunchDaemons/com.apple.hdiejectd.plist,com.apple.hdiejectd,"['/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd']",9837c0e92de00c8dfe221c97eebe4ed642844fe350763f5fc2d036ca2aaba017,False,
-/System/Library/LaunchDaemons/com.apple.hidd.plist,com.apple.hidd,"['/usr/libexec/hidd']",91fa103c7ff732206ea7d8ab1cca5efceee7de21808c4a8fd60370e75e11a500,False,
-/System/Library/LaunchDaemons/com.apple.icloud.findmydeviced.plist,com.apple.icloud.findmydeviced,"['/usr/libexec/findmydeviced']",eeef03f698d14e2b7317e577f9a4ef65280bddc53d515a495505f58581ff9058,False,
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",3d34e9c0ae870a64ab4c125f390c8cb06319a5ab32892cedc9e989e9c1a88e7e,True,
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesd.plist,com.apple.iconservices.iconservicesd,"['/System/Library/CoreServices/iconservicesd']",f6d8f438269e769ccb7d09533078eea4d6d662ec6d8de67c9ecf537050e411c5,True,
-/System/Library/LaunchDaemons/com.apple.IFCStart.plist,com.apple.IFCStart,"['/usr/libexec/ifcstart']",4c7c871770303a7089d40c1480e07357f76f5756f9e65a0ae43502cdca38dd4b,True,
-/System/Library/LaunchDaemons/com.apple.ifdreader.plist,com.apple.ifdreader,"['/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader']",81b2a0d4265bcb486a9a71e0975d8e70f35e84ab8b05f71162aa0a58ffd6f177,False,
-/System/Library/LaunchDaemons/com.apple.installandsetup.systemmigrationd.plist,com.apple.installandsetup.systemmigrationd,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/systemmigrationd']",9bc779cb6fbe18a2c0bac6b2ea7d554533ad9e86661706bc85430fa50dd2a847,False,
-/System/Library/LaunchDaemons/com.apple.installd.plist,com.apple.installd,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",2f77472bb65211af39ce134b58e658d20d3c6be47f2e7c58b4379dbfd5afdc84,False,
-/System/Library/LaunchDaemons/com.apple.IOAccelMemoryInfoCollector.plist,com.apple.IOAccelMemoryInfoCollector,"['/usr/libexec/IOAccelMemoryInfoCollector']",2766758db975dc0cc44e7888d87ec86d1fcc415da3be243d45afbca3d88b9837,False,
-/System/Library/LaunchDaemons/com.apple.IOBluetoothUSBDFU.plist,com.apple.IOBluetoothUSBDFU,"['/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothUSBDFU.kext/Contents/Resources/IOBluetoothUSBDFUTool']",1d3f5aa86cd2e9c77c02fa77b0c48f700f213e212aa24442d4000197223a3a1e,False,
-/System/Library/LaunchDaemons/com.apple.kcproxy.plist,com.apple.kcproxy,"['/usr/libexec/kcproxy']",dfe1f9e68ffaff049f60bb967b4c32a6461b6ceda834e91dac31a913e92dd59e,False,
-/System/Library/LaunchDaemons/com.apple.kdumpd.plist,com.apple.kdumpd,"['/usr/libexec/kdumpd', '/PanicDumps']",06a0e32e932425e82b413e564dc218fe5bffffbc14acb72e155e21a805634a05,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.digest-service.plist,com.apple.Kerberos.digest-service,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/digest-service']",20a343b40a169a6eaa0c2cc19ffe91749f511e701fad86b8ecc4a0b82baa0cc7,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kadmind.plist,com.apple.Kerberos.kadmind,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind']",b88d5ee34747cb2afd3cb9b4ac213682be74600c7e994a6b94f860116784109c,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kcm.plist,com.apple.Kerberos.kcm,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm', '--launchd']",5edfa5393097d09daa469c60361df048fb87c0d7f03160d863d4e122b5f53a8a,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist,com.apple.Kerberos.kdc,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc']",a6f984bcf0e87778136662144a544fc2fbad8f2eb40af414de6a8dd1b8f347f9,False,
-/System/Library/LaunchDaemons/com.apple.Kerberos.kpasswdd.plist,com.apple.Kerberos.kpasswdd,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kpasswdd']",bcb7dcb7b6fb9345f38741c312ac62de1a8343fb8c14ae972d5d652ebcb9c29d,False,
-/System/Library/LaunchDaemons/com.apple.KernelEventAgent.plist,com.apple.KernelEventAgent,"['/usr/sbin/KernelEventAgent']",79e28be4bae151beab177c2661c95b931914d767764f814a421d92582de65308,False,
-/System/Library/LaunchDaemons/com.apple.kextd.plist,com.apple.kextd,"['/usr/libexec/kextd']",1ef94235560d0c31a9f0e5c28cf93e09c0d393bbc455509519be3daf90b4037e,False,
-/System/Library/LaunchDaemons/com.apple.kuncd.plist,com.apple.kuncd,"['/usr/libexec/kuncd']",e6adf70e4b136810bd7e2562789c1d24a34ecfbb650873cc0e193a0a3448e889,False,
-/System/Library/LaunchDaemons/com.apple.locate.plist,com.apple.locate,"['/usr/libexec/locate.updatedb']",7bf77fbcfaec0c33e7649a919872c45584fe65b8d1924cbe25b14ed799b6ff1c,False,
-/System/Library/LaunchDaemons/com.apple.locationd.plist,com.apple.locationd,"['/usr/libexec/locationd']",b063f485bb452df54b3977816137cf23a60c4fc70482351e48e232f48a5fdc17,False,
-/System/Library/LaunchDaemons/com.apple.lockd.plist,com.apple.lockd,"['/usr/sbin/rpc.lockd']",bdb41337fd056b91300672b3b44b5b5f909d23e1b8b62ce2cdf04d9ab69a0f78,False,
-/System/Library/LaunchDaemons/com.apple.logd.plist,com.apple.logd,"['/usr/libexec/logd']",7014ea36fcbcc80321a7e22df8d591596d877e0192ebdb7727b5e435cc976107,True,
-/System/Library/LaunchDaemons/com.apple.logind.plist,com.apple.logind,"['/System/Library/CoreServices/logind']",0cd65b6d45eebc9c0df9a46bb88c7fa25fa6b0e626e24bda7211e80ea7b43efa,True,
-/System/Library/LaunchDaemons/com.apple.loginwindow.LFVTracer.plist,com.apple.loginwindow.LFVTracer,"['/System/Library/CoreServices/loginwindow.app/Contents/Resources/LegacyFileVaultMessageTracer']",e48c0ac206c813cd06efc899507c7e59ca64a52c18c9815019754b2c48aee644,False,
-/System/Library/LaunchDaemons/com.apple.loginwindow.plist,com.apple.loginwindow,"['/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow', 'console']",c99873eb5994929a1c7792b0c0288070664dc4de9126cb75a082c90812560152,False,
-/System/Library/LaunchDaemons/com.apple.logkextloadsd.plist,com.apple.logkextloadsd,"['/usr/libexec/logkextloadsd']",eda47f8f5ed23ea182c70ed0f720c1b4085e7374a1c752e8c810e4eb33fafcca,False,
-/System/Library/LaunchDaemons/com.apple.lsd.plist,com.apple.lsd,"['/usr/libexec/lsd', 'runAsRoot']",5f54e2a9dd876c03213dcdd294d8165c429fb786f051a1b40bc69035e2cf8079,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.cloudconfigurationd.plist,com.apple.ManagedClient.cloudconfigurationd,"['/usr/libexec/cloudconfigurationd']",13c2c6bf07431f210db40a247a05f663adebda9a6400072b47ab60043f531b81,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist,com.apple.ManagedClient.enroll,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-e']",e37c0e34123ce48234f9ddbd179c1fadeaa747180000e17540f008cdd78affbc,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.plist,com.apple.ManagedClient,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient']",e37c0e34123ce48234f9ddbd179c1fadeaa747180000e17540f008cdd78affbc,False,
-/System/Library/LaunchDaemons/com.apple.ManagedClient.startup.plist,com.apple.ManagedClient.startup,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-i']",e37c0e34123ce48234f9ddbd179c1fadeaa747180000e17540f008cdd78affbc,True,
-/System/Library/LaunchDaemons/com.apple.mbsystemadministration.plist,com.apple.mbsystemadministration,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbsystemadministration']",5716feebfbfd9f3da7b9ccb823db3e0225e71876bc7c22c4c5bbae91453b1437,False,
-/System/Library/LaunchDaemons/com.apple.mbusertrampoline.plist,com.apple.mbusertrampoline,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbusertrampoline']",85d7e15bad797c2ad011a8d6df0dc024461beda3c52bc8036176df467ffcdfae,False,
-/System/Library/LaunchDaemons/com.apple.mdmclient.daemon.plist,com.apple.mdmclient.daemon,"['/usr/libexec/mdmclient', 'daemon']",845d83d0c8a98dfeffef7f13ef0335e77e3b08fe168e9c9bf15f0beaccf7b6c0,False,
-/System/Library/LaunchDaemons/com.apple.mdmclient.daemon.runatboot.plist,com.apple.mdmclient.daemon.runatboot,"['/usr/libexec/mdmclient', 'rundaemon']",845d83d0c8a98dfeffef7f13ef0335e77e3b08fe168e9c9bf15f0beaccf7b6c0,True,
-/System/Library/LaunchDaemons/com.apple.mDNSResponder.plist,com.apple.mDNSResponder.reloaded,"['/usr/sbin/mDNSResponder']",db4e9fc88de00590c7be95cf003668f61dbfbb3f793357597450e9f807053948,False,
-/System/Library/LaunchDaemons/com.apple.mDNSResponderHelper.plist,com.apple.mDNSResponderHelper.reloaded,"['/usr/sbin/mDNSResponderHelper']",1ba3ba8cc50e061ba61200464df157141a97ae27fbe1bbbb9f89646f377b9d86,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.index.plist,com.apple.metadata.mds.index,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores']",a9a0a98ac69312bf38c4f7b8ed62a790c33d43cc13a8d88eb2c149b7615e6850,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.plist,com.apple.metadata.mds,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds']",23d92cbcac06a44a36d5e8b4061a197e0a071b6a2fcc875d4a232ecf98a540a8,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.scan.plist,com.apple.metadata.mds.scan,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-scan', '-c', 'MDSSyncScanWorker', '-m', 'com.apple.metadata.mds.scan']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchDaemons/com.apple.metadata.mds.spindump.plist,com.apple.metadata.mds.spindump,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'none', '-c', 'MDSSpinDumpWorker', '-m', 'com.apple.metadata.mds.spindump']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchDaemons/com.apple.MobileFileIntegrity.plist,com.apple.MobileFileIntegrity,"['/usr/libexec/amfid']",000ba7f2d3047f51e1743ef198f5843ddb1c65e63b9a7f9677366a58ade1bba8,False,
-/System/Library/LaunchDaemons/com.apple.MRTd.plist,com.apple.MRTd,"['/System/Library/CoreServices/MRT.app/Contents/MacOS/MRT', '-d']",fd07a1f4ed10706cc4eb6c3c12ed46c4cb5f52ccd73f55ca847dffc67dc879bf,True,
-/System/Library/LaunchDaemons/com.apple.msrpc.echosvc.plist,com.apple.msrpc.echosvc,"['/usr/libexec/rpcsvchost', '-launchd', 'echosvc.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.lsarpc.plist,com.apple.msrpc.lsarpc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'lsarpc.bundle', 'dssetup.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.mdssvc.plist,com.apple.msrpc.mdssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'mdssvc.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.netlogon.plist,com.apple.msrpc.netlogon,"['/usr/libexec/rpcsvchost', '-launchd', 'netlogon.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.srvsvc.plist,com.apple.msrpc.srvsvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'srvsvc.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.msrpc.wkssvc.plist,com.apple.msrpc.wkssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'wkssvc.bundle']",876b184c384087a310fe0b26a22b4d2a996f476c8c828aec9e38b63dc2c927ff,False,
-/System/Library/LaunchDaemons/com.apple.mtmd.plist,com.apple.mtmd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd']",79c2dea61a2e812683d29f00c7f984b9433719d6d8b95cad08169712a16d4057,False,
-/System/Library/LaunchDaemons/com.apple.mtmfs.plist,com.apple.mtmfs,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmfs', '--tcp', '--resvport', '--listen', 'localhost', '--oneshot', '--noportmap', '--nobrowse']",d344f5463bb6817548c64a9c117014e1a38efd6661eec32531ebf1ac12eec34d,True,
-/System/Library/LaunchDaemons/com.apple.nehelper.plist,com.apple.nehelper,"['/usr/libexec/nehelper']",1b82e1fcafd2e1e2ae2abb09e23f75400ceb75ff44c5d72b79d8bbab9c40b12f,False,
-/System/Library/LaunchDaemons/com.apple.nesessionmanager.plist,com.apple.nesessionmanager,"['/usr/libexec/nesessionmanager']",cbc122a6f2f76251ec21c4735ab95442a9f00ad4a93a7cc1e6ff1938ed88ff9b,False,
-/System/Library/LaunchDaemons/com.apple.netauth.sys.auth.plist,com.apple.netauth.sys.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent', '--sys']",bc6707a055c064d3c6659fe6083663aac071d10973b2dbb571896307db16647c,False,
-/System/Library/LaunchDaemons/com.apple.netauth.sys.gui.plist,com.apple.netauth.sys.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent', '--sys']",650d221ceb76eb2138ee9a1efea86f89db23cfe45a7e62dd8e7fc033f005926a,False,
-/System/Library/LaunchDaemons/com.apple.netbiosd.plist,com.apple.netbiosd,"['/usr/sbin/netbiosd']",7f5f498e9c1be02f7e73672a116dbc423b9b3063479e13492cb3a5006dcfd300,False,
-/System/Library/LaunchDaemons/com.apple.NetBootClientStatus.plist,com.apple.NetBootClientStatus,"['/usr/sbin/NetBootClientStatus']",457bee1cedce7e8f0d9354b87ca41490671ae428886614ab7d3031a438fc7f28,True,
-/System/Library/LaunchDaemons/com.apple.networkd.plist,com.apple.networkd,"['/usr/libexec/networkd']",ca2d23da69ea172f37213edfc53728e4b477c992381d693ba4eeb64261b6740e,False,
-/System/Library/LaunchDaemons/com.apple.networkd_privileged.plist,com.apple.networkd_privileged,"['/usr/libexec/networkd_privileged']",319b7209060696ef53cfb71967d5197976c781266795858a357379823c0be6b3,False,
-/System/Library/LaunchDaemons/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",2018ea3b60a0970bd160664568aac6997e34e8a9fbc6e65ec030612246182011,False,
-/System/Library/LaunchDaemons/com.apple.NetworkLinkConditioner.plist,com.apple.nlcd,"['/usr/libexec/nlcd']",20279ef5f2c185d64f35e59fc08a7db916dbb32825766fda02dc40b7d51afee2,False,
-/System/Library/LaunchDaemons/com.apple.NetworkSharing.plist,com.apple.NetworkSharing,"['/usr/libexec/InternetSharing']",44347c551ff5b882df1618647db0ec663ae712a7bcfa71a8a43b9db3843fe7b0,False,
-/System/Library/LaunchDaemons/com.apple.newsyslog.plist,com.apple.newsyslog,"['/usr/sbin/newsyslog']",f079751ed5bcaa6ba01cd9d6e5c0279411407efe0023f6e42aa6b6c10067dce3,False,
-/System/Library/LaunchDaemons/com.apple.nfsconf.plist,com.apple.nfsconf,"['/sbin/mount_nfs', 'configupdate']",642bf9a07ebfefa168d8bb09e4d441b3ed535219b8601acb46c561bd386519ee,True,
-/System/Library/LaunchDaemons/com.apple.nfsd.plist,com.apple.nfsd,"['/sbin/nfsd']",d38bdd71f905570243b84c77f439665ece61a7625aaa96fed3d43ac694c0a4f4,False,
-/System/Library/LaunchDaemons/com.apple.nis.ypbind.plist,com.apple.nis.ypbind,"['/usr/sbin/ypbind']",456154e12b63eeec7a63cbc6501c0fd4d02297d2e85a2d90fde26b7a05e3d916,False,
-/System/Library/LaunchDaemons/com.apple.noticeboard.state.plist,com.apple.noticeboard.state,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated']",6bfc2b70f815fa00ad5da3bf02a974c13f48f69d1d9bb9c875d071c6bbe70b2f,False,
-/System/Library/LaunchDaemons/com.apple.notifyd.plist,com.apple.notifyd,"['/usr/sbin/notifyd']",b18d29855cb886519407893efd1d5eafbd411d574b48eca84c67ea3d9b46195e,False,
-/System/Library/LaunchDaemons/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond_privileged,"['/usr/libexec/nsurlsessiond', '--privileged']",5fdabcf4f5b12868ff14ec56b871ec89d37446b456c05109d35927058accce01,False,
-/System/Library/LaunchDaemons/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",24ae6fd6e474e3e50f88f616cceabeec6d17d731031dcfa69e66f52b2c0d21bf,False,
-/System/Library/LaunchDaemons/com.apple.ocspd.plist,com.apple.ocspd,"['/usr/sbin/ocspd']",f4d7b4a1a390329262ba241084dbddc66acd8bb628b6091930316849a4173d8d,False,
-/System/Library/LaunchDaemons/com.apple.odproxyd.plist,com.apple.odproxyd,"['/usr/libexec/odproxyd']",67b0197f4a31934562dad4904324007d132c03c7550a217fc0bde9358235ca32,False,
-/System/Library/LaunchDaemons/com.apple.ODSAgent.plist,com.apple.ODSAgent,"['/System/Library/CoreServices/ODSAgent.app/Contents/MacOS/ODSAgent', '-launchd']",8bc555deb37cf228954b7079fb81bd50eb1d48126e1fd08970672908de133256,False,
-/System/Library/LaunchDaemons/com.apple.opendirectoryd.plist,com.apple.opendirectoryd,"['/usr/libexec/opendirectoryd']",d27e619a792013b9b9d3ac0eec70ba93d94cabdae6d992877949735b2663dd0a,False,
-/System/Library/LaunchDaemons/com.apple.PasswordService.plist,com.apple.PasswordService,"['/usr/sbin/PasswordService', '-n']",c8cabed9b550f7910f98b818a438e2b360808299368a64b4c4a0bdf09df4a9c8,False,
-/System/Library/LaunchDaemons/com.apple.PCIELaneConfigTool.plist,com.apple.PCIELaneConfigTool,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIELaneConfigTool']",bb868ecd445789d7bd0f761037c0a1072fa3da8560d24c78d390647e015284df,False,
-/System/Library/LaunchDaemons/com.apple.periodic-daily.plist,com.apple.periodic-daily,"['/usr/libexec/periodic-wrapper', 'daily']",9223655f1ac125b9c2bb4ba883e9e1900c3028f3d4a676a614ae068f0847ce44,False,
-/System/Library/LaunchDaemons/com.apple.periodic-monthly.plist,com.apple.periodic-monthly,"['/usr/libexec/periodic-wrapper', 'monthly']",9223655f1ac125b9c2bb4ba883e9e1900c3028f3d4a676a614ae068f0847ce44,False,
-/System/Library/LaunchDaemons/com.apple.periodic-weekly.plist,com.apple.periodic-weekly,"['/usr/libexec/periodic-wrapper', 'weekly']",9223655f1ac125b9c2bb4ba883e9e1900c3028f3d4a676a614ae068f0847ce44,False,
-/System/Library/LaunchDaemons/com.apple.pfctl.plist,com.apple.pfctl,"['/sbin/pfctl']",a330d21f4e7f050d1aea6d4160394b7c03a0e237681027b47bdc4ef5de32c037,True,
-/System/Library/LaunchDaemons/com.apple.pfd.plist,com.apple.pfd,"['/usr/libexec/pfd', '-d']",7ae7717a0abc450d30dbd4616c09e19b13b1d8aca9a49e0a1cad1a6e07044e90,False,
-/System/Library/LaunchDaemons/com.apple.platform.ptmd.plist,com.apple.platform.ptmd,"['/usr/libexec/ptmd']",91a8847fd5d3ce96ce6875d431aba4e9cf669efd610d49f4bc3f39110b885572,True,
-/System/Library/LaunchDaemons/com.apple.powerd.plist,com.apple.powerd,"['/System/Library/CoreServices/powerd.bundle/powerd']",503461333d31f71cc0a061fd89a1400731e219af03df9ccad9052cc1b365f6ce,False,
-/System/Library/LaunchDaemons/com.apple.powerd.swd.plist,com.apple.powerd.swd,"['/System/Library/CoreServices/powerd.bundle/swd']",71f09b1627216a3ab616e757a60d8612853c22e6b2f0d1530c98b8cd9d4f18a5,False,
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.admintool.plist,com.apple.preferences.timezone.admintool,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/TimeZoneAdminTool']",633da31eacab5317839720ad92e9f7b02d8ad6c9e3c79b31de41fcc291cd44ae,False,
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.auto.plist,com.apple.preferences.timezone.auto,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/timezoned.app/Contents/MacOS/timezoned']",4913a1e15b44ef2a0e407d7a1e780367b141bd1300ab80f2a716e7000163c48e,False,
-/System/Library/LaunchDaemons/com.apple.printtool.daemon.plist,com.apple.printtool.daemon,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'daemon']",243cd1b7895f770292615f6384e5972c2d80ff1593e57621ece01a0c996b1c22,False,
-/System/Library/LaunchDaemons/com.apple.racoon.plist,com.apple.racoon,"['/usr/sbin/racoon', '-D']",073868a9fd93ea07b5f55ebaa6814b3c6e592f0b8d1c08b45cf529541c631113,False,
-/System/Library/LaunchDaemons/com.apple.RemoteDesktop.PrivilegeProxy.plist,com.apple.RemoteDesktop.PrivilegeProxy,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/VNCPrivilegeProxy']",58ade2c73b2eb1480e2532f1df23170895ec03c80744843a936a06e2f8bb8ab1,False,
-/System/Library/LaunchDaemons/com.apple.remotepairtool.plist,com.apple.RemotePairTool,"['/System/Library/CoreServices/RemotePairTool']",054b27191118cd4b48522e18de1f8b8b816ef10d73c776041cd24f8a931045e3,False,
-/System/Library/LaunchDaemons/com.apple.ReportCrash.Root.plist,com.apple.ReportCrash.Root,"['/System/Library/CoreServices/ReportCrash']",41edcb12813290dbd05b5dce02e772c01f2c2f149b66bc0c867bc8f42a402410,False,
-/System/Library/LaunchDaemons/com.apple.ReportPanicService.plist,com.apple.ReportPanicService,"['/System/Library/CoreServices/ReportPanicService']",6ac2c62a5ad79cface8b4f4458e4656e327a55cd341e58dd522e9852805e2e07,False,
-/System/Library/LaunchDaemons/com.apple.revisiond.plist,com.apple.revisiond,"['/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond']",fbf3c20a2ff691a592d3131c877a71bdbf63068e38655b0a22d0fc9e12cb2064,True,
-/System/Library/LaunchDaemons/com.apple.RFBEventHelper.plist,com.apple.RFBEventHelper,"['/System/Library/CoreServices/RFBEventHelper.bundle/Contents/MacOS/RFBEventHelperd']",7560caea18efb2c6b9119e5278a9b63d38833d9ba2da55cff7add4e1f8d85f17,False,
-/System/Library/LaunchDaemons/com.apple.rootless.init.plist,com.apple.rootless.init,"['/usr/libexec/rootless-init']",31cf85fa4a73f631a1903bf448c7f444364a1a66e194bc616b03b989f3120a42,False,
-/System/Library/LaunchDaemons/com.apple.rpcbind.plist,com.apple.rpcbind,"['/usr/sbin/rpcbind']",803243e6d80b6612613e8751272819f426681f952e870130d57d9c1330b46c06,False,
-/System/Library/LaunchDaemons/com.apple.sandboxd.plist,com.apple.sandboxd,"['/usr/libexec/sandboxd']",434eea3bf2e4fc9e135e778c67a34d9f421b07d01fc641ee3de7e7088dd45e1e,False,
-/System/Library/LaunchDaemons/com.apple.SCHelper.plist,com.apple.SCHelper,"['/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Helpers/SCHelper']",2a7d93627517a4bc0dccb48735f25587c02e1ab0325808cef21f2367880b657e,False,
-/System/Library/LaunchDaemons/com.apple.screensharing.plist,com.apple.screensharing,"['/System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/MacOS/screensharingd']",83563e826daecdc174862911cf4cef520993c78c7f60dbab6cf7f0bcc8c535bb,False,
-/System/Library/LaunchDaemons/com.apple.scsid.plist,com.apple.scsid,"['/usr/libexec/scsid']",8d949a6288a87173fd1bb0f60ddfba2a687e3236a533635b3e1f0e91f157dda0,True,
-/System/Library/LaunchDaemons/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",a31c423ec982340a5b15b735eef84e748da246b7425b697d038a1f5f29ca7e23,False,
-/System/Library/LaunchDaemons/com.apple.security.agent.login.plist,com.apple.security.agent.login,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent']",f8db70fc362763faab1f3a7f1bfa70c410244f3b2b4e86a55e0859ee0303c10a,False,
-/System/Library/LaunchDaemons/com.apple.security.authhost.plist,com.apple.security.authhost,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost']",fbffa52111b603a63e0e5e97db73471c9ce46ad47a7a73a0197e866095b37272,False,
-/System/Library/LaunchDaemons/com.apple.security.FDERecoveryAgent.plist,com.apple.security.FDERecoveryAgent,"['/usr/libexec/FDERecoveryAgent']",01ee2a5f5e14b6adf6f743059f4641961254f99ff5e13a97d29bd3465eab302e,True,
-/System/Library/LaunchDaemons/com.apple.security.syspolicy.plist,com.apple.security.syspolicy,"['/usr/libexec/syspolicyd']",26c7d90d879f0a0c337a70c8125cb00e460c19ae7a71c94081be46432960f8b6,False,
-/System/Library/LaunchDaemons/com.apple.securityd.plist,com.apple.securityd,"['/usr/sbin/securityd', '-i']",c37d85290537dd10facee5c39e348aa57ee8dafc3975cdcf0ded943b8144c13c,True,
-/System/Library/LaunchDaemons/com.apple.securityd_service.plist,com.apple.securityd_service,"['/usr/libexec/securityd_service']",aadd73a1ab9e07688f1a3c6175f659408360c27eceb0eea686005a5e5dbf75f0,False,
-/System/Library/LaunchDaemons/com.apple.sessionlogoutd.plist,com.apple.sessionlogoutd,"['/System/Library/CoreServices/sessionlogoutd']",b6ef2b6da7a986eec66b71d8d6d32b8260420c793434f0bd2c18e92b5f49aef7,False,
-/System/Library/LaunchDaemons/com.apple.smb.preferences.plist,com.apple.smb.preferences,"['/usr/libexec/smb-sync-preferences']",f33f3b292b79dbffb5dde568cb5d2a0f30018d7990466c34008ab53cd04e4aed,True,
-/System/Library/LaunchDaemons/com.apple.smbd.plist,com.apple.smbd,"['/usr/sbin/smbd']",bb37c43972926944130879f76ed1765556d2b36a2a2c96c5b516dae8b53dd254,False,
-/System/Library/LaunchDaemons/com.apple.softwareupdate_download_service.plist,com.apple.softwareupdate_download_service,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service']",477db02f3a71f4c004c89f8c657fd0f48b1da88bbc7c5b7e982b201184ee8199,False,
-/System/Library/LaunchDaemons/com.apple.softwareupdate_firstrun_tasks.plist,com.apple.softwareupdatecheck.initial,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_firstrun_tasks', '-BuildTagCache', 'YES']",e08d74112223633bb58d56e5ffea55e41d0a558e421b867567ff66da004b0938,True,
-/System/Library/LaunchDaemons/com.apple.softwareupdated.plist,com.apple.softwareupdated,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated']",1032b15bd2d192a4466e1988ada226f50baddf4e6234a5965007938d4af2649e,False,
-/System/Library/LaunchDaemons/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",7f32d7dede4838b2ebd3d0b5e903519378241fec16395acdf22c5520b9c84925,False,
-/System/Library/LaunchDaemons/com.apple.spindump.plist,com.apple.spindump,"['/usr/sbin/spindump']",493ba41a4930ac49aba43663812c926085e0f5a123ef8faba33b332cc78c144a,False,
-/System/Library/LaunchDaemons/com.apple.statd.notify.plist,com.apple.statd.notify,"['/usr/sbin/rpc.statd', '-n']",dba091d634be64a9de829c325663e6651c758fad05a0acc1ede05cc71e4dab1a,True,
-/System/Library/LaunchDaemons/com.apple.storagekitd.plist,com.apple.storagekitd,"['/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd']",30cf74c6d82fda719e421fca42ccc2d6893f1c56d537f8a077740f83a2cb0037,False,
-/System/Library/LaunchDaemons/com.apple.storeaccountd.daemon.plist,com.apple.storeaccountd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd', 'daemon']",0b4f8d38f3cf9752a1422f1c922c0c306c0448e03274ae8be17ca7827514c04c,False,
-/System/Library/LaunchDaemons/com.apple.storeagent.daemon.plist,com.apple.storeagent.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy', 'daemon']",da5c5c34b09127c07a3915b00517c737f66da6d3aadad2bd5dd04b949100c1af,False,
-/System/Library/LaunchDaemons/com.apple.storeassetd.daemon.plist,com.apple.storeassetd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd', 'daemon']",0018c00d6553533011b015987a509cb85b1bb0229f0dd4d4e57342e36ce2b39e,False,
-/System/Library/LaunchDaemons/com.apple.storedownloadd.daemon.plist,com.apple.storedownloadd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd', 'daemon']",f36336a0bac12f1896bb32f6256976189acf5244534dcc10255fd17b1f26ffcd,False,
-/System/Library/LaunchDaemons/com.apple.storereceiptinstaller.plist,com.apple.storereceiptinstaller,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/ReceiptInstaller']",b7fa2b41593721d816587954d72780c9b81cbf82e74356cd90cd26da8017acce,False,
-/System/Library/LaunchDaemons/com.apple.SubmitDiagInfo.plist,com.apple.SubmitDiagInfo,"['/System/Library/CoreServices/SubmitDiagInfo', 'server-init']",a972269ddbb2eeb86e947b6829fc274c2e614f936d8c67fe4d05e3cf33cbf932,False,
-/System/Library/LaunchDaemons/com.apple.suhelperd.plist,com.apple.suhelperd,"['/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd']",519ac796224f5bb7d0b5cb747afca0ac6c2edf425eddcfbce93d7011b0f5b4fa,False,
-/System/Library/LaunchDaemons/com.apple.symptomsd.plist,com.apple.symptomsd,"['/usr/libexec/symptomsd']",29af370574efe5534186ca36e568bd6ec07c3f3d6f73d533b606f43a849cd7dd,False,
-/System/Library/LaunchDaemons/com.apple.sysdiagnose.plist,com.apple.sysdiagnose,"['/usr/bin/sysdiagnose']",597ecd43f94c46ea39f0b888db3472ddf7814c7b2c98c7d4bf9ab6f0d63bf790,False,
-/System/Library/LaunchDaemons/com.apple.syslogd.plist,com.apple.syslogd,"['/usr/sbin/syslogd']",6aecd6234a41ee0f267862c1d73e45b3cdd8208187222cb38168d4915853bcc0,False,
-/System/Library/LaunchDaemons/com.apple.sysmond.plist,com.apple.sysmond,"['/usr/libexec/sysmond']",d2326cb783d325a481c0e0ea82ee5ccb7992785f6ac647794870e9a98e9bf7eb,False,
-/System/Library/LaunchDaemons/com.apple.system_installd.plist,com.apple.system_installd,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd']",1ce613f11ce2a54f7a79dd71b734cb2c2e4bff0edd8eef935989b9ecdf6b984c,False,
-/System/Library/LaunchDaemons/com.apple.systemkeychain.plist,com.apple.systemkeychain,"['/usr/sbin/systemkeychain', '-d']",fd1b0cf617d49de5a5dceb539c7bfcc072b1280d44ae19c88f716fbf417a7e0d,False,
-/System/Library/LaunchDaemons/com.apple.systempreferences.installer.plist,com.apple.systempreferences.install,"['/Applications/System Preferences.app/Contents/Resources/installAssistant']",a8b7c03f53db4a5adfd242eced60ddcaca62a061b10facad4c38372fccb12a6e,False,
-/System/Library/LaunchDaemons/com.apple.systemstats.analysis.plist,com.apple.systemstats.analysis,"['/usr/sbin/systemstats', '--xpc']",b0e45dbc3e76647be9df1ab9c21f3e96c8dcbbaefb64071a4948aeb2acc8c163,False,
-/System/Library/LaunchDaemons/com.apple.systemstats.daily.plist,com.apple.systemstats.daily,"['/usr/sbin/systemstats', '--daily']",b0e45dbc3e76647be9df1ab9c21f3e96c8dcbbaefb64071a4948aeb2acc8c163,False,
-/System/Library/LaunchDaemons/com.apple.systemstatsd.plist,com.apple.systemstatsd,"['/usr/libexec/systemstatsd']",3f52febab3f6ecde4175168ff6318e81037f7227d5ff8fb30b2261fcc2c4fdda,False,
-/System/Library/LaunchDaemons/com.apple.taskgated-helper.plist,com.apple.taskgated-helper,"['/usr/libexec/taskgated-helper']",347e6009b4a1779f95e5c03473a878283260237dcde25e4f54db2ec341ee1e13,False,
-/System/Library/LaunchDaemons/com.apple.taskgated.plist,com.apple.taskgated,"['/usr/libexec/taskgated', '-s']",9cbee07e9d624de487b8b6700b678eebd44162056c7f7f5a5bd9f7a815fb7402,False,
-/System/Library/LaunchDaemons/com.apple.tccd.system.plist,com.apple.tccd.system,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd', 'system']",3b76b97f21c0e1d1a29493f2c97760b526839c0ca872226548ed34d120a45eb6,False,
-/System/Library/LaunchDaemons/com.apple.thermald.plist,com.apple.thermald,"['/usr/libexec/thermald']",c1cfd842e69e2f34d0e9a2bb127953edda58e07de2c69780a4ed39ebf0143b97,False,
-/System/Library/LaunchDaemons/com.apple.TMCacheDelete.plist,com.apple.TMCacheDelete,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete']",4da4f3b1eb34c3859cfb0f60f1e66a6094d8f8687c5295fa7f05d63118d49eaf,False,
-/System/Library/LaunchDaemons/com.apple.trustd.plist,com.apple.trustd,"['/usr/libexec/trustd']",90d89a19c2d761d3752c63a41fe2fb0cd6e1f09ab3970ad38dcbe5605d6e00e4,False,
-/System/Library/LaunchDaemons/com.apple.TrustEvaluationAgent.system.plist,com.apple.TrustEvaluationAgent.system,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",9f2f2656365a6fa3bb08a91dfd1f3a567761a12e65baeb7c513b235a65a6cf72,False,
-/System/Library/LaunchDaemons/com.apple.ucupdate.plist,com.apple.ucupdate.plist,"['/usr/libexec/ucupdate', '-m', '/usr/share/ucupdate/microcode.dat']",90942773921d51181ebfc94026bda6fd0cf3300af42926c8a7b3742b44db4aa2,True,
-/System/Library/LaunchDaemons/com.apple.uninstalld.plist,com.apple.uninstalld,"['/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld']",a0c81020db45f32b0873cf83b18a9e1adef9378126c9f70ee8c591e9f9222a12,False,
-/System/Library/LaunchDaemons/com.apple.unmountassistant.sysagent.plist,com.apple.unmountassistant.sysagent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/Resources/UASysAgent']",a38db126dfc2f1827c97e57d9c8623c590ffed55e3523c886fa1bde600585180,False,
-/System/Library/LaunchDaemons/com.apple.updateEFIDesktopPicture.plist,com.apple.updateEFIDesktopPicture,"['/usr/sbin/kextcache', '-u', '/']",55f22a5ded28e1faa2545b977f9cc9a44f650c1d5b2b6f47e2ba8ee973f12be6,False,
-/System/Library/LaunchDaemons/com.apple.usbd.plist,com.apple.usbd,"['/usr/libexec/usbd']",838af1744b163755a32b0ce8d7c155367cd8834bdadb2203bdf7e8cfde148952,False,
-/System/Library/LaunchDaemons/com.apple.usbmuxd.plist,com.apple.usbmuxd,"['/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd', '-launchd']",0ae32ac3cca65bbaa112205164f536e95f77b0fb979b73e8e829a5257e88b5b1,True,
-/System/Library/LaunchDaemons/com.apple.UserEventAgent-System.plist,com.apple.UserEventAgent-System,"['/usr/libexec/UserEventAgent', '(System)']",3ef66f06d6a10a8de1ccd6630a6d18caf49ed467d62ea4d8b22005ff75bdccdf,False,
-/System/Library/LaunchDaemons/com.apple.UserNotificationCenter.plist,com.apple.UserNotificationCenter,"['/System/Library/CoreServices/uncd']",593f02197ed23ac8db1091e83d0c6cce3f75e244ff280b91fa3b1a366fcbb786,False,
-/System/Library/LaunchDaemons/com.apple.uucp.plist,com.apple.uucp,"['/usr/sbin/uucico', '-l', '-D']",1b2e5d7bbc04a74055898ee5e8a59f343685788dcba1757e07642bef8dfa7cf2,False,
-/System/Library/LaunchDaemons/com.apple.var-db-dslocal-backup.plist,com.apple.var-db-dslocal-backup,"['/usr/bin/xar', '-c', '-f', 'dslocal-backup.xar', 'dslocal']",1cd84998b33c048595ca68aa3e2a848c347447f366efa32956301f67f34be718,False,
-/System/Library/LaunchDaemons/com.apple.vsdbutil.plist,com.apple.vsdbutil,"['/usr/sbin/vsdbutil', '-i']",22983e6ab425b63a5dbbb522eeaba0abeb34f25cc87c586f154bca41fa0072b2,False,
-/System/Library/LaunchDaemons/com.apple.warmd.plist,com.apple.warmd,"['/usr/libexec/warmd']",1b1767b643c62ec99e9ff69edd0df12f288bfd9571e80317e52ebfe333f9777c,True,
-/System/Library/LaunchDaemons/com.apple.watchdogd.plist,com.apple.watchdogd,"['/usr/libexec/watchdogd']",33dfb02323bff9d38484c36d30ceca981d2aa0c9f2442264251c8a78f5a16a95,False,
-/System/Library/LaunchDaemons/com.apple.wdhelper.plist,com.apple.wdhelper,"['/usr/libexec/wdhelper']",ddff2adc475f55c47c641d77a2c5bd5cffb946270ece09c7affe3f01496476d5,True,
-/System/Library/LaunchDaemons/com.apple.wifid.plist,com.apple.wifid,"['/usr/libexec/wifid']",423e802478c458494ab46adf736dc9e226ecd29ff9bb406145a2d8c57dc83fa4,False,
-/System/Library/LaunchDaemons/com.apple.WindowServer.plist,com.apple.WindowServer,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/CoreGraphics.framework/Resources/WindowServer', '-daemon']",8e14b909a342459c5a9b5df05f8bf921ef5312fdbb6fe0e1825a15293713cc32,False,
-/System/Library/LaunchDaemons/com.apple.wirelessproxd.plist,com.apple.wirelessproxd,"['/usr/sbin/wirelessproxd']",ffaee618da90b99eab91612feb95faa70af79eb68d27a5984393ef47121dfaf6,False,
-/System/Library/LaunchDaemons/com.apple.WirelessRadioManagerd-osx.plist,com.apple.WirelessRadioManagerd-osx,"['/usr/sbin/WirelessRadioManagerd']",3062cfa7e8f6a3c04f919122e7e371c468eba51f9a2b8fd11e4e906fb50a277e,False,
-/System/Library/LaunchDaemons/com.apple.wwand.plist,com.apple.wwand,"['/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport.kext/Contents/Resources/wwand']",b779d9a603cdc90597968a0eb7b50f201fcc6ef5537fac4a973533fe88339503,False,
-/System/Library/LaunchDaemons/com.apple.xpc.smd.plist,com.apple.xpc.smd,"['/usr/libexec/smd']",fc1b22d1a80dd8396b635df1236aa1851e940a4b8f9bf4baf0dfd094459fdbc0,False,
-/System/Library/LaunchDaemons/com.apple.xpc.uscwoap.plist,com.apple.xpc.uscwoap,"['/bin/bash']",8e144f5dc41946ee1ae8b60e5861190b215e1ad923dddb368392658c09f9e42d,False,
-/System/Library/LaunchDaemons/com.apple.xsan.plist,com.apple.xsan,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsand']",3fbddbf5f158849fbd4a8138e2188805abbbb5539398fcb5188b6f905115b217,False,
-/System/Library/LaunchDaemons/com.apple.xsandaily.plist,com.apple.xsandaily,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsandaily']",5f729b885df7f40138d6e913144550a99a8e85eb8cc2c58ae372afcfe15e04f9,False,
-/System/Library/LaunchDaemons/com.apple.xscertadmin.plist,com.apple.xscertadmin,"['/usr/sbin/xscertadmin', 'update']",a5e496625c4bcf000d1ba4d8520a8d0193cc4e169f9cbe5fce95e5339f307553,False,
-/System/Library/LaunchDaemons/com.apple.xscertd-helper.plist,com.apple.xscertd-helper,"['/usr/libexec/xscertd-helper']",a676c4c2a1e3d62124a9d81821a650d5cccac395d9a8c768eac3a6d162e4ca29,False,
-/System/Library/LaunchDaemons/com.apple.xscertd.plist,com.apple.xscertd,"['/usr/libexec/xscertd']",4f196292fe0d48c11df4fd233e84e54ef4b34b3da893f9e25507a7d39401b720,False,
-/System/Library/LaunchDaemons/com.vix.cron.plist,com.vix.cron,"['/usr/sbin/cron']",e82c6b8abd80b664fe1ca930e0b7e89f101e0dd23138ca2a1bf9bab0d7513f54,False,
-/System/Library/LaunchDaemons/exec.plist,com.apple.rexecd,"['/usr/libexec/rexecd']",0f97680bc8ea35e35b71b4ae25d7f52c4764300a87f5e18fa85f394083a2f25d,False,
-/System/Library/LaunchDaemons/finger.plist,com.apple.fingerd,"['/usr/libexec/fingerd', '-s']",e31de7a64e7c8c22ecf9237e77444e504e91cbb912413cd573aa28a5a53ab8dc,False,
-/System/Library/LaunchDaemons/ftp.plist,com.apple.ftpd,"['/usr/libexec/ftpd']",e27bb72c9848ba9ffec0df9f0280606d3d90e476522f6b55bcc1d24e0152de5f,False,
-/System/Library/LaunchDaemons/login.plist,com.apple.rlogind,"['/usr/libexec/rlogind']",8607d0fe83e477d902984be875e105319745bd15845b5dd818161b34616fd66d,False,
-/System/Library/LaunchDaemons/ntalk.plist,com.apple.ntalkd,"['/usr/libexec/ntalkd']",e66746d2cadc706c9cda8fa2e21ef4506081572119f034e5f9ecd51c62735ed4,False,
-/System/Library/LaunchDaemons/org.apache.httpd.plist,org.apache.httpd,"['/usr/sbin/httpd-wrapper', '-D', 'FOREGROUND']",c79a53bc3347ad16ca7e86753eb64733569e7e7d65fc1daeac2a41922f1dfa09,False,
-/System/Library/LaunchDaemons/org.cups.cups-lpd.plist,org.cups.cups-lpd,"['/usr/libexec/cups/daemon/cups-lpd', '-o', 'document-format=application/octet-stream']",cdf72bfe77a8d7cb4332007256de785cbf63f9d00100e30b0e34e7e82e2cb93b,False,
-/System/Library/LaunchDaemons/org.cups.cupsd.plist,org.cups.cupsd,"['/usr/sbin/cupsd', '-l']",54a63def25e18eba9771367b4c682954e0a91b5d3d91fb660618bcb567e0075c,False,
-/System/Library/LaunchDaemons/org.net-snmp.snmpd.plist,org.net-snmp.snmpd,"['/usr/sbin/snmpd']",48e7e796bfad1ff6ab945bc08140e2a115699db9beffd2bff867484990c7b18c,False,
-/System/Library/LaunchDaemons/org.ntp.ntpd.plist,org.ntp.ntpd,"['/usr/libexec/ntpd-wrapper']",20064c70f48c140d8e6f2ba4f50f518ca56c22388828160ad3148f958e6fdbbd,False,
-/System/Library/LaunchDaemons/org.openldap.slapd.plist,org.openldap.slapd,"['/usr/libexec/slapd']",dc93647ec1ca8e237e4e0f282b727a3425d7998d815ada30522c2f3680aff58d,False,
-/System/Library/LaunchDaemons/org.postfix.master.plist,org.postfix.master,"['/usr/libexec/postfix/master']",c0a67a90cbda8e219406c8bb944c2cc247201586c79a826f7e33fd0e7a2e4360,False,
-/System/Library/LaunchDaemons/org.postfix.newaliases.plist,org.postfix.newaliases,"['/usr/libexec/postfix/check-aliases.sh']",85836505e7beee66772dc51df302e9c2eefcfe3f2349681a43fb3c0a1c51ad74,True,
-/System/Library/LaunchDaemons/shell.plist,com.apple.rshd,"['/usr/libexec/rshd']",0098fad53fd7a856e8138e488ab100f2f59c2af4382346a0dbf656786e8bfec6,False,
-/System/Library/LaunchDaemons/ssh.plist,com.openssh.sshd,"['/usr/libexec/sshd-keygen-wrapper']",7be93674eea1e11e1c3c9b83a436181bcfcee262977e74e6612c3aa59ce52fa5,False,
-/System/Library/LaunchDaemons/telnet.plist,com.apple.telnetd,"['/usr/libexec/telnetd']",e7a272aff55f96e3ed83f369cebcc9751e74148e09d4750c2d84c883c85c18a6,False,
-/System/Library/LaunchDaemons/tftp.plist,com.apple.tftpd,"['/usr/libexec/tftpd', '-i', '/private/tftpboot']",f44cc9d3dac43f8eefbc8aa2df9d30ba690fa325e95c7295416b0ce78595076a,False,
-/System/Library/LaunchAgents/com.apple.accountsd.plist,com.apple.accountsd,"['/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd']",9eaa7d6ab54ffe3ed635a99b34cb3751c0d3874e66af491d34a5dce527d9e9b1,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.abd.plist,com.apple.AddressBook.abd,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookManager.app/Contents/MacOS/AddressBookManager']",9b66f5d52dca22e8a0669e611289512916f7763ce841552776ffdff8ea7aba51,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.AssistantService.plist,com.apple.AddressBook.AssistantService,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/ABAssistantService.app/Contents/MacOS/ABAssistantService']",a746d808ac34b4afb8e5a14fd3ab29e77850b37f67b13e83993bf9d7a6dffca3,False,
-/System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist,com.apple.AddressBook.SourceSync,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookSourceSync.app/Contents/MacOS/AddressBookSourceSync']",1f4fb0c8784407d90d163f22d5a8a700dec8330f9133b68d0356e9c0c556cfbd,False,
-/System/Library/LaunchAgents/com.apple.AirPlayUIAgent.plist,com.apple.AirPlayUIAgent,"['/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent', '--launchd']",adcea449fcd97fee5bb943128bf18c6f4d2c6bd7aa01e17f0bb08a7d43dc45c5,True,
-/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist,com.apple.AirPortBaseStationAgent,"['/System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent', '--launchd']",e87536f54d489913f5c871a72dc8f59489fc087311b486b4084643ed4f552f0c,False,
-/System/Library/LaunchAgents/com.apple.akd.plist,com.apple.akd,"['/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd']",ebe9a30b733eba1ac21dfdcd6aaa171552fcbdf8cec766ab92599e4d28ad01e9,False,
-/System/Library/LaunchAgents/com.apple.alf.useragent.plist,com.apple.alf.useragent,"['/usr/libexec/ApplicationFirewall/Firewall']",248f51a0c9cd3a99ab1dc90ee82056151ca7ab7cc6e878805b24571e76c50385,False,
-/System/Library/LaunchAgents/com.apple.aos.migrate.plist,com.apple.aos.migrate,"['/System/Library/CoreServices/AOSMigrateAgent']",304ee3120fae53b27361d05321ccbd71ffe8e8c1bf1688c5a08f4be7815a7a50,False,
-/System/Library/LaunchAgents/com.apple.AOSHeartbeat.plist,com.apple.AOSHeartbeat,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSHeartbeat.app/Contents/MacOS/AOSHeartbeat']",1f2cd45683f52dd58c6de7a0ed1b4d1b9901e7fb915a4a9798420e9ea8258406,True,
-/System/Library/LaunchAgents/com.apple.AOSPushRelay.plist,com.apple.AOSPushRelay,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSPushRelay.app/Contents/MacOS/AOSPushRelay']",cf333af6239bde03ab7d5572b44d21edf6fab4c36dc67c26aa03a48073cb0d8d,False,
-/System/Library/LaunchAgents/com.apple.AppleGraphicsWarning.plist,com.apple.AppleGraphicsWarning,"['/System/Library/CoreServices/AppleGraphicsWarning.app/Contents/MacOS/AppleGraphicsWarning']",42ad645be85bbbff2dc4571ebd32592b4b24279eaef0395826c7030fbb89673f,False,
-/System/Library/LaunchAgents/com.apple.appleseed.seedusaged.plist,com.apple.appleseed.seedusaged,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged']",06410330cbcd05f0d15db7a6622ba62332060dc602000391ead1183d7a81660d,True,
-/System/Library/LaunchAgents/com.apple.appsleepd.plist,com.apple.appsleep,"['/usr/sbin/appsleepd']",d21696515729c326124a9c48ab0a6f5a3edc75ffa82a6fc83bfbbeac461e2573,False,
-/System/Library/LaunchAgents/com.apple.appstoreupdateagent.plist,com.apple.appstoreupdateagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/appstoreupdateagent']",a08102f2165392ab9884bf571bf70d7a606ef4dd49afbdec5a9aa0d4811703bd,False,
-/System/Library/LaunchAgents/com.apple.apsctl.plist,com.apple.apsctl,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsctl', 'login']",e67b8ddcdcbb4893f147eea48c714898088c37802b057d9084a487cd587d163f,True,
-/System/Library/LaunchAgents/com.apple.askpermissiond.plist,com.apple.askpermissiond,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond']",a2d13ed478425a07286b01dd102f6b49170d57d7fdf9f209088bf486f5a24240,True,
-/System/Library/LaunchAgents/com.apple.AskPermissionUI.plist,com.apple.AskPermissionUI,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/AskPermissionUI.app/Contents/MacOS/AskPermissionUI']",c7255737db5a419eb275ff1fb36082be81640fcb43b8a424a5d1b6510476eeb4,False,
-/System/Library/LaunchAgents/com.apple.AssetCacheLocatorService.plist,com.apple.AssetCacheLocatorService,"['/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/Contents/MacOS/AssetCacheLocatorService', '-a']",9fc8f8803aef72446b8e88d3451351e572d8e0f26f0fa8ede7632721c6b50b91,False,
-/System/Library/LaunchAgents/com.apple.assistant_service.plist,com.apple.assistant_service,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistant_service']",6f33260615963c8067fcacfd2f421f806e11c87042a134e53d89abeb859733e0,False,
-/System/Library/LaunchAgents/com.apple.assistantd.plist,com.apple.assistantd,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd']",3361b8a1c6f426a691a54241735df2f9de1d2e819a8cec55620f3db77f3b8e26,False,
-/System/Library/LaunchAgents/com.apple.AssistiveControl.plist,com.apple.AssistiveControl,"['/System/Library/Input Methods/Switch Control.app/Contents/MacOS/Switch Control', 'launchd', '-s']",b394fe8f77ed3cbb1a2326ca20395d5d758774a73d9b4cb531d2288ffd0963a7,False,
-/System/Library/LaunchAgents/com.apple.BezelUI.plist,com.apple.BezelUIServer,"['/System/Library/LoginPlugins/BezelServices.loginPlugin/Contents/Resources/BezelUI/BezelUIServer']",c3643e01c318a4f600ab78cde62682a11977b1d58326e9161b54cfeffa19b735,False,
-/System/Library/LaunchAgents/com.apple.bird.plist,com.apple.bird,"['/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird']",188a738b273968bbf8628e562a317a3e7ec05d0a0067de40a233bce90c3def1e,False,
-/System/Library/LaunchAgents/com.apple.bluetoothUIServer.plist,com.apple.bluetoothUIServer,"['/System/Library/CoreServices/BluetoothUIServer.app/Contents/MacOS/BluetoothUIServer']",169f0f8b6be6d34ebf4e97552ac5e1a7ee90fac20ab62e6e8a742505d5b2163f,False,
-/System/Library/LaunchAgents/com.apple.btsa.plist,com.apple.btsa,"['/System/Library/CoreServices/Bluetooth Setup Assistant.app/Contents/MacOS/Bluetooth Setup Assistant', '-autoConfigure']",641c8eabcaa958a289a6226157d16e9422fe4e7b66f5cf2fa852a7d3403cf84a,False,
-/System/Library/LaunchAgents/com.apple.CalendarAgent.plist,com.apple.CalendarAgent,"['/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent']",8ade870942636edcb9dd6eb9e8e38b1c4c4f0e93f6d1f226f133511425dc6f00,True,
-/System/Library/LaunchAgents/com.apple.CallHistoryPluginHelper.plist,com.apple.CallHistoryPluginHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper']",9318f99d48487f7d1d8d8bbf265e14ebeac9eb95ee4a3d8e8bda4911adeb4f93,False,
-/System/Library/LaunchAgents/com.apple.CallHistorySyncHelper.plist,com.apple.CallHistorySyncHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper']",06e28555fd55f4afb4e3dcf9e3f40a7e10cc250af23d6b43a20ced1821b43b3c,False,
-/System/Library/LaunchAgents/com.apple.cdpd.plist,com.apple.cdpd,"['/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd']",9fd2665321b76e8cd5a63fa0eec474bf036d873a192f59009121e3a594ad0149,False,
-/System/Library/LaunchAgents/com.apple.cfnetwork.AuthBrokerAgent.plist,com.apple.cfnetwork.AuthBrokerAgent,"['/System/Library/CoreServices/AuthBrokerAgent']",93cfc6b591597dc13d886b8e847b931a75593dc77c180a7f232952fda28b42bb,False,
-/System/Library/LaunchAgents/com.apple.cfnetwork.cfnetworkagent.plist,com.apple.cfnetwork.cfnetworkagent,"['/System/Library/CoreServices/CFNetworkAgent']",b9b8f4381896f42dedb8e4a82a0c0f8efbdd1fb30849895eeda3401a5bdc3a72,False,
-/System/Library/LaunchAgents/com.apple.cfprefsd.xpc.agent.plist,com.apple.cfprefsd.xpc.agent,"['/usr/sbin/cfprefsd', 'agent']",a61315c2cf11733e6a511a0fdb0ffd239e402b0d00cc6a9e408a458d32e447c2,False,
-/System/Library/LaunchAgents/com.apple.cloudd.plist,com.apple.cloudd,"['/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd']",e6af1328085c70601546483261ed5ae35099543cef74a19b3a862490ecffeea6,False,
-/System/Library/LaunchAgents/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",591cd2e0c50ab5dd84d2225eb80928c9717c523a0f2c98289b72639bec31a5ea,False,
-/System/Library/LaunchAgents/com.apple.cloudpaird.plist,com.apple.cloudpaird,"['/System/Library/CoreServices/cloudpaird']",21a849f7f1fdfe2ce7d07bd582087351ff7c2b2f227135f4f633d12db5d18d90,False,
-/System/Library/LaunchAgents/com.apple.cloudphotosd.plist,com.apple.cloudphotosd,"['/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd']",155af97356db0ad3f239579988144cd6332089302dfd46d76c566ebdc7d0b175,False,
-/System/Library/LaunchAgents/com.apple.cmfsyncagent.plist,com.apple.cmfsyncagent,"['/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent.app/Contents/MacOS/CMFSyncAgent']",5499a07213884e79a7fb59d4d6a6d3e0aa2f0135978cfa614a9398d8de120d04,False,
-/System/Library/LaunchAgents/com.apple.CommCenter-osx.plist,com.apple.CommCenter,"['/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter']",28fe93931b1bb3f869762e5a74aeb97b5b969ca8de243ca5b616eb6b76cfa1a3,False,
-/System/Library/LaunchAgents/com.apple.ContainerRepairAgent.plist,com.apple.ContainerRepairAgent,"['/usr/libexec/AppSandbox/ContainerRepairAgent']",a207fc30476ad0b8cf4429f6a8e0a0234866591e95257921f3e14f69d639c55c,False,
-/System/Library/LaunchAgents/com.apple.CoreAuthentication.daemon.plist,com.apple.CoreAuthentication.daemon,"['/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd']",cd2a25d00bc79188a8529a9c0a3ecae0c3c3668cea5ef3bc2041c1e270b43364,False,
-/System/Library/LaunchAgents/com.apple.coredata.externalrecordswriter.plist,com.apple.coredata.externalrecordswriter,"['/System/Library/Frameworks/CoreData.framework/Versions/A/Resources/ExternalRecordsWriter']",4697a4e5237275e37bd942a8a9fb5f141052ef4116dafe6faf581efec01849f6,False,
-/System/Library/LaunchAgents/com.apple.CoreLocationAgent.plist,com.apple.CoreLocationAgent,"['/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent']",a6b53997560f638d025394f0f4fb451ab5495538812bef52b1832c93e0d1fa1b,False,
-/System/Library/LaunchAgents/com.apple.CoreRAIDAgent.plist,com.apple.CoreRAIDAgent,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Versions/A/Resources/CoreRAIDAgent']",601c112a3398e0c3a5ed4f2ed7770f9a70b63e3aca51a9bd9b25e3fb42fdb59d,False,
-/System/Library/LaunchAgents/com.apple.coreservices.appleid.authentication.plist,com.apple.coreservices.appleid.authentication,"['/System/Library/CoreServices/AppleIDAuthAgent']",6dc9534c6040b6a73a0e0291bd1061e87353163866cbf100df04c94fd5f60f09,True,
-/System/Library/LaunchAgents/com.apple.coreservices.lsactivity.plist,com.apple.coreservices.useractivityd,"['/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd']",774015953e9a6e2f62732880e86dd1620b89f8d9e069349d02ebd03a0582c8c7,False,
-/System/Library/LaunchAgents/com.apple.coreservices.sharedfilelistd.plist,com.apple.coreservices.sharedfilelistd,"['/System/Library/CoreServices/sharedfilelistd']",f97eb14ce64afc014edb83bd0d24f1fa26bce7ae5613a8175e723b500fe3af09,False,
-/System/Library/LaunchAgents/com.apple.coreservices.uiagent.plist,com.apple.coreservices.uiagent,"['/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServicesUIAgent']",540acf607aabc99deda8f0527fbbabc7632a27f171d22da9a791673f2fbbdc72,False,
-/System/Library/LaunchAgents/com.apple.csuseragent.plist,com.apple.csuseragent,"['/System/Library/CoreServices/CSUserAgent']",362171c4269096c1b9cb8825f2e973f2fe2e7fc4a3cb18884da781fae162bf61,False,
-/System/Library/LaunchAgents/com.apple.ctkd.plist,com.apple.ctkd,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkd', '-tw']",1eefefb7ebb56ce8f642eda690b261aa09fa9c2b1286ea2a4962cd7fd9f16956,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_i386.plist,com.apple.cvmsCompAgent3600_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '4']",57744b2d25b61cf98210389e59d07cd034f39876ebb6dd701d54670fd761e803,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_i386_1.plist,com.apple.cvmsCompAgent3600_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '5']",57744b2d25b61cf98210389e59d07cd034f39876ebb6dd701d54670fd761e803,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_x86_64.plist,com.apple.cvmsCompAgent3600_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '4']",57744b2d25b61cf98210389e59d07cd034f39876ebb6dd701d54670fd761e803,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_x86_64_1.plist,com.apple.cvmsCompAgent3600_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '5']",57744b2d25b61cf98210389e59d07cd034f39876ebb6dd701d54670fd761e803,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386.plist,com.apple.cvmsCompAgent_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",50c53d37aaf2f6222842ab231d5e54e2c4e90fd163e2bab0bc053f32aa410c7d,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386_1.plist,com.apple.cvmsCompAgent_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",50c53d37aaf2f6222842ab231d5e54e2c4e90fd163e2bab0bc053f32aa410c7d,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64.plist,com.apple.cvmsCompAgent_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",50c53d37aaf2f6222842ab231d5e54e2c4e90fd163e2bab0bc053f32aa410c7d,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64_1.plist,com.apple.cvmsCompAgent_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",50c53d37aaf2f6222842ab231d5e54e2c4e90fd163e2bab0bc053f32aa410c7d,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386.plist,com.apple.cvmsCompAgentLegacy_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",8be3552a6fd4ee83993b0cb30d3f9431fcbbd89a1c348247ff6584b84741ec55,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386_1.plist,com.apple.cvmsCompAgentLegacy_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",8be3552a6fd4ee83993b0cb30d3f9431fcbbd89a1c348247ff6584b84741ec55,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64.plist,com.apple.cvmsCompAgentLegacy_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",8be3552a6fd4ee83993b0cb30d3f9431fcbbd89a1c348247ff6584b84741ec55,False,
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64_1.plist,com.apple.cvmsCompAgentLegacy_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",8be3552a6fd4ee83993b0cb30d3f9431fcbbd89a1c348247ff6584b84741ec55,False,
-/System/Library/LaunchAgents/com.apple.DiagnosticReportCleanup.plist,com.apple.DiagnosticReportCleanup.plist,"['/System/Library/CoreServices/SubmitDiagInfo', 'cleanup']",a972269ddbb2eeb86e947b6829fc274c2e614f936d8c67fe4d05e3cf33cbf932,False,
-/System/Library/LaunchAgents/com.apple.diagnostics_agent.plist,com.apple.diagnostics_agent,"['/System/Library/CoreServices/diagnostics_agent']",8d00a160fbe0368271233dc626d7cf2ccaf0b8fba87c4d95eee6f1e3e91187a5,True,
-/System/Library/LaunchAgents/com.apple.DictationIM.plist,com.apple.DictationIM,"['/System/Library/Input Methods/DictationIM.app/Contents/MacOS/DictationIM']",1209a520a47949a7f925cd641aaf1ca6ecded539c2fba926fcc52eeb7e7fb7e1,False,
-/System/Library/LaunchAgents/com.apple.DiskArbitrationAgent.plist,com.apple.DiskArbitrationAgent,"['/System/Library/Frameworks/DiskArbitration.framework/Versions/A/Support/DiskArbitrationAgent']",04af3a3fe5fa7e746787855aa157111b597001fe34a0eb6bfdb40dec15bc53fd,False,
-/System/Library/LaunchAgents/com.apple.distnoted.xpc.agent.plist,com.apple.distnoted.xpc.agent,"['/usr/sbin/distnoted', 'agent']",cd4d8ac051c418b02bd98e36191638e5733f17521e23594bed2e579a24b3b77e,False,
-/System/Library/LaunchAgents/com.apple.Dock.plist,com.apple.Dock.agent,"['/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock']",f5e2a54a002fde9936addb0558331db4db13aebfaffbf30b7fa8cdd68808c205,False,
-/System/Library/LaunchAgents/com.apple.dt.CommandLineTools.installondemand.plist,com.apple.dt.CommandLineTools.installondemand,"['/System/Library/CoreServices/Install Command Line Developer Tools.app/Contents/MacOS/Install Command Line Developer Tools']",535627b8d7d0706f97806e19547394020406a7d601b962ea33be2f6c58d62420,False,
-/System/Library/LaunchAgents/com.apple.EscrowSecurityAlert.plist,com.apple.EscrowSecurityAlert,"['/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert']",43ef5afec6e96ee32b6956d68459a3dad00fdb89fc0a5ee2ea785ec5514a85e0,False,
-/System/Library/LaunchAgents/com.apple.familycircled.plist,com.apple.familycircled,"['/System/Library/PrivateFrameworks/FamilyCircle.framework/Versions/A/Resources/familycircled']",b295dbbf04b79d142cfcf23b279a1a98e9c50e93261d68bbf18af9382d665773,False,
-/System/Library/LaunchAgents/com.apple.familycontrols.useragent.plist,com.apple.familycontrols.useragent,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/ParentalControls.app/Contents/MacOS/ParentalControls']",739b9a0c0f9be69eda1798d656f892f436c6e2523fbc2dbccf327eea36eba205,False,
-/System/Library/LaunchAgents/com.apple.familynotificationd.plist,com.apple.familynotificationd,"['/System/Library/PrivateFrameworks/FamilyNotification.framework/Versions/A/Resources/Family.app/Contents/MacOS/Family']",0ed93717dd93c19accc8a0cd68ad2526b40568d6af2992623fa9ab93b23676f6,False,
-/System/Library/LaunchAgents/com.apple.FileStatsAgent.plist,com.apple.FileStatsAgent,"['/usr/sbin/FileStatsAgent']",2652430cd2be197371b8d459b6c5f30b9918bb986f241e296c0952812610b43b,False,
-/System/Library/LaunchAgents/com.apple.FileSyncAgent.PHD.plist,com.apple.FileSyncAgent.PHD,"['/System/Library/CoreServices/FileSyncAgent.app/Contents/MacOS/FileSyncAgent', '-launchedByLaunchd', '-PHDPlist']",5bd5eae425245c882549a777b3b6d9fd9c5a1d1f9058e588fa2842f27ff30971,False,
-/System/Library/LaunchAgents/com.apple.FilesystemUI.plist,com.apple.FilesystemUI,"['/System/Library/CoreServices/KernelEventAgent.bundle/Contents/Resources/FileSystemUIAgent.app/Contents/MacOS/FileSystemUIAgent']",11478b629bcd9652aa96bb987076f9dc8cb165b997c850820ef591d53338b2b0,False,
-/System/Library/LaunchAgents/com.apple.Finder.plist,com.apple.Finder,"['/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder']",3484edc08424a780d3b62b73c235c07dd7825d7a56f989c9ebe736d9cee4def6,False,
-/System/Library/LaunchAgents/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",dfab96f82fd0b7c27876f6ef598f83fc8cacc252821712618c7841c9c7fe468f,False,
-/System/Library/LaunchAgents/com.apple.FolderActionsDispatcher.plist,com.apple.FolderActionsDispatcher,"['/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher']",fb6407d3c347a7b1e9c2a54a46f77a93b476fbf7b0a032ba02307cc9aec180c2,True,
-/System/Library/LaunchAgents/com.apple.followupd.plist,com.apple.followupd,"['/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd']",53ac3b46f21b17f293bb81411b7d1b47d59774eca891620a44fbdff160b0655a,False,
-/System/Library/LaunchAgents/com.apple.FollowUpUI.plist,com.apple.FollowUpUI,"['/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Resources/FollowUpUI.app/Contents/MacOS/FollowUpUI']",0a4ab08882ef0b85262060b253a855c139fac76152ca8f858b4cdf6e23a3b20f,False,
-/System/Library/LaunchAgents/com.apple.fontd.useragent.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",ad981c152635554225f9de818e4bad5aa563fc0cec4ee78193e3c99a7c225bc9,False,
-/System/Library/LaunchAgents/com.apple.FontRegistryUIAgent.plist,com.apple.FontRegistryUIAgent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/FontRegistryUIAgent.app/Contents/MacOS/FontRegistryUIAgent']",a4d43da3350bafede3ad05d6deabf7f9de871683b4f117d3237e50aedd5e1e28,False,
-/System/Library/LaunchAgents/com.apple.FontValidator.plist,com.apple.ATS.FontValidator,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidator']",025f88e8420e8e9c6e5ac91cdbf0d2073545ff67f37bce6853dfc51ce0b4bcaa,False,
-/System/Library/LaunchAgents/com.apple.FontValidatorConduit.plist,com.apple.ATS.FontValidatorConduit,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidatorConduit']",f1ab77b9310d544e356e5f6cf22973463fd5a56356d7a167111605452bfb27d7,False,
-/System/Library/LaunchAgents/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",efa01df0e9fb04d45f32142447a1f68f6b53e58a47ba0998f468180fc809ad5e,False,
-/System/Library/LaunchAgents/com.apple.gamed.plist,com.apple.gamed,"['/System/Library/PrivateFrameworks/GameCenterFoundation.framework/Versions/A/gamed']",5aa596fa5a7b2fd18df6ba295f7abd7ffd55ba21c697d126d4eebf4af659dfd0,False,
-/System/Library/LaunchAgents/com.apple.helpd.plist,com.apple.helpd,"['/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/helpd']",26e68c7b0eef29fa7e31be818d967790e2aefe047437e2c08139c568425e9ef2,True,
-/System/Library/LaunchAgents/com.apple.icdd.plist,com.apple.icdd,"['/System/Library/Image Capture/Support/icdd']",bbd1c77a1e8d8fb2308e34c1397ee5c8809cbd63636074526a4f989f3d039175,False,
-/System/Library/LaunchAgents/com.apple.icloud.findmydeviced.findmydevice-user-agent.plist,com.apple.icloud.findmydeviced.findmydevice-user-agent,"['/usr/libexec/findmydevice-user-agent']",8658d7cf7bc13e52a90834196e54f63fe8116fe814df663f618d2492950a413c,False,
-/System/Library/LaunchAgents/com.apple.icloud.fmfd.plist,com.apple.icloud.fmfd,"['/usr/libexec/fmfd']",34b2a3bf6e684f92fb0a3ca2540c974aed437f70e952d6628ce51fb27017e8a4,False,
-/System/Library/LaunchAgents/com.apple.iCloudUserNotifications.plist,com.apple.iCloudUserNotificationsd,"['/System/Library/PrivateFrameworks/AOSAccounts.framework/Versions/A/Resources/iCloudUserNotificationsd.app/Contents/MacOS/iCloudUserNotificationsd']",1f68daeaef20aa648466f1568978ff0e0cfb5d2bf21b985aa84ad741c39b40f3,False,
-/System/Library/LaunchAgents/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",3d34e9c0ae870a64ab4c125f390c8cb06319a5ab32892cedc9e989e9c1a88e7e,True,
-/System/Library/LaunchAgents/com.apple.identityservicesd.plist,com.apple.identityservicesd,"['/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd']",7b9d9a7dcbe7791254bbb4bf55f82d9ce83fc5231d94756c17333ca6d1e7f21d,False,
-/System/Library/LaunchAgents/com.apple.idsremoteurlconnectionagent.plist,com.apple.idsfoundation.IDSRemoteURLConnectionAgent,"['/System/Library/PrivateFrameworks/IDSFoundation.framework/IDSRemoteURLConnectionAgent.app/Contents/MacOS/IDSRemoteURLConnectionAgent']",e37f16a36ee84cfc3533fb7917b4fa67411af6cb7bdbb65c7c1be8be3c87f1ff,False,
-/System/Library/LaunchAgents/com.apple.imagent.plist,com.apple.imagent,"['/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent']",ffc8f3f6f4b655a5a0cce87296159b259a00dac88277bb7c5970bad9108d07cf,False,
-/System/Library/LaunchAgents/com.apple.imavagent.plist,com.apple.imavagent,"['/System/Library/PrivateFrameworks/IMAVCore.framework/imavagent.app/Contents/MacOS/imavagent']",4bf2d5074b74ed9ec596b021abe207717cbbc05bf5342e32fcfb935f5085198c,False,
-/System/Library/LaunchAgents/com.apple.imklaunchagent.plist,com.apple.imklaunchagent,"['/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent']",de451e44bf8a7d3fa3d1f5053f05bdfa61c847ad4df300c8409a5d098222e543,False,
-/System/Library/LaunchAgents/com.apple.IMLoggingAgent.plist,com.apple.IMLoggingAgent,"['/System/Library/PrivateFrameworks/IMFoundation.framework/IMLoggingAgent']",ce1ba7447b44a2ee413a4f0058c91ba6d645f1ba3c4b2b15aa328384486ca094,False,
-/System/Library/LaunchAgents/com.apple.imtransferagent.plist,com.apple.imcore.imtransferagent,"['/System/Library/PrivateFrameworks/IMTransferServices.framework/IMTransferAgent.app/Contents/MacOS/IMTransferAgent']",6e2882198770d875fed670dbf232ce7728bd224a658fb742478a434c873be88d,False,
-/System/Library/LaunchAgents/com.apple.installandsetup.migrationhelper.user.plist,com.apple.installandsetup.migrationhelper.user,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/migrationhelper']",bbe23ad345c6bcebfe3f8137dcff3115dcdf4be4348881db4378a47886eee879,False,
-/System/Library/LaunchAgents/com.apple.installd.user.plist,com.apple.installd.user,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",2f77472bb65211af39ce134b58e658d20d3c6be47f2e7c58b4379dbfd5afdc84,False,
-/System/Library/LaunchAgents/com.apple.isst.plist,com.apple.isst,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/isst']",f3c99243e9cdc68a5c6a38edc218e7e4e25d03cef5c03d83d67e67a68f4886ef,True,
-/System/Library/LaunchAgents/com.apple.java.InstallOnDemand.plist,com.apple.java.InstallOnDemand,"['/System/Library/Java/Support/CoreDeploy.bundle/Contents/Download Java Components.app/Contents/MacOS/Download Java Components']",e02bb35ec94f19c38e4343b75dceb35f6753ebaaf78795c44c1f990aeeccde00,False,
-/System/Library/LaunchAgents/com.apple.java.updateSharing.plist,com.apple.java.updateSharing,"['/System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/bin/updateSharingD']",1b88f9e6c6281a84ca7229e172b3669e57fcfc48651d787ee75bce7e7c9c81f3,False,
-/System/Library/LaunchAgents/com.apple.lateragent.plist,com.apple.lateragent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent']",9483ea730503e2c84311a0cc75687f923208a2351897a9cddf2a3a32de78873b,False,
-/System/Library/LaunchAgents/com.apple.locationmenu.plist,com.apple.locationmenu,"['/System/Library/CoreServices/LocationMenu.app/Contents/MacOS/LocationMenu']",b8d7d7c47e9fe5f89d164d68d0fa7d80018cb1ee8aefb49aab7ef566ca3d0da8,False,
-/System/Library/LaunchAgents/com.apple.lsd.plist,com.apple.lsd,"['/usr/libexec/lsd']",5f54e2a9dd876c03213dcdd294d8165c429fb786f051a1b40bc69035e2cf8079,False,
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.agent.plist,com.apple.ManagedClientAgent.agent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-a']",de856cd882c50ef4ca0463a5c0a3223cf75bd2f0fd73b66d95bca458afcdb5fd,False,
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist,com.apple.ManagedClientAgent.enrollagent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-j']",de856cd882c50ef4ca0463a5c0a3223cf75bd2f0fd73b66d95bca458afcdb5fd,False,
-/System/Library/LaunchAgents/com.apple.Maps.pushdaemon.plist,com.apple.Maps.mapspushd,"['/System/Library/CoreServices/mapspushd']",a842797ed4a8bf32d42eae25be04c0292944eead04207ba51e837581899ddc75,False,
-/System/Library/LaunchAgents/com.apple.maspushagent.plist,com.apple.maspushagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/maspushagent']",93269fff6687e5fb0a2eb9e5a54257c1c428abdd6c94c84238b209c81fc9aaa7,False,
-/System/Library/LaunchAgents/com.apple.mbbackgrounduseragent.plist,com.apple.mbbackgrounduseragent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbbackgrounduseragent']",a6bfa170d7c01aba32a87d84c32526801f2fc41fe1ed891c2dad14877d3ebd32,False,
-/System/Library/LaunchAgents/com.apple.mbfloagent.plist,com.apple.mbfloagent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbfloagent']",c0b8b8fc3e4350c54196421cbb56b8b02950a0a31075cc8fafe1b9dfd79243a3,False,
-/System/Library/LaunchAgents/com.apple.mbuseragent.plist,com.apple.mbuseragent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbuseragent']",821d618ac78dfb1d649c5cebcb0f79aa204b3a3eab718c34ca6802bab07e523e,False,
-/System/Library/LaunchAgents/com.apple.mdmclient.agent.plist,com.apple.mdmclient.agent,"['/usr/libexec/mdmclient', 'agent']",845d83d0c8a98dfeffef7f13ef0335e77e3b08fe168e9c9bf15f0beaccf7b6c0,False,
-/System/Library/LaunchAgents/com.apple.mdworker.32bit.plist,com.apple.mdworker.32bit,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker32', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.32bit']",44086ae7b33bbdee048b9e99d098e20db0473960e5a9c6ec44209f6705ec9c7e,False,
-/System/Library/LaunchAgents/com.apple.mdworker.bundles.plist,com.apple.mdworker.bundles,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-bundle', '-c', 'MDSImporterBundleFinder', '-m', 'com.apple.mdworker.bundles']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.isolation.plist,com.apple.mdworker.isolation,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.isolation']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.lsb.plist,com.apple.mdworker.lsb,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.lsb']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.mail.plist,com.apple.mdworker.mail,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-mail', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.mail']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.shared.plist,com.apple.mdworker.shared,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.shared']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.single.plist,com.apple.mdworker.single,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.single']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.mdworker.sizing.plist,com.apple.mdworker.sizing,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-sizing', '-c', 'MDSSizingWorker', '-m', 'com.apple.mdworker.sizing']",81eafcc77285d470f97d89668a79be80ffef08aab64a59d446e4f2bd150c290c,False,
-/System/Library/LaunchAgents/com.apple.metadata.mdbulkimport.plist,com.apple.metadata.mdbulkimport,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdbulkimport', '-s', 'mdbulkimport']",3d462b7ab4a74a6f5d7fd948ad1b767f56a48bad9d22416f51f581e14c603706,False,
-/System/Library/LaunchAgents/com.apple.metadata.mdflagwriter.plist,com.apple.metadata.mdflagwriter,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter']",e9419f9478d3b5dfca6b0b1d6ca9ecce8beb3cb2aa0902bc08e7dd97ecad4cb3,False,
-/System/Library/LaunchAgents/com.apple.metadata.mdwrite.plist,com.apple.metadata.mdwrite,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdwrite']",43680197bbdf4ad9d52520511e46b95e40e6c28d6b527078fa79353e1e0c150b,False,
-/System/Library/LaunchAgents/com.apple.metadata.SpotlightNetHelper.plist,com.apple.metadata.SpotlightNetHelper,"['/System/Library/PrivateFrameworks/ParsecUI.framework/Versions/A/Support/SpotlightNetHelper.app/Contents/MacOS/SpotlightNetHelper']",40de1eef9f1f9d6748400b7870646a9bb453d54f2b8eefa7ee82cc934c4f8bb5,False,
-/System/Library/LaunchAgents/com.apple.midiserver.plist,com.apple.midiserver,"['/System/Library/Frameworks/CoreMIDI.framework/MIDIServer']",aa2eef746b49557f446f26e9d4f6ea5a0ee575fd82e4c2c7ad0d4b276f426b94,False,
-/System/Library/LaunchAgents/com.apple.MRTa.plist,com.apple.MRTa,"['/System/Library/CoreServices/MRT.app/Contents/MacOS/MRT', '-a']",fd07a1f4ed10706cc4eb6c3c12ed46c4cb5f52ccd73f55ca847dffc67dc879bf,True,
-/System/Library/LaunchAgents/com.apple.navd.plist,com.apple.navd,"['/System/Library/PrivateFrameworks/MapsSupport.framework/navd']",3f6ebf27024a6ef8cb08a2e7de693cd488549776617684367b1cd81f81177ac0,False,
-/System/Library/LaunchAgents/com.apple.neagent.plist,com.apple.neagent,"['/usr/libexec/neagent']",d45ad60fa7aec79b53ac5e43f7c48723cf8f06f4267ad670a34ddf06a67e7ac8,False,
-/System/Library/LaunchAgents/com.apple.netauth.user.auth.plist,com.apple.netauth.user.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent']",bc6707a055c064d3c6659fe6083663aac071d10973b2dbb571896307db16647c,False,
-/System/Library/LaunchAgents/com.apple.netauth.user.gui.plist,com.apple.netauth.user.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent']",650d221ceb76eb2138ee9a1efea86f89db23cfe45a7e62dd8e7fc033f005926a,False,
-/System/Library/LaunchAgents/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",2018ea3b60a0970bd160664568aac6997e34e8a9fbc6e65ec030612246182011,False,
-/System/Library/LaunchAgents/com.apple.noticeboard.agent.plist,com.apple.noticeboard.agent,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent']",89452d074a8c54451447f9784cf0cfa5a8bbbe7da05b21c38bf7444d539946bf,False,
-/System/Library/LaunchAgents/com.apple.notificationcenterui.plist,com.apple.notificationcenterui.agent,"['/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter']",d24a7e3f29077224acba1d8b82f42a4c9ac9f93f3fcee51dac2ae339d3a8b110,False,
-/System/Library/LaunchAgents/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond,"['/usr/libexec/nsurlsessiond']",5fdabcf4f5b12868ff14ec56b871ec89d37446b456c05109d35927058accce01,False,
-/System/Library/LaunchAgents/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",24ae6fd6e474e3e50f88f616cceabeec6d17d731031dcfa69e66f52b2c0d21bf,False,
-/System/Library/LaunchAgents/com.apple.PackageKit.InstallStatus.plist,com.apple.PackageKit.InstallStatus,"['/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress']",9b81836501e0a0b62e1a45eaa82b4827a3d9868dfc61292930e4cd36bbcbc345,False,
-/System/Library/LaunchAgents/com.apple.parentalcontrols.check.plist,com.apple.parentalcontrols.check,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/pcdCheck']",dc116b61f7038887e9e1e8a1dc21b4751aa1942da0955205291dc46cf340af1a,True,
-/System/Library/LaunchAgents/com.apple.pboard.plist,com.apple.pboard,"['/usr/sbin/pboard']",d535518de1be40c615fe4e5f4b3f933bd0f48a0c3e9930db854566c8387afb33,False,
-/System/Library/LaunchAgents/com.apple.pbs.plist,com.apple.pbs,"['/System/Library/CoreServices/pbs']",ebee7d236f3456b8ffe0adca15c8dc3773b09f62a97f69a4558617cdfbf8505f,False,
-/System/Library/LaunchAgents/com.apple.PCIESlotCheck.plist,com.apple.PCIESlotCheck,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIESlotCheck']",62473156d2f5cc16ef734e79feb85acc9f204f822f34e350d5a3af84c69b6e03,True,
-/System/Library/LaunchAgents/com.apple.photolibraryd.plist,com.apple.photolibraryd,"['/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd']",c88bff7c7821c5be3fc9ca0eb911841d2b5b302dd03888a48f1c803b14f95401,False,
-/System/Library/LaunchAgents/com.apple.PhotoLibraryMigrationUtility.XPC.plist,com.apple.PhotoLibraryMigrationUtility.XPC,"['/System/Library/CoreServices/Photo Library Migration Utility.app/Contents/MacOS/Photo Library Migration Utility', '-server']",c00b9d1920f8cfef306c56a37f36e48c454bb78489ea12d1b68713f2282ced24,False,
-/System/Library/LaunchAgents/com.apple.pictd.plist,com.apple.pictd,"['/usr/sbin/pictd']",2d4ed8e3c005c709a640e787657bf3b47de275d18874750093110ec4861522f3,False,
-/System/Library/LaunchAgents/com.apple.pluginkit.pkd.plist,com.apple.pluginkit.pkd,"['/usr/libexec/pkd']",4d3f8e19eb89acbcc8b2876542f36a3ca1059325ff4c5e5f0e23854b5bee2537,False,
-/System/Library/LaunchAgents/com.apple.pluginkit.pkreporter.plist,com.apple.pluginkit.pkreporter,"['/usr/libexec/pkreporter']",bf6228e6efeda9f7fc5a0317b1ed3215ce790ac3d1e0a589405a6ecbc59174f3,False,
-/System/Library/LaunchAgents/com.apple.powerchime.plist,com.apple.powerchime,"['/System/Library/CoreServices/PowerChime.app/Contents/MacOS/PowerChime']",c59df0be778f393689b8f23bd7ad73670d2e70dab25342b85de6a9b72ab5cd29,True,
-/System/Library/LaunchAgents/com.apple.printtool.agent.plist,com.apple.printtool.agent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'agent']",243cd1b7895f770292615f6384e5972c2d80ff1593e57621ece01a0c996b1c22,False,
-/System/Library/LaunchAgents/com.apple.printuitool.agent.plist,com.apple.printuitool.agent,"['/System/Library/PrivateFrameworks/PrintingPrivate.framework/Versions/A/PrintUITool']",d948a467c6c3070bfd69007972c1a2284877a3c7215bbb4066ce66f4acce4e43,False,
-/System/Library/LaunchAgents/com.apple.PubSub.Agent.plist,com.apple.PubSub.Agent,"['/System/Library/Frameworks/PubSub.framework/Versions/A/Resources/PubSubAgent.app/Contents/MacOS/PubSubAgent']",c0ec9ed9835671dec8b7a70e22f28d62df1c4f3e94a31364e5143cf0766b3ae7,False,
-/System/Library/LaunchAgents/com.apple.quicklook.32bit.plist,com.apple.quicklook.32bit,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd32.app/Contents/MacOS/quicklookd32']",914a5e5dea183dff3fbf62588285f8831dff963c35e3fb5bbcb8549cb53d6998,False,
-/System/Library/LaunchAgents/com.apple.quicklook.config.plist,com.apple.quicklook.config,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookconfig']",14f46ee99812557cde25232977e88891997376fd84ecd3b7a9dac03dca059672,False,
-/System/Library/LaunchAgents/com.apple.quicklook.plist,com.apple.quicklook,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd']",e2dec5555d22220ec0937d9c1ad65de5e22ef928286002b4841f399621c3c995,False,
-/System/Library/LaunchAgents/com.apple.quicklook.ui.helper.plist,com.apple.quicklook.ui.helper,"['/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper']",f083f33f45d212ac4c6571e40af6b61df809db69dcf21804478e366901345cc4,False,
-/System/Library/LaunchAgents/com.apple.rcd.plist,com.apple.rcd,"['/System/Library/CoreServices/rcd.app/Contents/MacOS/rcd']",143d77857368568a1c49445e59f0e04f05b67957553b6f1d046c54a411e27334,False,
-/System/Library/LaunchAgents/com.apple.recentsd.plist,com.apple.recentsd,"['/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/recentsd']",6287e44254beef62117bd2410dddec885bd49735fc58c0c8e09b269d0f8b27db,False,
-/System/Library/LaunchAgents/com.apple.RemoteDesktop.plist,com.apple.RemoteDesktop.agent,"['/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent']",a23e2343f0c26939ec8921c97bfd20df9e334dead805352933fd2fdcfd93727c,False,
-/System/Library/LaunchAgents/com.apple.ReportCrash.plist,com.apple.ReportCrash,"['/System/Library/CoreServices/ReportCrash']",41edcb12813290dbd05b5dce02e772c01f2c2f149b66bc0c867bc8f42a402410,False,
-/System/Library/LaunchAgents/com.apple.ReportCrash.Self.plist,com.apple.ReportCrash.Self,"['/System/Library/CoreServices/ReportCrash']",41edcb12813290dbd05b5dce02e772c01f2c2f149b66bc0c867bc8f42a402410,False,
-/System/Library/LaunchAgents/com.apple.ReportGPURestart.plist,com.apple.ReportGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/ReportGPURestart']",c955fd02f8d27a9e3f1e122ed43839ee5908f1c298d53ad289176e90caf12337,False,
-/System/Library/LaunchAgents/com.apple.ReportPanic.plist,com.apple.ReportPanic,"['/System/Library/CoreServices/ReportPanic.app/Contents/MacOS/ReportPanic']",69bb440f5fb8c06744474c37843240233e1d9ed3c52ced9233d104a4444c3002,False,
-/System/Library/LaunchAgents/com.apple.reversetemplated.plist,com.apple.reversetemplated,"['/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/reversetemplated']",f414f1631a456f5eaca88dac567e2e90576eaed4f63c98161269bc59769e9c11,False,
-/System/Library/LaunchAgents/com.apple.rtcreportingd.plist,com.apple.rtcreportingd,"['/usr/libexec/rtcreportingd']",9b0bdde41b8f19c73fe256dc4cffb81dd14433de5b000ad81fe10e0ac01eec74,False,
-/System/Library/LaunchAgents/com.apple.Safari.SafeBrowsing.Service.plist,com.apple.Safari.SafeBrowsing.Service,"['/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service']",a2932cf08e0a9d96ae5ebca19256b07687a1aebfed08de6ac6d4ea19946f425a,False,
-/System/Library/LaunchAgents/com.apple.SafariCloudHistoryPushAgent.plist,com.apple.SafariCloudHistoryPushAgent,"['/usr/libexec/SafariCloudHistoryPushAgent']",15652e244b6241ea17777066da989bb39cef1f692da7ea8c672b54566c4ed5ea,False,
-/System/Library/LaunchAgents/com.apple.safaridavclient.plist,com.apple.safaridavclient,"['/System/Library/PrivateFrameworks/BookmarkDAV.framework/Helpers/SafariDAVClient']",f9dbaa3a7a393eb5e160d64c18faee96a75b1fdecf698ec0d907eabb5e0a72cb,False,
-/System/Library/LaunchAgents/com.apple.SafariNotificationAgent.plist,com.apple.SafariNotificationAgent,"['/usr/libexec/SafariNotificationAgent']",fe1c91e8b3403681999939d1269afc3163fb62aa082acabc3e3b2487fd2ea74e,False,
-/System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist,com.apple.SafariPlugInUpdateNotifier,"['/usr/libexec/SafariPlugInUpdateNotifier']",1b89f1379854765cae087bb4936d6364877ee6cb6f8e491adfb2f2bb056750ea,False,
-/System/Library/LaunchAgents/com.apple.scopedbookmarkagent.xpc.plist,com.apple.scopedbookmarksagent.xpc,"['/System/Library/CoreServices/ScopedBookmarkAgent']",761b9b302e784e1de12fb25234e8d396c171d13c05b7e3021333ae4ee3c514e3,False,
-/System/Library/LaunchAgents/com.apple.ScreenReaderUIServer.plist,com.apple.ScreenReaderUIServer,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Resources/ScreenReaderUIServer.app/Contents/MacOS/ScreenReaderUIServer']",8304a4aaf3ea254ce426f1ece6974401fcdd54245b049195ec47fbd03f91861c,False,
-/System/Library/LaunchAgents/com.apple.screensharing.agent.plist,com.apple.screensharing.agent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/MacOS/ScreensharingAgent']",e499b617062e33c63c3b2b189ea8928a872e9f1bf85111e73cf47c7e83b439c6,False,
-/System/Library/LaunchAgents/com.apple.screensharing.MessagesAgent.plist,com.apple.screensharing.MessagesAgent,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer']",421be1a8751220d40620bbd571d7b0297ef7fbe3cec70c98396dfb693b89fbf4,False,
-/System/Library/LaunchAgents/com.apple.scrod.plist,com.apple.scrod,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Frameworks/ScreenReaderOutput.framework/Resources/scrod']",e00b07530376f5acfc07e347068874709d2537367eb6245a01f55f406aeddac2,False,
-/System/Library/LaunchAgents/com.apple.secd.plist,com.apple.secd,"['/usr/libexec/secd']",aa9d3723f9b6c6d25159afbf87d2fe0d0c2e86c4c7fea4d7b40c3acbcc264045,False,
-/System/Library/LaunchAgents/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",a31c423ec982340a5b15b735eef84e748da246b7425b697d038a1f5f29ca7e23,False,
-/System/Library/LaunchAgents/com.apple.security.agent.plist,com.apple.security.agent,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent']",f8db70fc362763faab1f3a7f1bfa70c410244f3b2b4e86a55e0859ee0303c10a,False,
-/System/Library/LaunchAgents/com.apple.security.cloudkeychainproxy.plist,com.apple.security.cloudkeychainproxy3,"['/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy']",47a5b4f6421c0266d0a302bda37f5c9ecf20abf887371d8647ccb3a396603f88,False,
-/System/Library/LaunchAgents/com.apple.security.DiskUnmountWatcher.plist,com.apple.security.DiskUnmountWatcher,"['/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher']",5aa58afd80f368fa444778ccda679c0dfef91619857cfa359a0a5f2717ae7ee5,False,
-/System/Library/LaunchAgents/com.apple.security.idskeychainsyncingproxy.plist,com.apple.security.idskeychainsyncingproxy,"['/System/Library/Frameworks/Security.framework/Versions/A/Resources/IDSKeychainSyncingProxy.bundle/Contents/MacOS/IDSKeychainSyncingProxy']",d11af68c714a8e003630ddb9d70564e160fa61e85e1cac95f24e6fae31bc3b75,False,
-/System/Library/LaunchAgents/com.apple.security.keychain-circle-notification.plist,com.apple.security.keychain-circle-notification,"['/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification']",66b13abc1362a9a53b8903728f2a1adadb5a48d7a20f047223c13200c2939afc,True,
-/System/Library/LaunchAgents/com.apple.sharingd.plist,com.apple.sharingd,"['/usr/libexec/sharingd']",314673453ab1280c50ba8c2e79603e534bb019f14e2ddb0aec11812bbd12ad76,True,
-/System/Library/LaunchAgents/com.apple.soagent.plist,com.apple.soagent,"['/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent']",26fadd762c253fcfdd286499d238a5d00a44d430c6afdc64928a56e27706fb8c,True,
-/System/Library/LaunchAgents/com.apple.SocialPushAgent.plist,com.apple.SocialPushAgent,"['/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent']",f3fce98c0bbbe8550098a1ccc92d0d0f6eecb32f57a6883a2e17247a510f93f1,True,
-/System/Library/LaunchAgents/com.apple.softwareupdate_notify_agent.plist,com.apple.softwareupdate_notify_agent,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent']",5af8b0de41767c7d6d340560a07545a124fd52b9cbcf3405c9c999d5c98e6b39,False,
-/System/Library/LaunchAgents/com.apple.speech.speechdatainstallerd.plist,com.apple.speech.speechdatainstallerd,"['/System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd']",02afbdcd04938025007eeb0b3bd13659c616dee67ff3b63aa82823e8a8c64bed,False,
-/System/Library/LaunchAgents/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",7f32d7dede4838b2ebd3d0b5e903519378241fec16395acdf22c5520b9c84925,False,
-/System/Library/LaunchAgents/com.apple.speech.synthesisserver.plist,com.apple.speech.synthesisserver,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app/Contents/MacOS/SpeechSynthesisServer', 'launchd']",3ccaded7fe61ffc2dbdab6b90f3955b9314d8f85677d583f212554f0f978771c,False,
-/System/Library/LaunchAgents/com.apple.spindump_agent.plist,com.apple.spindump_agent,"['/usr/libexec/spindump_agent']",afd0269b5dabeb7a0eea8df0b767e6c8fd8348472aa0ee6eec6f1bfe4f2948d0,True,
-/System/Library/LaunchAgents/com.apple.spotlight.IndexAgent.plist,com.apple.spotlight.IndexAgent,"['/System/Library/PrivateFrameworks/CoreSpotlight.framework/Support/com.apple.spotlight.IndexAgent']",4865a57525cf2fce68d0a863f95fe67675c9fdd0b18dcbc67fc2841f4f2d4516,False,
-/System/Library/LaunchAgents/com.apple.Spotlight.plist,com.apple.Spotlight,"['/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight']",ede41b28d7ec750a14b36c5a5841c81047f10badc8a5a68d8d695d8a86390b89,False,
-/System/Library/LaunchAgents/com.apple.SSInvitationAgent.plist,com.apple.ssinvitationagent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/Support/SSInvitationAgent.app/Contents/MacOS/SSInvitationAgent']",04ac00f93f19b4193093021d104b0daf2eccd5d81287be1a7bda5bf1123082b6,False,
-/System/Library/LaunchAgents/com.apple.storeaccountd.plist,com.apple.storeaccountd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd']",0b4f8d38f3cf9752a1422f1c922c0c306c0448e03274ae8be17ca7827514c04c,False,
-/System/Library/LaunchAgents/com.apple.storeassetd.plist,com.apple.storeassetd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd']",0018c00d6553533011b015987a509cb85b1bb0229f0dd4d4e57342e36ce2b39e,False,
-/System/Library/LaunchAgents/com.apple.storedownloadd.plist,com.apple.storedownloadd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd']",f36336a0bac12f1896bb32f6256976189acf5244534dcc10255fd17b1f26ffcd,False,
-/System/Library/LaunchAgents/com.apple.storeinappd.plist,com.apple.storeinappd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeinappd']",8ea1ee5e9f1af96e4d53b8e32d3ec931c9a76ed922b6a6c0c7c2835cb57c9b11,False,
-/System/Library/LaunchAgents/com.apple.storelegacy.plist,com.apple.storelegacy,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy']",da5c5c34b09127c07a3915b00517c737f66da6d3aadad2bd5dd04b949100c1af,False,
-/System/Library/LaunchAgents/com.apple.storeuid.plist,com.apple.storeuid,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid']",a33e6ae060a05d08993f3187680d727768ab98c02ab2601bdbcff0a4e5d1d538,False,
-/System/Library/LaunchAgents/com.apple.suggestd.plist,com.apple.suggestd,"['/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd']",5d06b86d870ec3c576f5a7c5267d92e3249924dc4e694fd670193586e29631ff,False,
-/System/Library/LaunchAgents/com.apple.swcd.plist,com.apple.swcd,"['/usr/libexec/swcd']",1b27c796f1f6a5ad46be19591de47491fec86d0eb88a5d304cb8c893af6c0147,False,
-/System/Library/LaunchAgents/com.apple.syncdefaultsd.plist,com.apple.syncdefaultsd,"['/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd']",9e79eb95b69c83ffc81f63d7fd7fcbab69a1829a6c42318697d7116b207addab,False,
-/System/Library/LaunchAgents/com.apple.syncservices.SyncServer.plist,com.apple.syncservices.SyncServer,"['/System/Library/Frameworks/SyncServices.framework/Versions/Current/Resources/SyncServer.app/Contents/MacOS/SyncServer']",4ae47c7fc6df9ad94b0e4fff9bd27c7f849a6b82e0d456496aa493ed601167d0,False,
-/System/Library/LaunchAgents/com.apple.syncservices.uihandler.plist,com.apple.syncservices.uihandler,"['/System/Library/PrivateFrameworks/SyncServicesUI.framework/Versions/Current/Resources/syncuid.app/Contents/MacOS/syncuid']",de8c1f4b67f695a81910f1bf001bca2c3bdd6efd7267c91f5c7f8025f747a770,False,
-/System/Library/LaunchAgents/com.apple.systemprofiler.plist,com.apple.systemprofiler,"['/Applications/Utilities/System Information.app/Contents/MacOS/System Information']",72e5ae11a5a62eb4cef93a107a69d31f305994ebed31ec24f07e4a7b9b108764,False,
-/System/Library/LaunchAgents/com.apple.SystemUIServer.plist,com.apple.SystemUIServer.agent,"['/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer']",12046e23c9a544ba203be938685269b288ef4342a6f107263cc40eef77a04c07,False,
-/System/Library/LaunchAgents/com.apple.talagent.plist,com.apple.talagent,"['/System/Library/CoreServices/talagent']",5549995929202b0f20eabeb61aac88c3cdab3ec1f50da18136f44c0ffe78892e,True,
-/System/Library/LaunchAgents/com.apple.tccd.plist,com.apple.tccd,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd']",3b76b97f21c0e1d1a29493f2c97760b526839c0ca872226548ed34d120a45eb6,False,
-/System/Library/LaunchAgents/com.apple.telephonyutilities.callservicesd.plist,com.apple.telephonyutilities.callservicesd,"['/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd']",a81b9bd5f4cc2f62b65df914abda2c4a7a754ecd389153dd57ffa1b7da033c2e,False,
-/System/Library/LaunchAgents/com.apple.thermaltrap.plist,com.apple.thermaltrap,"['/System/Library/CoreServices/ThermalTrap.app/Contents/MacOS/ThermalTrap']",e3750762e7b2ace1da2de5934514b6cdc19874ac79e0455296d9a2c938337273,False,
-/System/Library/LaunchAgents/com.apple.tiswitcher.plist,com.apple.tiswitcher,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/TISwitcher.app/Contents/MacOS/TISwitcher']",ca89b47403826eb8ed14886015bf6d93cff7c2d189e3f9e3cbe8027753c56f77,False,
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.plist,com.apple.TMHelperAgent,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent']",8fb77de377d53b4ec5d2482cd16f0642d44242d6521b041bdd76b8f7efdb7349,False,
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.SetupOffer.plist,com.apple.TMHelperAgent.SetupOffer,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent', '-offer']",8fb77de377d53b4ec5d2482cd16f0642d44242d6521b041bdd76b8f7efdb7349,False,
-/System/Library/LaunchAgents/com.apple.trustd.agent.plist,com.apple.trustd.agent,"['/usr/libexec/trustd', '--agent']",90d89a19c2d761d3752c63a41fe2fb0cd6e1f09ab3970ad38dcbe5605d6e00e4,False,
-/System/Library/LaunchAgents/com.apple.TrustEvaluationAgent.plist,com.apple.TrustEvaluationAgent,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",9f2f2656365a6fa3bb08a91dfd1f3a567761a12e65baeb7c513b235a65a6cf72,False,
-/System/Library/LaunchAgents/com.apple.universalaccessAuthWarn.plist,com.apple.universalaccessAuthWarn,"['/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/Resources/universalAccessAuthWarn.app/Contents/MacOS/universalAccessAuthWarn', 'launchd', '-s']",1be63fbc01cf9e1f0afbfdd7c4da51588c770edb5a1a177a9bad8e5fa6951eba,False,
-/System/Library/LaunchAgents/com.apple.universalaccesscontrol.plist,com.apple.universalaccesscontrol,"['/System/Library/CoreServices/UniversalAccessControl.app/Contents/MacOS/UniversalAccessControl', 'launchd', '-s']",9fd9fb8edf9cdcfb42c4c37cdc644143098d171551747a20c01ef112c1df93b5,False,
-/System/Library/LaunchAgents/com.apple.universalaccessd.plist,com.apple.universalaccessd,"['/usr/sbin/universalaccessd', 'launchd', '-s']",02c82a7bb7611c05f2726acc68931e974b66c593555a64c0e782aba6ab935638,True,
-/System/Library/LaunchAgents/com.apple.unmountassistant.useragent.plist,com.apple.unmountassistant.useragent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/MacOS/UnmountAssistantAgent']",b0a0595021e7070a61e526a3e9c9bb5b1a40dd4bbabf782e41e50904343006c5,False,
-/System/Library/LaunchAgents/com.apple.USBAgent.plist,com.apple.USBAgent,"['/usr/libexec/USBAgent']",0cb55da6999db72aa684fa6fe3d6c6d003333837d07768867bccd3afb990a94f,False,
-/System/Library/LaunchAgents/com.apple.UserEventAgent-Aqua.plist,com.apple.UserEventAgent-Aqua,"['/usr/libexec/UserEventAgent', '(Aqua)']",3ef66f06d6a10a8de1ccd6630a6d18caf49ed467d62ea4d8b22005ff75bdccdf,False,
-/System/Library/LaunchAgents/com.apple.UserEventAgent-LoginWindow.plist,com.apple.UserEventAgent-LoginWindow,"['/usr/libexec/UserEventAgent', '(LoginWindow)']",3ef66f06d6a10a8de1ccd6630a6d18caf49ed467d62ea4d8b22005ff75bdccdf,False,
-/System/Library/LaunchAgents/com.apple.usernoted.plist,com.apple.usernoted,"['/usr/sbin/usernoted']",e006b774384d52057858fdc8bd7328161cc4780e3efa47f13f74cee2d22cf0a8,True,
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent-LoginWindow.plist,com.apple.UserNotificationCenterAgent-LoginWindow,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter', '-loginwindow']",3daa1429b450714be9239b7e5185af8ed4b439547b23a0f208e457085b4cc4d1,False,
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent.plist,com.apple.UserNotificationCenterAgent,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter']",3daa1429b450714be9239b7e5185af8ed4b439547b23a0f208e457085b4cc4d1,False,
-/System/Library/LaunchAgents/com.apple.VoiceOver.plist,com.apple.VoiceOver,"['/System/Library/CoreServices/VoiceOver.app/Contents/MacOS/VoiceOver', 'launchd', '-s']",942729bdc41d91e2fa226453dfd5410592392b38d2c7bd0445386134a1102643,False,
-/System/Library/LaunchAgents/com.apple.warmd_agent.plist,com.apple.warmd_agent,"['/usr/libexec/warmd_agent']",fa3a996db7da9140573a713c5a20370132ad7e26bdf6ed7274ac80fc407781d5,False,
-/System/Library/LaunchAgents/com.apple.webinspectord.plist,com.apple.webinspectord,"['/usr/libexec/webinspectord']",0e6cc1d981732f9187aac0c7743a5701d34f2f1f37b3c1e3a6231a337c2c4cd8,False,
-/System/Library/LaunchAgents/com.apple.WebKit.PluginAgent.plist,com.apple.WebKit.PluginAgent,"['/System/Library/Frameworks/WebKit.framework/Frameworks/WebKitLegacy.framework/WebKitPluginAgent']",70c35e8d0a4d28b4ba0940f0e07b8db84861b27ec3cafdfec60360847dfa7d15,False,
-/System/Library/LaunchAgents/com.apple.wifi.WiFiAgent.plist,com.apple.wifi.WiFiAgent,"['/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent']",5b6699472436d80a9ffe1e16ed9c180dd5cf5786e6d80d4a1d5c1da30e9d52f8,True,
-/System/Library/LaunchAgents/com.apple.xpc.loginitemregisterd.plist,com.apple.xpc.loginitemregisterd,"['/usr/libexec/loginitemregisterd']",304c78efa49e16281e769349f74c0c09c753e6d85e48782fb7921a3c526fd46b,False,
-/System/Library/LaunchAgents/com.apple.xpc.otherbsd.plist,com.apple.xpc.otherbsd,"['/usr/libexec/otherbsd']",5208703f46fc46b899e22627cd26a25e26106fcb73b24916ab93a23eadc993aa,False,
-/System/Library/LaunchAgents/com.apple.ZoomWindow.plist,com.apple.ZoomWindow,"['/System/Library/CoreServices/ZoomWindow.app/Contents/MacOS/ZoomWindowStarter', 'launchd', '-s']",f164e47664f7609ac58fae9e67245c326d132f5313ca3c7986b1c70c531b9c5e,False,
-/System/Library/LaunchAgents/org.openbsd.ssh-agent.plist,org.openbsd.ssh-agent,"['/usr/bin/ssh-agent', '-l']",95af18a841888e31bb9a89a67c8a37a2ebc1bcd38755d6a7b7dce4ab2f69af9e,False,
diff --git a/16A323_launchd.csv b/16A323_launchd.csv
deleted file mode 100644
index d5277a45..00000000
--- a/16A323_launchd.csv
+++ /dev/null
@@ -1,574 +0,0 @@
-filename,label,program,sha256,runatload,comment
-/System/Library/LaunchDaemons/bootps.plist,com.apple.bootpd,"['/usr/libexec/bootpd']",baaed55290ef711949e9d8aa92facec740036f93e6ff8530a4cef2a82800ea9e,False,"DHCP/BOOTP/NetBoot server"
-/System/Library/LaunchDaemons/com.apple.afpfs_afpLoad.plist,com.apple.afpfs_afpLoad,"['/System/Library/Filesystems/AppleShare/afpLoad']",91982587de5db5df44fa1076a26f3f8867f1d0aa42475c50289e2f3292e5f182,False,""
-/System/Library/LaunchDaemons/com.apple.afpfs_checkafp.plist,com.apple.afpfs_checkafp,"['/System/Library/Filesystems/AppleShare/check_afp.app/Contents/MacOS/check_afp']",fd08db9d3ceb19f569ed82570b79e752a5ea108d487b55e5532c9d19d648bfd4,False,""
-/System/Library/LaunchDaemons/com.apple.airplaydiagnostics.server.mac.plist,com.apple.airplaydiagnostics.server.mac,"['/AppleInternal/Applications/AirPlayDiagnostics.app/Contents/Resources/AirPlayDiagnosticsServer']",UNKNOWN,False,"Apple Internal Diagnostic Tool"
-/System/Library/LaunchDaemons/com.apple.AirPlayXPCHelper.plist,com.apple.AirPlayXPCHelper,"['/usr/libexec/AirPlayXPCHelper']",26090d86c8ab00d756bd32cee7f8a3fcba1bdbee43b88609fbc89f6799b9e440,False,""
-/System/Library/LaunchDaemons/com.apple.airport.wps.plist,com.apple.airport.wps,"['/usr/libexec/wps']",9dc8d6ad1fe736db1012a79e026fe51a91d51863d1b3cbad3a3b39dc552d8996,False,""
-/System/Library/LaunchDaemons/com.apple.airportd.plist,com.apple.airportd,"['/usr/libexec/airportd']",10947fd41b824565233a3622ff6b0dfe56c3ba893883f05fac2ddbc518020358,False,""
-/System/Library/LaunchDaemons/com.apple.akd.plist,com.apple.akd,"['/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd']",670fb2f9b92fea1a38a454ae6c3b79ee0d08206f0e04d10439b02a7b80e7dae0,False,""
-/System/Library/LaunchDaemons/com.apple.alf.agent.plist,com.apple.alf,"['/usr/libexec/ApplicationFirewall/socketfilterfw']",f2b4743bc590ce919c4f48a9b1405d4171730ec198ac71aff06d6d5c9460994e,False,"Apple Application Firewall"
-/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist,com.apple.AppleFileServer,"['/usr/sbin/AppleFileServer']",9440083957177535495c2e1565c8c990e547c0b547309d279e80fae00986c9e0,False,"Apple File Server (AFP)"
-/System/Library/LaunchDaemons/com.apple.appleseed.fbahelperd.plist,com.apple.appleseed.fbahelperd,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/fbahelperd']",6afc767a210b1bb5f8d0b45b2753e71ae8014a25647884482d92df41a56e6c11,False,""
-/System/Library/LaunchDaemons/com.apple.applessdstatistics.plist,com.apple.applessdstatistics,"['/usr/libexec/applessdstatistics']",b4b448b67a56b7fb36a53d73a2c305e8750d0a837e07a868d8b1abcee45e5e4b,False,""
-/System/Library/LaunchDaemons/com.apple.apsd.plist,com.apple.apsd,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsd']",86f06b679fb27d09216460c1733fae232071c0d0478a8c2b09f8f16768ee848f,True,"Apple Push Notification service daemon"
-/System/Library/LaunchDaemons/com.apple.aslmanager.plist,com.apple.aslmanager,"['/usr/sbin/aslmanager']",e8f68d5c100be24b8c45625c850ae776222ca14ad5617daea9d9be1084bf125e,False,"Manages rotated files and ASL data written by the syslogd server"
-/System/Library/LaunchDaemons/com.apple.AssetCacheLocatorService.plist,com.apple.AssetCacheLocatorService,"['/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/Contents/MacOS/AssetCacheLocatorService', '-d']",8f62c38c566430ad038db3173c9589455f55c04bb38353a1df24a04fac455b64,False,""
-/System/Library/LaunchDaemons/com.apple.atrun.plist,com.apple.atrun,"['/usr/libexec/atrun']",89e806501dd2c463c0aea5a842a671b65025c7f52c4f763aecde280eb2a0b885,False,""
-/System/Library/LaunchDaemons/com.apple.audio.coreaudiod.plist,com.apple.audio.coreaudiod,"['/usr/sbin/coreaudiod']",51eecae6bca66cf28ff4859a3f020ceda8feec83cace5dddede23ddf85765fde,False,"daemon used for Core Audio related purposes"
-/System/Library/LaunchDaemons/com.apple.audio.systemsoundserverd.plist,com.apple.audio.systemsoundserverd,"['/usr/sbin/systemsoundserverd']",a76ccd13dbb47606a8bd80d17fe6aa732da2042dd2b3f7e658e0020e86bdf71d,False,""
-/System/Library/LaunchDaemons/com.apple.auditd.plist,com.apple.auditd,"['/usr/sbin/auditd']",08ab796e279313669ccc794b6e9698032d76553f5146ff7be48f73221fc91335,False,""
-/System/Library/LaunchDaemons/com.apple.autofsd.plist,com.apple.autofsd,"['/usr/libexec/autofsd']",c239bfdccee1c682cd3ad201f44bba56b46d4dd48170a450692e4c9679f43270,False,""
-/System/Library/LaunchDaemons/com.apple.automountd.plist,com.apple.automountd,"['/usr/libexec/automountd']",a0e20fec47bb3ddfbbb44f2f5ab1b685f2a60e6316dbc73f9f6cf15ab8b54619,False,""
-/System/Library/LaunchDaemons/com.apple.avbdeviced.plist,com.apple.avbdeviced,"['/usr/sbin/avbdeviced']",b5a94c7abb137c6514a089eedd483b38af039902e858116f2d9c91961c071050,False,""
-/System/Library/LaunchDaemons/com.apple.awacsd.plist,com.apple.awacsd,"['/usr/libexec/awacsd']",fc4390a569f2f84da1c5d4b5e79c0122a770cfe867c307c5502a69e29d38d9e6,False,""
-/System/Library/LaunchDaemons/com.apple.awdd.plist,com.apple.awdd,"['/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd']",39ef15ccbe8c2101aadeac4131a5d5a14fb008a477e75e967c26f8d7dcd69b96,False,""
-/System/Library/LaunchDaemons/com.apple.backupd-auto.plist,com.apple.backupd-auto,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd-helper', '-launchd']",2db7c1efb0b46fda1603dd5b5aabd840e0e4a7f71a428aa9ad0ad90748a61b42,True,""
-/System/Library/LaunchDaemons/com.apple.backupd.plist,com.apple.backupd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd']",1148377b271b6cf6c2600bc5bc98fb5e53f8ae6a95baafac5625670150beee18,False,""
-/System/Library/LaunchDaemons/com.apple.blued.plist,com.apple.blued,"['/usr/sbin/blued']",6dddd6ee17bba3d6f30291a943acfb4dcf9ea454190f54bfa6067604a1379a6d,False,""
-/System/Library/LaunchDaemons/com.apple.bluetoothaudiod.plist,com.apple.bluetoothaudiod,"['/usr/sbin/bluetoothaudiod']",409b0e13928ce47b255340afe76a202cfbd6b9c1126d44efaff0d4c08dad4e1c,False,""
-/System/Library/LaunchDaemons/com.apple.bluetoothReporter.plist,com.apple.bluetoothReporter,"['/System/Library/Frameworks/IOBluetooth.framework/Versions/A/Resources/BluetoothReporter', '--dumpPacketLog', '/private/var/log/bluetooth.pklg']",049b065d1bb925ef664466803557598ddc75e34949c63d84f4e981f24953f2b2,False,""
-/System/Library/LaunchDaemons/com.apple.bnepd.plist,com.apple.bnepd,"['/usr/sbin/bnepd']",794acf51140e0fbcac7e1ffecdfef48c510b383f50fc0be9ec0824b12049e364,False,""
-/System/Library/LaunchDaemons/com.apple.bsd.dirhelper.plist,com.apple.bsd.dirhelper,"['/usr/libexec/dirhelper']",762f0c8081692471109aea36af9cea0604b4fcfa1a7fb8ececae959b13a6df0a,True,""
-/System/Library/LaunchDaemons/com.apple.captiveagent.plist,com.apple.captiveagent,"['/usr/libexec/captiveagent']",cde66a19f2b5d6be76018ec5c82bbf07ad12ca5e65c7777f60fd1b43d46724ef,False,"None"
-/System/Library/LaunchDaemons/com.apple.cfprefsd.xpc.daemon.plist,com.apple.cfprefsd.xpc.daemon,"['/usr/sbin/cfprefsd', 'daemon']",2147b55037302f85455852f6fb8b868dbf647ed70042442543329bcceef80bf6,False,""
-/System/Library/LaunchDaemons/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",389ff1641251a8df83310b7b48c75063520f5b78afb5f57b06a20160a4d2ef31,False,""
-/System/Library/LaunchDaemons/com.apple.cmio.AppleCameraAssistant.plist,com.apple.cmio.AppleCameraAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/AppleCamera.plugin/Contents/Resources/AppleCameraAssistant']",c015c8df54ad57627680f71ed252e46d43192e93ae857260f0572011c6310440,False,""
-/System/Library/LaunchDaemons/com.apple.cmio.AVCAssistant.plist,com.apple.cmio.AVCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/AVC.plugin/Contents/Resources/AVCAssistant']",50f1f314ee36e6f2d3f58c39512abad2c3b41e942c66dd6c04f2c704ef9b0547,False,""
-/System/Library/LaunchDaemons/com.apple.cmio.IIDCVideoAssistant.plist,com.apple.cmio.IIDCVideoAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/IIDC.plugin/Contents/Resources/IIDCVideoAssistant']",e55039ca09e5a96c211ad10cbabec802183f9fa25ad5dd72d46d1a2de1af5065,False,""
-/System/Library/LaunchDaemons/com.apple.cmio.iOSScreenCaptureAssistant.plist,com.apple.cmio.iOSScreenCaptureAssistant,"['/Library/CoreMediaIO/Plug-Ins/DAL/iOSScreenCapture.plugin/Contents/Resources/iOSScreenCaptureAssistant']",a967d194234f1768bbe2811443fffc2c8fc01802b97c94f937ad079f7bca3dbc,False,""
-/System/Library/LaunchDaemons/com.apple.cmio.VDCAssistant.plist,com.apple.cmio.VDCAssistant,"['/System/Library/Frameworks/CoreMediaIO.framework/Resources/VDC.plugin/Contents/Resources/VDCAssistant']",32887599a49afcf1bf6280c80e15fb31caaa8b62dfb200625e3f2679e82469c2,False,""
-/System/Library/LaunchDaemons/com.apple.colorsyncd.plist,com.apple.colorsyncd,"['/usr/libexec/colorsyncd']",b7800f12054e5a7a460664ad183eb0e32c716ebcc49439b1a0477519fa033e06,False,""
-/System/Library/LaunchDaemons/com.apple.CommCenterRootHelper.plist,com.apple.CommCenterRootHelper,"['/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenterRootHelper']",0f3aa62dee70cfb88562db8f7f42b8e77c3bc960135e25d1308852730a48084d,False,""
-/System/Library/LaunchDaemons/com.apple.comsat.plist,com.apple.comsat,"['/usr/libexec/comsat']",9772e4f92bd8966cfcc137c1ce0e94e12376b4de20d11eb85efdc1530ee9efa8,False,""
-/System/Library/LaunchDaemons/com.apple.configd.plist,com.apple.configd,"['/usr/libexec/configd']",615518384eb14d9427f2b1f6ad92b6c8c439b3481a1cecdd564b0bdedff15f84,False,""
-/System/Library/LaunchDaemons/com.apple.configureLocalKDC.plist,com.apple.configureLocalKDC,"['/usr/libexec/configureLocalKDC']",f6afc2f328af2217addc06c515158cb41af43099e1bbe0f200429e5bba46385d,False,""
-/System/Library/LaunchDaemons/com.apple.CoreAuthentication.daemon.plist,com.apple.CoreAuthentication.daemon,"['/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd']",c13632f348f86aae9b529a6323c7ff9447eeac75cc1c1afa5050d1dab46ef513,False,""
-/System/Library/LaunchDaemons/com.apple.corecaptured.plist,com.apple.corecaptured,"['/usr/libexec/corecaptured']",6c4046bfa1e96b69565a440df285ec0a0347c6b76704b6b489e24e67d0fada87,False,""
-/System/Library/LaunchDaemons/com.apple.coreduetd.osx.plist,com.apple.coreduetd,"['/usr/libexec/coreduetd']",e4b99e1202b8ce8b369f88779d62597e64ddd9740237492df63bed556a621d7e,True,""
-/System/Library/LaunchDaemons/com.apple.CoreRAID.plist,com.apple.CoreRAID,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Resources/CoreRAIDServer']",0784b81cc583abe95cf59a0bade93c702ad65b6e82e550510869bb76435c06a7,True,""
-/System/Library/LaunchDaemons/com.apple.coreservices.appleevents.plist,com.apple.coreservices.appleevents,"['/System/Library/CoreServices/appleeventsd', '--server']",06d36bbcb314dc397ba4f8b9aa3f6dba1a327c88c076d0c882e11fe092a394d1,True,""
-/System/Library/LaunchDaemons/com.apple.coreservices.appleid.passwordcheck.plist,com.apple.coreservices.appleid.passwordcheck,"['/System/Library/CoreServices/AppleIDAuthAgent', '--checkpassword']",d5e0eb2737df528d163166798900fbe8e69582e536aeb5202af0269e23d2eb7d,False,""
-/System/Library/LaunchDaemons/com.apple.coreservices.launchservicesd.plist,com.apple.coreservices.launchservicesd,"['/System/Library/CoreServices/launchservicesd']",40f17b7a513fdcf7554b2ee2bd6a09f9377939f7450022a9eacb1bac76550abc,True,""
-/System/Library/LaunchDaemons/com.apple.coreservices.sharedfilelistd.plist,com.apple.coreservices.sharedfilelistd,"['/System/Library/CoreServices/sharedfilelistd', '--enable-legacy-services']",ce3f524e7ecde28bef9cc879ee1526ac3a661cc5e43f4c79fba2718153a9fd0f,False,""
-/System/Library/LaunchDaemons/com.apple.coreservicesd.plist,com.apple.coreservicesd,"['/System/Library/CoreServices/coreservicesd']",0074e13887c66ad6c46e107a0bf16b3264b8fd8b59c4bf9b6c40b438900fa21d,False,""
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoraged.plist,com.apple.corestorage.corestoraged,"['/usr/libexec/corestoraged']",7cfc5d09ba3a3ac5caafeac839f96186456607cd2cc834542285c8e493d46f0b,False,""
-/System/Library/LaunchDaemons/com.apple.corestorage.corestoragehelperd.plist,com.apple.corestorage.corestoragehelperd,"['/usr/libexec/corestoragehelperd']",0e38ec26934a7064e1e2cd1f8f8e96a1a30a9184774a4e02cc348a59cd08a04a,False,""
-/System/Library/LaunchDaemons/com.apple.coresymbolicationd.plist,com.apple.coresymbolicationd,"['/System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd']",c325cf04d5a03f0673f845a7903b07b97035883ae447c264cd59bc7fd1222b35,False,""
-/System/Library/LaunchDaemons/com.apple.CrashReporterSupportHelper.plist,com.apple.CrashReporterSupportHelper,"['/System/Library/CoreServices/CrashReporterSupportHelper', 'server-init']",bbb29968f049cec05216155f4a57f0657af771330dc36814ceec2875cc6159b3,False,""
-/System/Library/LaunchDaemons/com.apple.CryptoTokenKit.ahp.plist,com.apple.CryptoTokenKit.ahp,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp', '-d']",3e14730f8e5efc414616a87e0f357506bcd1eea6d0dc6121970858a17fff9e75,False,"None"
-/System/Library/LaunchDaemons/com.apple.csrutil.report.plist,com.apple.csrutil.report,"['/usr/bin/csrutil', 'report']",66ea3c3e3ba0b1d3e0e022e75ea2cf6dae8243ae12e52ffa6cdacc25d9c4dea0,False,""
-/System/Library/LaunchDaemons/com.apple.ctkd.plist,com.apple.ctkd,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkd', '-s']",caa6ffa56e93a88e0ca2b6e965850b0a11e63650ac9ec3998d7f6e6cc06a8c94,False,""
-/System/Library/LaunchDaemons/com.apple.cvmsServ.plist,com.apple.cvmsServ,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMServer']",6b4c86cd10ab836fa5cb3285c0704fb94415ff1e28fac3b5ae9dbb2019d98876,False,""
-/System/Library/LaunchDaemons/com.apple.DataDetectorsSourceAccess.plist,com.apple.DataDetectorsSourceAccess,"['/usr/libexec/DataDetectorsSourceAccess']",31f7da0aa1a2721dce7958825dd90deb462891146c5a20e9bf568cf7ca0d10cb,False,"None"
-/System/Library/LaunchDaemons/com.apple.defragx.plist,com.apple.defragx,"['/usr/libexec/defragx']",1c944772eac08223ca150f1c1bf0019f33b984c3ec3a4c1a7f136168520b50eb,False,"None"
-/System/Library/LaunchDaemons/com.apple.DesktopServicesHelper.plist,com.apple.DesktopServicesHelper,"['/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Resources/DesktopServicesHelper']",413a822b49b10c5a65e0543c1890085fb7da4ed37e02d82e942883078ebe3b50,False,""
-/System/Library/LaunchDaemons/com.apple.diagnosticd.plist,com.apple.diagnosticd,"['/usr/libexec/diagnosticd']",7111b5dd560ae7fb5e870ff83b54090c8468ec4a9fae17bef5b7d62f0616522c,False,""
-/System/Library/LaunchDaemons/com.apple.diagnosticextensions.osx.bluetooth.helper.plist,com.apple.diagnosticextensions.osx.bluetooth.helper,"['/System/Library/PrivateFrameworks/DiagnosticExtensions.framework/PlugIns/osx-bluetooth.appex/Contents/XPCServices/bluetoothhelper']",531a4a5044ac6f0739d9334bf3d967e77afdb76bd9416f84981ebc3b218ce569,False,"None"
-/System/Library/LaunchDaemons/com.apple.diagnosticextensions.osx.getmobilityinfo.helper.plist,com.apple.diagnosticextensions.osx.getmobilityinfo.helper,"['/System/Library/PrivateFrameworks/DiagnosticExtensions.framework/PlugIns/osx-getmobilityinfo.appex/Contents/XPCServices/getmobilityinfohelper']",94078e3edec4c135ccfb64669ead982144ca95ae5a91beedd5c14da4ae5acbe1,False,"None"
-/System/Library/LaunchDaemons/com.apple.diagnosticextensions.osx.spotlight.helper.plist,com.apple.diagnosticextensions.osx.spotlight.helper,"['/System/Library/PrivateFrameworks/DiagnosticExtensions.framework/PlugIns/osx-spotlight.appex/Contents/XPCServices/spotlighthelper']",49b9078ecf7898e9ecc89495999b9e4e021bcadf97094b7bf00a39a7de0f26d2,False,"None"
-/System/Library/LaunchDaemons/com.apple.diagnosticextensions.osx.timemachine.helper.plist,com.apple.diagnosticextensions.osx.timemachine.helper,"['/System/Library/PrivateFrameworks/DiagnosticExtensions.framework/PlugIns/osx-timemachine.appex/Contents/XPCServices/timemachinehelper']",fd286745832399e75dfc03aa3e742787fe416ddfe1bcc738d1a42552facbae63,False,"None"
-/System/Library/LaunchDaemons/com.apple.diagnosticextensions.osx.wifi.helper.plist,com.apple.diagnosticextensions.osx.wifi.helper,"['/System/Library/PrivateFrameworks/DiagnosticExtensions.framework/PlugIns/osx-WiFiDiagnose.appex/Contents/XPCServices/wifihelper']",303607e761bdab6fbe498bb68b72755842b507581ea16acefc7f7a70e40d62d8,False,"None"
-/System/Library/LaunchDaemons/com.apple.diskarbitrationd.plist,com.apple.diskarbitrationd,"['/usr/libexec/diskarbitrationd']",5991b982bde72f99fb99b2a6b1380dd50c8c3b24799782381e45bd718871a4cf,False,""
-/System/Library/LaunchDaemons/com.apple.diskmanagementd.plist,com.apple.diskmanagementd,"['/usr/libexec/diskmanagementd']",135dd69dcd8142189d54e14919b640bcc9ed8cee28dccff658a956f157e76a9d,False,""
-/System/Library/LaunchDaemons/com.apple.diskmanagementstartup.plist,com.apple.diskmanagementstartup,"['/usr/libexec/diskmanagementstartup']",805571a048bffcc655f37de7b453536d3af9a516e9e3af6ebb4fb830c97c6a48,True,""
-/System/Library/LaunchDaemons/com.apple.displaypolicyd.plist,com.apple.displaypolicyd,"['/usr/libexec/displaypolicyd', '-k', '1']",d12ef3f6e17885cd040466cec08e0a1a103e4f0000a0a178dc46bb5e84e0c810,True,""
-/System/Library/LaunchDaemons/com.apple.distnoted.xpc.daemon.plist,com.apple.distnoted.xpc.daemon,"['/usr/sbin/distnoted', 'daemon']",1972b5cf085b63fd15d157db20f0393152ab7a0881ffe58295321115ca43f3db,False,""
-/System/Library/LaunchDaemons/com.apple.dnsextd.plist,com.apple.dnsextd,"['/usr/sbin/dnsextd', '-launchd']",0b530ebf70c7066d52429dc50e20cf1b29dd5b89ea2eef58b26bff0c8b9078df,False,""
-/System/Library/LaunchDaemons/com.apple.dpaudiothru.plist,com.apple.dpaudiothru,"['/usr/libexec/dpaudiothru']",38e37420b9c4ff7489ea59a9a7b0d004861cbb86e819e85e693875b7d7aa0a02,False,""
-/System/Library/LaunchDaemons/com.apple.dpd.plist,com.apple.dpd,"['/usr/libexec/dpd']",e4f1fdbde15dd584ee9710455006826f085b03518c95c71a4107a91c1d998bc4,False,""
-/System/Library/LaunchDaemons/com.apple.dprivacyd.plist,com.apple.dprivacyd,"['/usr/libexec/dprivacyd']",f902b5b3f7fcf3f260bda0b3bc1562b4bfb2b8beaad96c7f148e69b0449cc6e2,False,"None"
-/System/Library/LaunchDaemons/com.apple.dspluginhelperd.plist,com.apple.dspluginhelperd,"['/usr/libexec/dspluginhelperd']",433ddc3f05614370163b0f720f659cdf4684cead94c1a222f52831907b4aff5e,False,""
-/System/Library/LaunchDaemons/com.apple.DuetHeuristic-BM-OSX.plist,com.apple.DuetHeuristic-BM,"['/usr/libexec/DuetHeuristic-BM']",dbd1a12743bfc446623286c8fbacc6ba560071f6a4e7178c2c6be3abb0b97cbb,True,"None"
-/System/Library/LaunchDaemons/com.apple.DumpGPURestart.plist,com.apple.DumpGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/DumpGPURestart']",e3f887656934ed62ae14bef41972f060dbfabe8c64c9c4cd48883d03bcf63f66,False,""
-/System/Library/LaunchDaemons/com.apple.DumpPanic.plist,com.apple.DumpPanic,"['/System/Library/CoreServices/DumpPanic']",a26f81ff45268e670151aa9b07fa5a9d30b8260c30c28bbbd1c8a65ba647b385,True,""
-/System/Library/LaunchDaemons/com.apple.dvdplayback.setregion.plist,com.apple.dvdplayback.setregion,"['/usr/bin/setregion']",dd47f095a879cfcc6505fb285041a5e4134d97f72ed79aad85ae9e08b184e14c,False,""
-/System/Library/LaunchDaemons/com.apple.dynamic_pager.plist,com.apple.dynamic_pager,"['/sbin/dynamic_pager', '-F', '/private/var/vm/swapfile']",1a33e7f2c46d72d60e786c76b92a0650245a63c5af66ee725f3ad3eaab36112c,False,""
-/System/Library/LaunchDaemons/com.apple.dz.dznd.plist,com.apple.dz.dznd,"['/usr/libexec/dznd']",c6acb531f85a0dd8a197ec8e3142584acdef730e903b952d7a02eedfce0caf6b,True,"None"
-/System/Library/LaunchDaemons/com.apple.eapolcfg_auth.plist,com.apple.eapolcfg_auth,"['/System/Library/PrivateFrameworks/EAP8021X.framework/Resources/eapolcfg_auth']",ec908905de2462052264ac06753c9117446f0e08969cea64de240c4d372b4f40,False,""
-/System/Library/LaunchDaemons/com.apple.efilogin-helper.plist,com.apple.efilogin-helper,"['/System/Library/PrivateFrameworks/EFILogin.framework/Resources/efilogin-helper']",4f7aa381d36062467460adec06f2c91629d10744c58bf4b217b228a8b1e2f1ed,False,""
-/System/Library/LaunchDaemons/com.apple.emlog.plist,com.apple.emlog,"['/usr/libexec/emlog.pl']",5328f0d109c2b421f0845c0d0fe0efb58734297dca5f8708dc5bda4fea57f634,False,""
-/System/Library/LaunchDaemons/com.apple.emond.aslmanager.plist,com.apple.emond.aslmanager,"['/usr/sbin/aslmanager', '-s', '/var/log/eventmonitor']",e8f68d5c100be24b8c45625c850ae776222ca14ad5617daea9d9be1084bf125e,False,""
-/System/Library/LaunchDaemons/com.apple.emond.plist,com.apple.emond,"['/sbin/emond']",f62a88d9cf1b96461149321f5db34b341d60a277f9a470d32a19696722ca8802,False,""
-/System/Library/LaunchDaemons/com.apple.eppc.plist,com.apple.AEServer,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/AE.framework/Versions/A/Support/AEServer', '--debug']",f404b13be91c4489690b008ef53eb84dc1ac03bf97f388b9f95c53f7747ed3f7,False,""
-/System/Library/LaunchDaemons/com.apple.familycontrols.plist,com.apple.familycontrols,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/parentalcontrolsd']",1f16ce8a0946e3d8694db92ae0ab1f84a98d20bad22adcb121fc6286b43520c4,False,""
-/System/Library/LaunchDaemons/com.apple.FileCoordination.plist,com.apple.FileCoordination,"['/usr/sbin/filecoordinationd']",563972c75818b2406154b57b53dcfffc4733edd585cfa564b7522e66220c345f,False,""
-/System/Library/LaunchDaemons/com.apple.findmymac.plist,com.apple.findmymacd,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacd']",63b6b215abdc70b06df0ab1337b12ae111b8ab1b460d5fb7f6ac310d5e130410,False,""
-/System/Library/LaunchDaemons/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",0a23396d2c23805801779a8a98d030d0d7dd9c030a81ea0943e47caa9fbe2b95,False,"iCloud Find My Mac feature daemon"
-/System/Library/LaunchDaemons/com.apple.firmwaresyncd.plist,com.apple.firmwaresyncd,"['/usr/libexec/firmwaresyncd']",dc766cc977ed2249db932526a1e3b6280014e94784649f58a7ddede688d1f46a,True,""
-/System/Library/LaunchDaemons/com.apple.fontd.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",1a2f22229a71b23e9d0f99bd0657fa3a0bf2ef6356b954503c34b3267fbcd58c,False,""
-/System/Library/LaunchDaemons/com.apple.fontmover.plist,com.apple.fontmover,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontmover', '-d']",e8eeb8da52d1ff2cee28a4cfd312a3c8b8e2a6851c5fb232742474e24ba97073,False,""
-/System/Library/LaunchDaemons/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",824f81a46ba59bd26765aadf0776a95165356ff8fcd752a1b697a4f171de3fd6,False,""
-/System/Library/LaunchDaemons/com.apple.fseventsd.plist,com.apple.fseventsd,"['/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd']",232dcfea659f1a5a40bdb24592aacda2a40a3c76d02a6904768a4ba2f3564df3,False,""
-/System/Library/LaunchDaemons/com.apple.ftp-proxy.plist,com.apple.ftp-proxy,"['/usr/libexec/ftp-proxy']",5e972b121f32bcd6e5c7de2c13c6f442591bc3583ab387c2545eebf997416ab9,False,""
-/System/Library/LaunchDaemons/com.apple.GameController.gamecontrollerd.plist,com.apple.GameController.gamecontrollerd,"['/usr/libexec/gamecontrollerd']",435f1b5d1aa99a7bdc082e2461ebb2dca388889f88b35c2344ec6744b706133a,False,""
-/System/Library/LaunchDaemons/com.apple.getty.plist,com.apple.getty,"['/usr/libexec/getty', 'std.9600', 'console']",db76b36c87af09cf623e2cec8397832e9db85c9db60c35df92b722720847c188,False,""
-/System/Library/LaunchDaemons/com.apple.gkreport.plist,com.apple.gkreport,"['/usr/libexec/gkreport']",67d87aca1bb268cbb4578f637f0c2ceec3cc1d6cc259eb7584bec0eac2fb34c7,False,""
-/System/Library/LaunchDaemons/com.apple.GSSCred.plist,com.apple.GSSCred,"['/System/Library/Frameworks/GSS.framework/Helpers/com.apple.GSSCred']",2d878cffd5dfc1d8cfbda3a4e86f96d7843459521d31cafc984a89111d505e8a,False,""
-/System/Library/LaunchDaemons/com.apple.gssd.plist,com.apple.gssd,"['/usr/sbin/gssd']",bd7dea62b94a27c48e7f759463cf2728fce48e3758bb3fd11191c76173a61f80,False,""
-/System/Library/LaunchDaemons/com.apple.hdiejectd.plist,com.apple.hdiejectd,"['/System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd']",277459d7bb64c0ae1026a262dbb3880bfd631cf64c19abdeb5a34eeefe737545,False,""
-/System/Library/LaunchDaemons/com.apple.hidd.plist,com.apple.hidd,"['/usr/libexec/hidd']",1720e8371c41e5387edcf05bde91eb31e6799808612a6fb28b375ff31a6b7e32,False,""
-/System/Library/LaunchDaemons/com.apple.hidfud.plist,com.apple.hidfud,"['/System/Library/CoreServices/HID/FirmwareUpdates/hidfud']",f6be1e00a2bcefdb828e787937ee76af5833a51c8df632c9db0cda77905cac61,False,"None"
-/System/Library/LaunchDaemons/com.apple.icloud.findmydeviced.plist,com.apple.icloud.findmydeviced,"['/usr/libexec/findmydeviced']",090be3007763ccb46b7cffa2ed0f8ff958bc1156878da1a705ce953bf3bb8876,False,""
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",6d4fa344e7c5789db51abf041e79fb085589ee12031cede5458e2d70d3c4ee15,True,""
-/System/Library/LaunchDaemons/com.apple.iconservices.iconservicesd.plist,com.apple.iconservices.iconservicesd,"['/System/Library/CoreServices/iconservicesd']",e06ade62ad04fcbd3f66ba84b275202a16184fa7bbe9a61b7159f0b2ccd289a2,True,""
-/System/Library/LaunchDaemons/com.apple.IFCStart.plist,com.apple.IFCStart,"['/usr/libexec/ifcstart']",904f965b1d79959257cf247c9af75495dfb5a28790fee23ab66402791fe268d4,True,""
-/System/Library/LaunchDaemons/com.apple.ifdreader.plist,com.apple.ifdreader,"['/System/Library/CryptoTokenKit/com.apple.ifdreader.slotd/Contents/MacOS/com.apple.ifdreader']",4492e612f98bb21d1bb509b820e4e18444ebfdb9cc0b850b7983544ad581b0e2,False,""
-/System/Library/LaunchDaemons/com.apple.installandsetup.systemmigrationd.plist,com.apple.installandsetup.systemmigrationd,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/systemmigrationd']",7d0d46765bb5695c5982b68711ce6d3fef9c81d92673c0f9c00a3430213bb777,False,""
-/System/Library/LaunchDaemons/com.apple.installd.plist,com.apple.installd,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",828d83797f7a6aacad52d10ec546941ccbc649f315dc85271c536a830db4d38c,False,""
-/System/Library/LaunchDaemons/com.apple.InstallerDiagnostics.installerdiagd.plist,com.apple.InstallerDiagnostics.installerdiagd,"['/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagd']",8d900d5d8247fcbc8b2c1ee40ad008acb22cf4bfe2af7024407e8d71d3f74195,False,"None"
-/System/Library/LaunchDaemons/com.apple.InstallerDiagnostics.installerdiagwatcher.plist,com.apple.InstallerDiagnostics.installerdiagwatcher,"['/System/Library/PrivateFrameworks/InstallerDiagnostics.framework/Versions/A/Resources/installerdiagwatcher']",8305cded2daf19c01d47af5e8c5a4e1e54e64ec575f143d090f125d15dc73369,True,"None"
-/System/Library/LaunchDaemons/com.apple.InstallerProgress.plist,com.apple.InstallerProgress,"['/System/Library/CoreServices/Installer Progress.app/Contents/MacOS/Installer Progress', '--showProgress']",c5827808788413706ab7dd0414d987f382d6d444005ae0019c5f1337dfb0541b,True,"None"
-/System/Library/LaunchDaemons/com.apple.IOAccelMemoryInfoCollector.plist,com.apple.IOAccelMemoryInfoCollector,"['/usr/libexec/IOAccelMemoryInfoCollector']",30a60cb314b8d974c60ee88ea47ff600ad1f0128f77c781742efd2fa3ba07988,False,""
-/System/Library/LaunchDaemons/com.apple.IOBluetoothUSBDFU.plist,com.apple.IOBluetoothUSBDFU,"['/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothUSBDFU.kext/Contents/Resources/IOBluetoothUSBDFUTool']",2da027c9783896b74544e3aa2fe51dd0fb1b37a698ed22671249dd80f06faa7a,False,""
-/System/Library/LaunchDaemons/com.apple.ionodecache.plist,com.apple.ionodecache,"['/System/Library/CoreServices/ionodecache', '-k', '/var/db/ionodecache.json']",3d6f8939719be0d71244faced1d99638045cd6323f3fdad6859bf8142b9b3320,True,"None"
-/System/Library/LaunchDaemons/com.apple.kcproxy.plist,com.apple.kcproxy,"['/usr/libexec/kcproxy']",3f6e60beca8c7527d8e3f4a2f2129478b00f450f1ae49ac145965566053aa0fa,False,""
-/System/Library/LaunchDaemons/com.apple.kdumpd.plist,com.apple.kdumpd,"['/usr/libexec/kdumpd', '/PanicDumps']",bab44ae93c29b45e82d9c38bd29f04b77220026aaaa1388427f3e67c3965fddd,False,""
-/System/Library/LaunchDaemons/com.apple.Kerberos.digest-service.plist,com.apple.Kerberos.digest-service,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/digest-service']",0824bbaa5cd52d7d4276ede8fbb78029cde258c750e615c0b1daca5649d4b8bf,False,""
-/System/Library/LaunchDaemons/com.apple.Kerberos.kadmind.plist,com.apple.Kerberos.kadmind,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kadmind']",1b6c1b2e29fa512579dbc3a58208efc389da03178998324beb708e3114e7b94d,False,""
-/System/Library/LaunchDaemons/com.apple.Kerberos.kcm.plist,com.apple.Kerberos.kcm,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kcm', '--launchd']",a8dc811afd4933945d872fc2f4ca4ae0b816918396476478819086fb06a6abaf,False,""
-/System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist,com.apple.Kerberos.kdc,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kdc']",5e3c3ec521fdef2018288c3ca1299fdcd0bd2abd022575972ed69e516d9d2638,False,""
-/System/Library/LaunchDaemons/com.apple.Kerberos.kpasswdd.plist,com.apple.Kerberos.kpasswdd,"['/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kpasswdd']",57281d1c93cf3cab2e0b11972c733b95714b08bc91423332e6e531680a0b8c27,False,""
-/System/Library/LaunchDaemons/com.apple.KernelEventAgent.plist,com.apple.KernelEventAgent,"['/usr/sbin/KernelEventAgent']",504016d4c6179b684bd5b5a851de74a5c7af06e74c818fb615400c8f6385748e,False,"Responsible for displaying disk full and unresponsive file server messages"
-/System/Library/LaunchDaemons/com.apple.kextd.plist,com.apple.kextd,"['/usr/libexec/kextd']",3d9a010161888f4a6e7e74bd94809f20029627921f496ad4550f5121ee2f2f2a,False,""
-/System/Library/LaunchDaemons/com.apple.kuncd.plist,com.apple.kuncd,"['/usr/libexec/kuncd']",35f8af8eaafc65951d23c03e43d2aab724d0b2eee5e92f49ab862e64b4cfc57f,False,""
-/System/Library/LaunchDaemons/com.apple.locate.plist,com.apple.locate,"['/usr/libexec/locate.updatedb']",7bf77fbcfaec0c33e7649a919872c45584fe65b8d1924cbe25b14ed799b6ff1c,False,""
-/System/Library/LaunchDaemons/com.apple.locationd.plist,com.apple.locationd,"['/usr/libexec/locationd']",d888c6850f72af44435246838facf1287ff92ebd935c35f82f98173b72325c9f,False,"Location daemon"
-/System/Library/LaunchDaemons/com.apple.lockd.plist,com.apple.lockd,"['/usr/sbin/rpc.lockd']",cf4776d5e158a7b7b5c0b3f8e051300cf92fd63168b629696df150b1ce277f82,False,""
-/System/Library/LaunchDaemons/com.apple.logd.plist,com.apple.logd,"['/usr/libexec/logd']",9c7334124cb10008d8b3c0bc516110c53a7792f6e279b8febce137b0f72c4ed8,True,""
-/System/Library/LaunchDaemons/com.apple.logind.plist,com.apple.logind,"['/System/Library/CoreServices/logind']",71b1b016dd63e7466c4745e3ec8cfa08d420128b7728b6dfa1ab321d763a84ae,True,""
-/System/Library/LaunchDaemons/com.apple.loginwindow.LFVTracer.plist,com.apple.loginwindow.LFVTracer,"['/System/Library/CoreServices/loginwindow.app/Contents/Resources/LegacyFileVaultMessageTracer']",eb8fe267c3994cd8e1fdefc314a042fb1ebc188eaf23e3979c511a1a84717183,False,""
-/System/Library/LaunchDaemons/com.apple.loginwindow.plist,com.apple.loginwindow,"['/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow', 'console']",9c3103e40d3f13ff2de6f344732d9ba1103a301bbe32f782974dd0be44daecde,False,""
-/System/Library/LaunchDaemons/com.apple.logkextloadsd.plist,com.apple.logkextloadsd,"['/usr/libexec/logkextloadsd']",91ecc95c6c0e80b54283969b16556c9be8c6deffc4ff12fda1e46a7f04140d5c,False,""
-/System/Library/LaunchDaemons/com.apple.lsd.plist,com.apple.lsd,"['/usr/libexec/lsd', 'runAsRoot']",471ac181fab5fbeab8a4b27fe98258730da618bf585a892e5c2f6fc8c7cf3af5,False,""
-/System/Library/LaunchDaemons/com.apple.ManagedClient.cloudconfigurationd.plist,com.apple.ManagedClient.cloudconfigurationd,"['/usr/libexec/cloudconfigurationd']",9281cc7db2d3fb15631ce3c73c2de720a1da8af5958d8a70faf87e0b7ba104b4,False,""
-/System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist,com.apple.ManagedClient.enroll,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-e']",36f569d3e3afcf12153239906423ed2d918b510a7c2e8d31b4b9a18470d9d82e,False,""
-/System/Library/LaunchDaemons/com.apple.ManagedClient.plist,com.apple.ManagedClient,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient']",36f569d3e3afcf12153239906423ed2d918b510a7c2e8d31b4b9a18470d9d82e,False,""
-/System/Library/LaunchDaemons/com.apple.ManagedClient.startup.plist,com.apple.ManagedClient.startup,"['/System/Library/CoreServices/ManagedClient.app/Contents/MacOS/ManagedClient', '-i']",36f569d3e3afcf12153239906423ed2d918b510a7c2e8d31b4b9a18470d9d82e,True,""
-/System/Library/LaunchDaemons/com.apple.mbsystemadministration.plist,com.apple.mbsystemadministration,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbsystemadministration']",4633f871f3f14f1dcf78cfd8d69fa065f4e634c466650fabbbf6cfc4205f73e6,False,""
-/System/Library/LaunchDaemons/com.apple.mbusertrampoline.plist,com.apple.mbusertrampoline,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbusertrampoline']",a8816cc411a02ae0da81f0f14c78e29811a4a2b924c76c873ef80b419af726f3,False,""
-/System/Library/LaunchDaemons/com.apple.mdmclient.daemon.plist,com.apple.mdmclient.daemon,"['/usr/libexec/mdmclient', 'daemon']",eecee657f6678b5bbbada7b0cda002fb5341385ee51fa4e3b0fa6e6d1dca771e,False,""
-/System/Library/LaunchDaemons/com.apple.mdmclient.daemon.runatboot.plist,com.apple.mdmclient.daemon.runatboot,"['/usr/libexec/mdmclient', 'rundaemon']",eecee657f6678b5bbbada7b0cda002fb5341385ee51fa4e3b0fa6e6d1dca771e,True,""
-/System/Library/LaunchDaemons/com.apple.mDNSResponder.plist,com.apple.mDNSResponder.reloaded,"['/usr/sbin/mDNSResponder']",8d2f4d87199943744a739efe29b0333d540858af0080038beb98dd2e4248c239,False,""
-/System/Library/LaunchDaemons/com.apple.mDNSResponderHelper.plist,com.apple.mDNSResponderHelper.reloaded,"['/usr/sbin/mDNSResponderHelper']",cd39e10fb367f3de0813d03174d8ec4c28ad80c291ffab2be5e0c0fd1e696342,False,""
-/System/Library/LaunchDaemons/com.apple.mediaremoted.plist,com.apple.mediaremoted,"['/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted']",36e80ad5ab9553496e032d18992974e25a2f4141e045d444b0239213ac89d727,False,"None"
-/System/Library/LaunchDaemons/com.apple.metadata.mds.index.plist,com.apple.metadata.mds.index,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores']",7a5de9535f6c906efb8a0ceed6c41c5087719c7f3dff9034626d58ede8888482,False,""
-/System/Library/LaunchDaemons/com.apple.metadata.mds.plist,com.apple.metadata.mds,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds']",2cd40d8500a3970734ed7c7826e0414c76dcee98527b39ee872f0aadbe2b8030,False,""
-/System/Library/LaunchDaemons/com.apple.metadata.mds.scan.plist,com.apple.metadata.mds.scan,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-scan', '-c', 'MDSSyncScanWorker', '-m', 'com.apple.metadata.mds.scan']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchDaemons/com.apple.metadata.mds.spindump.plist,com.apple.metadata.mds.spindump,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'none', '-c', 'MDSSpinDumpWorker', '-m', 'com.apple.metadata.mds.spindump']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchDaemons/com.apple.mobile.fud.plist,com.apple.MobileAccessoryUpdater,"['/System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/Support/fud', '30']",06976949adc020cffbf26b751319c7dfe4cc656e3e2ddfcce7f0c33512c86b5a,True,"None"
-/System/Library/LaunchDaemons/com.apple.mobile.keybagd.plist,com.apple.mobile.keybagd,"['/usr/libexec/keybagd', '-t', '15']",UNKNOWN,True,"None"
-/System/Library/LaunchDaemons/com.apple.mobileassetd.plist,com.apple.mobileassetd,"['/usr/libexec/mobileassetd']",1988a6723b0fc0a907b36fc26ef15a576882464984fe4a8f36d53a6767cce8da,True,"None"
-/System/Library/LaunchDaemons/com.apple.MobileFileIntegrity.plist,com.apple.MobileFileIntegrity,"['/usr/libexec/amfid']",aa1c281ce65abe3574573ed749b64745200280629c2c285aa56c02630abc929a,False,""
-/System/Library/LaunchDaemons/com.apple.MRTd.plist,com.apple.MRTd,"['/System/Library/CoreServices/MRT.app/Contents/MacOS/MRT', '-d']",0100350f46e5f61a4e66fb90cc1a49c0bb60ccb502a6c28b2b96136a1d3aa47e,True,""
-/System/Library/LaunchDaemons/com.apple.msrpc.echosvc.plist,com.apple.msrpc.echosvc,"['/usr/libexec/rpcsvchost', '-launchd', 'echosvc.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.msrpc.lsarpc.plist,com.apple.msrpc.lsarpc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'lsarpc.bundle', 'dssetup.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.msrpc.mdssvc.plist,com.apple.msrpc.mdssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'mdssvc.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.msrpc.netlogon.plist,com.apple.msrpc.netlogon,"['/usr/libexec/rpcsvchost', '-launchd', 'netlogon.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.msrpc.srvsvc.plist,com.apple.msrpc.srvsvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'srvsvc.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.msrpc.wkssvc.plist,com.apple.msrpc.wkssvc,"['/usr/libexec/rpcsvchost', '-launchd', '-sandbox', 'wkssvc.bundle']",3bff6dda8d3ccf7fb9392f354a0d25d6c33f3ce3b520937eec58e332c556c788,False,""
-/System/Library/LaunchDaemons/com.apple.mtmd.plist,com.apple.mtmd,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd']",ce30a17d3582fc47db96ee79bda92865f1b0c68be0157d349ec1728afcb24c29,False,""
-/System/Library/LaunchDaemons/com.apple.mtmfs.plist,com.apple.mtmfs,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmfs', '--tcp', '--resvport', '--listen', 'localhost', '--oneshot', '--noportmap', '--nobrowse']",0234ebd297ca5a6fc7322e6c0e7343ae98fac45680b78d9ceb011717c8a3776a,True,""
-/System/Library/LaunchDaemons/com.apple.mtmhelper.plist,com.apple.mtmhelper,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmhelper']",368e51e8e16c518adcca8c3ff051108b458e7005cff4f9431cb63cb71dd8232b,False,"None"
-/System/Library/LaunchDaemons/com.apple.nehelper.plist,com.apple.nehelper,"['/usr/libexec/nehelper']",6f1168dce811450d2bed3338aa0d84706fe10008e1ad343d9840097d4690e935,False,""
-/System/Library/LaunchDaemons/com.apple.nesessionmanager.plist,com.apple.nesessionmanager,"['/usr/libexec/nesessionmanager']",a2313bdec063c66f93640bea729e777a768936890a63942460508342065cffac,False,""
-/System/Library/LaunchDaemons/com.apple.netauth.sys.auth.plist,com.apple.netauth.sys.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent', '--sys']",eee74a6ea16f475de659b6a18ddf92e9a6b51f0fbf73bbcdc9b8a242b7e54a37,False,""
-/System/Library/LaunchDaemons/com.apple.netauth.sys.gui.plist,com.apple.netauth.sys.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent', '--sys']",74d2a6ab4247631a21eb33d14fb33f7bde7bee59db6c4f7203e1dc98f494efa5,False,""
-/System/Library/LaunchDaemons/com.apple.netbiosd.plist,com.apple.netbiosd,"['/usr/sbin/netbiosd']",38c9cba0eaad41034f555f8cb8099c9a377e245e70d478ed46691d775ab739c2,False,"netbiosd is responsible for interacting with NetBIOS networks."
-/System/Library/LaunchDaemons/com.apple.NetBootClientStatus.plist,com.apple.NetBootClientStatus,"['/usr/sbin/NetBootClientStatus']",e88e3051ce748b24feb0409d16d023d6a048187ecb91de5cb9da63ff05f0bfef,True,""
-/System/Library/LaunchDaemons/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",4ac7acbfe00efa3586025c4bf7fb50f5e7877a8e580ac7c41a05a8e08cb01b4a,False,""
-/System/Library/LaunchDaemons/com.apple.NetworkLinkConditioner.plist,com.apple.nlcd,"['/usr/libexec/nlcd']",0cafc5fd26322275aa318ac997ea3ba001360aea15b26ac4a864b4d143a158c9,False,""
-/System/Library/LaunchDaemons/com.apple.NetworkSharing.plist,com.apple.NetworkSharing,"['/usr/libexec/InternetSharing']",c4aa376292272e82b73591bd8a66dd1b64bc74e3910702cca510c8c43bc6076f,False,""
-/System/Library/LaunchDaemons/com.apple.newsyslog.plist,com.apple.newsyslog,"['/usr/sbin/newsyslog']",fe693096f251cafb6571f57b9b4533b663989d029e9ff8e21f0bb360441aabc3,False,""
-/System/Library/LaunchDaemons/com.apple.nfsconf.plist,com.apple.nfsconf,"['/sbin/mount_nfs', 'configupdate']",4f6274a5d159721367dbee3aeb83c6162e4b30416c485f2f436d365cc2adbb07,True,""
-/System/Library/LaunchDaemons/com.apple.nfsd.plist,com.apple.nfsd,"['/sbin/nfsd']",c4b6a3bf723ff8406afeb0a7a65fe40214523604ead869897faca76b494c7d70,False,""
-/System/Library/LaunchDaemons/com.apple.nis.ypbind.plist,com.apple.nis.ypbind,"['/usr/sbin/ypbind']",76d986098cfb3f18f7c64b86cd1e2deea60740f30ff7d21d8bda9302c81abb5b,False,""
-/System/Library/LaunchDaemons/com.apple.noticeboard.state.plist,com.apple.noticeboard.state,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbstated']",607672fc358fb53e046b77149a5575e72567c16586cd6e739d724b0588809af3,False,""
-/System/Library/LaunchDaemons/com.apple.notifyd.plist,com.apple.notifyd,"['/usr/sbin/notifyd']",8755b590b54ec213b09214d77b973aede008a38bb328a51381fc3d8e8dd3a23b,False,""
-/System/Library/LaunchDaemons/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond_privileged,"['/usr/libexec/nsurlsessiond', '--privileged']",e398a8b6495aad49af02a3a5200ecd649832b0b8dd255b400a1a37d13559a0d2,False,""
-/System/Library/LaunchDaemons/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",7b73d6259e96cdfb749d0b6c143b5333ad3d8fda7be151abd2698823e7b7b4c7,False,""
-/System/Library/LaunchDaemons/com.apple.ocspd.plist,com.apple.ocspd,"['/usr/sbin/ocspd']",58f7874dc86b11738fe2d3195b9305f36abca4c40b9e4d4fb7c2317e49600963,False,"Performs caching and network fetching of CRLs and OCSP responses, used by Security.framework during certificate verification"
-/System/Library/LaunchDaemons/com.apple.odproxyd.plist,com.apple.odproxyd,"['/usr/libexec/odproxyd']",d7c1b6c118d19764de28ee2e02790d29697964ee23e157b182ce2f8af7b0018c,False,""
-/System/Library/LaunchDaemons/com.apple.ODSAgent.plist,com.apple.ODSAgent,"['/System/Library/CoreServices/ODSAgent.app/Contents/MacOS/ODSAgent', '-launchd']",f2f7e56a75a7af3f1133dcd640ad1f114c3705dd1f369c8b6b97ee432b2241f7,False,""
-/System/Library/LaunchDaemons/com.apple.opendirectoryd.plist,com.apple.opendirectoryd,"['/usr/libexec/opendirectoryd']",076b6e3c99d284082b20378cef66161253ba9f29795a3ca073cb155c505288f2,False,""
-/System/Library/LaunchDaemons/com.apple.PasswordService.plist,com.apple.PasswordService,"['/usr/sbin/PasswordService', '-n']",73ab1e7d0c9002c79332453a97b485e5560773969ab7a9acea72420de1bdd41b,False,""
-/System/Library/LaunchDaemons/com.apple.PCIELaneConfigTool.plist,com.apple.PCIELaneConfigTool,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIELaneConfigTool']",a79fe92de96951f9a61b67e19a657c9627369c0fa9a7be0b2a05e82a9cfad959,False,""
-/System/Library/LaunchDaemons/com.apple.periodic-daily.plist,com.apple.periodic-daily,"['/usr/libexec/periodic-wrapper', 'daily']",b2b8416c858c6caeb44eaab15949949a74e334c143ff3045682afdd5928b5f90,False,""
-/System/Library/LaunchDaemons/com.apple.periodic-monthly.plist,com.apple.periodic-monthly,"['/usr/libexec/periodic-wrapper', 'monthly']",b2b8416c858c6caeb44eaab15949949a74e334c143ff3045682afdd5928b5f90,False,""
-/System/Library/LaunchDaemons/com.apple.periodic-weekly.plist,com.apple.periodic-weekly,"['/usr/libexec/periodic-wrapper', 'weekly']",b2b8416c858c6caeb44eaab15949949a74e334c143ff3045682afdd5928b5f90,False,""
-/System/Library/LaunchDaemons/com.apple.pfctl.plist,com.apple.pfctl,"['/sbin/pfctl']",b5b3095a6413ff6116076833701020484ca34fe7d2718e063902fc3339d75752,True,""
-/System/Library/LaunchDaemons/com.apple.pfd.plist,com.apple.pfd,"['/usr/libexec/pfd']",d7cdc96fbeecce26ed4a9d58463ce78f77eb3b5561ad54a893707216c97aee9f,False,""
-/System/Library/LaunchDaemons/com.apple.platform.ptmd.plist,com.apple.platform.ptmd,"['/usr/libexec/ptmd']",fdab669bd73899d68be61711cba2a94c4159a10ffad69535acdfcf4dd0d5f29f,True,""
-/System/Library/LaunchDaemons/com.apple.postfix.master.plist,com.apple.postfix.master,"['/usr/libexec/postfix/master']",53c71cdbe29be2d55ae442f9a2aac1b354f08f063b00bc125882eb74e4c4fa44,False,"None"
-/System/Library/LaunchDaemons/com.apple.postfix.newaliases.plist,com.apple.postfix.newaliases,"['/usr/libexec/postfix/check-aliases.sh']",85836505e7beee66772dc51df302e9c2eefcfe3f2349681a43fb3c0a1c51ad74,True,"None"
-/System/Library/LaunchDaemons/com.apple.powerd.plist,com.apple.powerd,"['/System/Library/CoreServices/powerd.bundle/powerd']",b2a87d34cb3fe61bb768d07cac831a5d2a25a37a672e2cd825413f80b322b121,False,""
-/System/Library/LaunchDaemons/com.apple.powerd.swd.plist,com.apple.powerd.swd,"['/System/Library/CoreServices/powerd.bundle/swd']",c034f54d25aeffb6138dfca59cd223bd3540d42299f7b981997a44c6604be15b,False,""
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.admintool.plist,com.apple.preferences.timezone.admintool,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/TimeZoneAdminTool']",fa176cf3a0054fb12a04df8bc6fcfc413e79d4f5528ac1d4fea5d21d44ebbe8b,False,""
-/System/Library/LaunchDaemons/com.apple.preferences.timezone.auto.plist,com.apple.preferences.timezone.auto,"['/System/Library/PreferencePanes/DateAndTime.prefPane/Contents/Resources/TimeZone.prefPane/Contents/Resources/timezoned.app/Contents/MacOS/timezoned']",9826b2824962a61fefefdeff14e91606de45e3e634ab2de0ac4aa65184f5d5b8,False,""
-/System/Library/LaunchDaemons/com.apple.printtool.daemon.plist,com.apple.printtool.daemon,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'daemon']",eaf12c090dd671bbf82116de2d7c175ea775610b0b3a7c18626b54dfae0679e2,False,""
-/System/Library/LaunchDaemons/com.apple.racoon.plist,com.apple.racoon,"['/usr/sbin/racoon', '-D']",cba7f87d290cfeb7dd2184ec6af7757b04a92f5f6e353621d2dd2d42023238d9,False,"Built-in VPN key management daemon"
-/System/Library/LaunchDaemons/com.apple.RemoteDesktop.PrivilegeProxy.plist,com.apple.RemoteDesktop.PrivilegeProxy,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/VNCPrivilegeProxy']",8c95c42276f863bc37529f44d9956ab6efc9415c3720f5d853fdcee8e6a0af19,False,""
-/System/Library/LaunchDaemons/com.apple.remotepairtool.plist,com.apple.RemotePairTool,"['/System/Library/CoreServices/RemotePairTool']",d759003427d479d0707db18eac8fab923bdf7e1dab357dfcdb5bd9ffb24e2cfd,False,""
-/System/Library/LaunchDaemons/com.apple.ReportCrash.Root.plist,com.apple.ReportCrash.Root,"['/System/Library/CoreServices/ReportCrash']",a64d420ec2bc8d826c8298072c279b17061e796759db64f719b1dbd9ae510279,False,""
-/System/Library/LaunchDaemons/com.apple.ReportPanicService.plist,com.apple.ReportPanicService,"['/System/Library/CoreServices/ReportPanicService']",656fe433407d03ac8b3e077efedec0a8b5bf68980b5d3aaa394cad47a3b5da80,False,""
-/System/Library/LaunchDaemons/com.apple.revisiond.plist,com.apple.revisiond,"['/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond']",d8708a2eaff2a994d93069ae10ff7de8c4ce5ed4427e74f752c0c58e5f22d42b,True,""
-/System/Library/LaunchDaemons/com.apple.RFBEventHelper.plist,com.apple.RFBEventHelper,"['/System/Library/CoreServices/RFBEventHelper.bundle/Contents/MacOS/RFBEventHelperd']",af93779c5e12f9fe2f9feb014e0b59f01854d9fb520a42e6d84556df238f1739,False,""
-/System/Library/LaunchDaemons/com.apple.rootless.init.plist,com.apple.rootless.init,"['/usr/libexec/rootless-init']",547d750fbaeeec80788199af46cb83080fde9756249c54623bbb888bd504ca1f,False,""
-/System/Library/LaunchDaemons/com.apple.rpcbind.plist,com.apple.rpcbind,"['/usr/sbin/rpcbind']",16f3bf97fbf96fbfbaac0238f855d3980c2f566b3e2b20e5441831effe6c384b,False,""
-/System/Library/LaunchDaemons/com.apple.rtcreportingd.plist,com.apple.rtcreportingd,"['/usr/libexec/rtcreportingd']",08a51edea24c34c3b9041f8cc727d5c0eaecb6f3be90ba9204766a4c71cff262,False,""
-/System/Library/LaunchDaemons/com.apple.sandboxd.plist,com.apple.sandboxd,"['/usr/libexec/sandboxd']",53159fd4e9f84663d210ec2e30ead78c50e87c5c2b3722bc1e41fd54e0c04b05,False,""
-/System/Library/LaunchDaemons/com.apple.SCHelper.plist,com.apple.SCHelper,"['/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Helpers/SCHelper']",2a616e862bd65ba5f72c1a4cb2ac7ad1b91d6fce741ee4a3c26ac1304e1d455b,False,""
-/System/Library/LaunchDaemons/com.apple.screensharing.plist,com.apple.screensharing,"['/System/Library/CoreServices/RemoteManagement/screensharingd.bundle/Contents/MacOS/screensharingd']",48410645c83e4f7547fc5618c6ae410232ee6544b3e291ee3dc881ef580a1539,False,""
-/System/Library/LaunchDaemons/com.apple.scsid.plist,com.apple.scsid,"['/usr/libexec/scsid']",92fa2143bbdd6fe44c8fed24bbde2729d8b18539f8fe8d4def0a26ea1f904f42,True,""
-/System/Library/LaunchDaemons/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",3de685f119f1c94f99ff2867106f086a0c37db53bc80c4369e03611f4d64fae3,False,""
-/System/Library/LaunchDaemons/com.apple.security.agent.login.plist,com.apple.security.agent.login,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent']",bd1a5f8764e5f479bb094e4a08b7c314d24be3ee1f8dff9a6e12007f9d131d4f,False,""
-/System/Library/LaunchDaemons/com.apple.security.authhost.plist,com.apple.security.authhost,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/authorizationhost.bundle/Contents/MacOS/authorizationhost']",726df637d0a331b199cd1258dba90b2d8e15b1b49fe95028e06b9d41a813eea3,False,""
-/System/Library/LaunchDaemons/com.apple.security.FDERecoveryAgent.plist,com.apple.security.FDERecoveryAgent,"['/usr/libexec/FDERecoveryAgent']",80ece19c945b2ff894648ddcdcf24d70d3cacac30298971ebf5a007327c61393,True,""
-/System/Library/LaunchDaemons/com.apple.security.syspolicy.plist,com.apple.security.syspolicy,"['/usr/libexec/syspolicyd']",1f14996689a3149ac93cadb263c1c095667154b3aba041196549961947a10603,False,""
-/System/Library/LaunchDaemons/com.apple.securityd.plist,com.apple.securityd,"['/usr/sbin/securityd', '-i']",f61c8eb53e0fa0fb49f07c22be058fe83c4ecfa97fb97332a60c794d41b5f0b7,True,""
-/System/Library/LaunchDaemons/com.apple.securityd_service.plist,com.apple.securityd_service,"['/usr/libexec/securityd_service']",186d1e61543c4a3875e6318864e0d1b2f4f4df4c9b74377c0622b5a3dc8c71c0,False,""
-/System/Library/LaunchDaemons/com.apple.sessionlogoutd.plist,com.apple.sessionlogoutd,"['/System/Library/CoreServices/sessionlogoutd']",095f461429ada2163ed91684e8ec32b9dc33ae8aa7e8b73d4ccf300ecbf2fa71,False,""
-/System/Library/LaunchDaemons/com.apple.smb.preferences.plist,com.apple.smb.preferences,"['/usr/libexec/smb-sync-preferences']",3b2fd1c4b1db41b6d8f59e377b015b298f399236bb19a1816a76c6fca22156d1,True,""
-/System/Library/LaunchDaemons/com.apple.smbd.plist,com.apple.smbd,"['/usr/sbin/smbd']",af500c02afeadf4c11c24e5faf178f927e4c0731b1c9bd2e3c338441d9c2fe48,False,""
-/System/Library/LaunchDaemons/com.apple.softwareupdate_download_service.plist,com.apple.softwareupdate_download_service,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_download_service']",1c809811e04df0158383b51680d13850e273f69e9f3029778a25cfbf029f76ac,False,""
-/System/Library/LaunchDaemons/com.apple.softwareupdate_firstrun_tasks.plist,com.apple.softwareupdate_firstrun_tasks,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_firstrun_tasks', '-BuildTagCache', 'YES']",cf8c72a022e8c418802f06248ddcd5977e6d7ad8d1ed9b01a61a065539ae6443,True,"None"
-/System/Library/LaunchDaemons/com.apple.softwareupdated.plist,com.apple.softwareupdated,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdated']",a26efebee17a028b8d9b3824fecdd80b0741de4c76793b2972c66ddd0a8f6e13,False,""
-/System/Library/LaunchDaemons/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",d37eec8945fe3d7a4f29c241eff0b35da57fa1ec74672771fbf3239ea1d1917e,False,""
-/System/Library/LaunchDaemons/com.apple.spindump.plist,com.apple.spindump,"['/usr/sbin/spindump']",9bd9e44331646026255052ee1142d3be0219291b4fa6f69efac2660fa3d5d5dd,False,""
-/System/Library/LaunchDaemons/com.apple.startupdiskhelper.plist,com.apple.startupdiskhelper,"['/usr/libexec/startupdiskhelper']",a040058c2c9843c0a17a96dd647ec1a276ae0cddf852c5c063920f690beccaa2,False,"None"
-/System/Library/LaunchDaemons/com.apple.statd.notify.plist,com.apple.statd.notify,"['/usr/sbin/rpc.statd', '-n']",dbc565426f75e2345b1fb2e8317869811602b61b72081db8cc7f9bba12a497da,True,""
-/System/Library/LaunchDaemons/com.apple.storagekitd.plist,com.apple.storagekitd,"['/System/Library/PrivateFrameworks/StorageKit.framework/Resources/storagekitd']",ce171c6170bcece5d4227a9c2364a5b3d59a02ed280bbcfd76eaf45990293119,False,""
-/System/Library/LaunchDaemons/com.apple.storeaccountd.daemon.plist,com.apple.storeaccountd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd', 'daemon']",1f5b284bae1a1f34c385bbb858460cff6858fe453730e9594e6742a9236ff7eb,False,""
-/System/Library/LaunchDaemons/com.apple.storeagent.daemon.plist,com.apple.storeagent.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy', 'daemon']",d72eb418db720a85fb01b0994d6863ef01a55e3b38c42efecd7ed7dc92b1ed05,False,""
-/System/Library/LaunchDaemons/com.apple.storeassetd.daemon.plist,com.apple.storeassetd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd', 'daemon']",fa9af393b6dbe8244f66b012c7b3726a95dbaf0b2afd9448108240fcd365f038,False,""
-/System/Library/LaunchDaemons/com.apple.storedownloadd.daemon.plist,com.apple.storedownloadd.daemon,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd', 'daemon']",e9f3678a540fdbd26fff350937c61f717af8cf769fe14e1716c821979a8e000c,False,""
-/System/Library/LaunchDaemons/com.apple.storeinstalld.plist,com.apple.storeinstalld,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeinstalld']",33bffa2fd00918d7a2c61d75e76dfbf54c42206faee5b7c00be962c93b5f89c7,False,"None"
-/System/Library/LaunchDaemons/com.apple.storereceiptinstaller.plist,com.apple.storereceiptinstaller,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/ReceiptInstaller']",608275b0114c8cc6dede375578d4b53b48546673d14479255e5b38070b76f8e5,False,""
-/System/Library/LaunchDaemons/com.apple.SubmitDiagInfo.plist,com.apple.SubmitDiagInfo,"['/System/Library/CoreServices/SubmitDiagInfo', 'server-init']",13a6f26878b72e9d3f83181dd793c843d46d314e1a8dabe0d9acfdf2d2e3fa2a,False,"Sends diagnostic information to Apple"
-/System/Library/LaunchDaemons/com.apple.suhelperd.plist,com.apple.suhelperd,"['/System/Library/PrivateFrameworks/SoftwareUpdate.framework/Resources/suhelperd']",5b417e973db778f6e8c4a5ccdbb1bc1190811c80962ef860eaf42bf614a3413d,False,""
-/System/Library/LaunchDaemons/com.apple.symptomsd.plist,com.apple.symptomsd,"['/usr/libexec/symptomsd']",0e40d9059c77b2f8722395e8d8dc2dcd0b9892847dcb724f478e36e58bbc156c,False,""
-/System/Library/LaunchDaemons/com.apple.sysdiagnose.plist,com.apple.sysdiagnose,"['/usr/bin/sysdiagnose']",e7cf5ad447edde00f88741e944814b8b08bb8ee6d18c40edac8589e3404acb85,False,""
-/System/Library/LaunchDaemons/com.apple.syslogd.plist,com.apple.syslogd,"['/usr/sbin/syslogd']",04a4818bb49d74f91a93d768c0fc05d3fa2a70787722f7cc13caa1af23316316,False,""
-/System/Library/LaunchDaemons/com.apple.sysmond.plist,com.apple.sysmond,"['/usr/libexec/sysmond']",be93cd6dbe14c0fc45c02dbd972afc4afdad34e8b7c24c84b7c131e3ea61f4aa,False,""
-/System/Library/LaunchDaemons/com.apple.system_installd.plist,com.apple.system_installd,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/system_installd']",eff9877c1bb33edb8efafcbafdaf1c27f1776c93f287ed9b7ae73a68b42a92ae,False,""
-/System/Library/LaunchDaemons/com.apple.systemkeychain.plist,com.apple.systemkeychain,"['/usr/sbin/systemkeychain', '-d']",7d23b4afe97039fe4cd8b730fbf3c2b1c4ba5c060965adf6b27f261f092f23aa,False,""
-/System/Library/LaunchDaemons/com.apple.systemstats.analysis.plist,com.apple.systemstats.analysis,"['/usr/sbin/systemstats', '--xpc']",6099ad3d540730d2c48b754276914522cfd8cf9beca604115cae4e1263af1fc3,False,""
-/System/Library/LaunchDaemons/com.apple.systemstats.daily.plist,com.apple.systemstats.daily,"['/usr/sbin/systemstats', '--daily']",6099ad3d540730d2c48b754276914522cfd8cf9beca604115cae4e1263af1fc3,False,""
-/System/Library/LaunchDaemons/com.apple.tailspind.plist,com.apple.tailspind,"['/usr/libexec/tailspind']",eed7bef237e29feae96f4188587fd3d06eb6d7a1e315c1e5755a97669e3f3e3c,False,"None"
-/System/Library/LaunchDaemons/com.apple.taskgated-helper.plist,com.apple.taskgated-helper,"['/usr/libexec/taskgated-helper']",8a5b4c6de632bd5ca8a95c5772ec0d564260c504235869cc69c38ab72ccef1ed,False,""
-/System/Library/LaunchDaemons/com.apple.taskgated.plist,com.apple.taskgated,"['/usr/libexec/taskgated', '-s']",562b1cdaff02bf59fbcc46adb7c28107303750b1c39fae41c539b3365fc72aea,False,""
-/System/Library/LaunchDaemons/com.apple.tccd.system.plist,com.apple.tccd.system,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd', 'system']",f8ba72775dcc31f2b1ad218a356795c1ddc45ae5afb704162bad02efacbdf4ad,False,""
-/System/Library/LaunchDaemons/com.apple.thermald.plist,com.apple.thermald,"['/usr/libexec/thermald']",a99b06655380282e8051df3c2a70af006f042527cb77d734ec7b33c8fa2cdd3b,False,"Thermal management daemon"
-/System/Library/LaunchDaemons/com.apple.TMCacheDelete.plist,com.apple.TMCacheDelete,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMCacheDelete']",38e67feb52060c5a4a093e43410af4ca8a72f093fbb1838c63b0817e80c30448,False,""
-/System/Library/LaunchDaemons/com.apple.trustd.plist,com.apple.trustd,"['/usr/libexec/trustd']",872b9574d20649ce20c78e6ead6a40b6ed494f24fac77535c27f0f71e5a114dc,False,""
-/System/Library/LaunchDaemons/com.apple.TrustEvaluationAgent.system.plist,com.apple.TrustEvaluationAgent.system,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",ce6d7839e819198d7589ad73eb560960e01651e52e0339c24c6d6e9d68a20b1f,False,""
-/System/Library/LaunchDaemons/com.apple.ucupdate.plist,com.apple.ucupdate.plist,"['/usr/libexec/ucupdate', '-m', '/usr/share/ucupdate/microcode.dat']",925d0ffdd726448a1daa9d58ed070d492240fdfb426a8d22b61269e9c703fdd7,True,""
-/System/Library/LaunchDaemons/com.apple.uninstalld.plist,com.apple.uninstalld,"['/System/Library/PrivateFrameworks/Uninstall.framework/Resources/uninstalld']",929f33ea279c823c8df1e5bd50027b45187e61fe4b61ef3694cd7920c681de68,False,""
-/System/Library/LaunchDaemons/com.apple.unmountassistant.sysagent.plist,com.apple.unmountassistant.sysagent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/Resources/UASysAgent']",db80f142573954dc09e4badba3f72c5cf7deeffdd159d84f824675145f12ebf9,False,""
-/System/Library/LaunchDaemons/com.apple.updateEFIDesktopPicture.plist,com.apple.updateEFIDesktopPicture,"['/usr/sbin/kextcache', '-u', '/']",e926a3cc1ea297ed2277b8c4e260897d2a055f0a72ac158d982b32cba12e77da,False,""
-/System/Library/LaunchDaemons/com.apple.usbd.plist,com.apple.usbd,"['/usr/libexec/usbd']",0e70c44f1a4dcdcb180d996512e991491bc37dd376b0b5e2c3c48461b023dd26,False,""
-/System/Library/LaunchDaemons/com.apple.usbmuxd.plist,com.apple.usbmuxd,"['/System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd', '-launchd']",94633949b96a83a4f3de7d6e7a9ddbece7a2c36e5a8ff5c32891392730a5af9f,True,""
-/System/Library/LaunchDaemons/com.apple.UserEventAgent-System.plist,com.apple.UserEventAgent-System,"['/usr/libexec/UserEventAgent', '(System)']",0db2c6f3f3370cdc06524a4824186c8733ce732d2b5946d7f068e8b4d4bae4c9,False,""
-/System/Library/LaunchDaemons/com.apple.UserNotificationCenter.plist,com.apple.UserNotificationCenter,"['/System/Library/CoreServices/uncd']",f5fa68af3442797935ebd584f70254af756fd2922719911a7bb66a108e5e18af,False,""
-/System/Library/LaunchDaemons/com.apple.uucp.plist,com.apple.uucp,"['/usr/sbin/uucico', '-l', '-D']",2c45d334643c7b43f0a7ff4daa61725992e94c8ca2984faf0f285eb99a6fdf1a,False,""
-/System/Library/LaunchDaemons/com.apple.var-db-dslocal-backup.plist,com.apple.var-db-dslocal-backup,"['/usr/bin/xar', '-c', '-f', 'dslocal-backup.xar', 'dslocal']",fc1824ce33249ce98c91abf6d73e06c16a7d9500a561c9747a4226a2aa375c05,False,""
-/System/Library/LaunchDaemons/com.apple.vsdbutil.plist,com.apple.vsdbutil,"['/usr/sbin/vsdbutil', '-i']",efc252abe22de1c7c7a1ddb4e63b376b43e46bf607c1da0660691a9e5849e669,False,""
-/System/Library/LaunchDaemons/com.apple.warmd.plist,com.apple.warmd,"['/usr/libexec/warmd']",0f76623e8fb7c60cf82db40a4ae6597484e8562ec2811d121cd05ae00ad3b104,True,""
-/System/Library/LaunchDaemons/com.apple.watchdogd.plist,com.apple.watchdogd,"['/usr/libexec/watchdogd']",4807b1b721013c381f6a37023cf4e7e9f9cd8e9e9b20745ba9aa85caaf54eaf4,False,""
-/System/Library/LaunchDaemons/com.apple.wdhelper.plist,com.apple.wdhelper,"['/usr/libexec/wdhelper']",555e71716e1dc824f4a0fe006a9e8bbe268f47bb74dfa9b82096d95373b40753,True,""
-/System/Library/LaunchDaemons/com.apple.wifid.plist,com.apple.wifid,"['/usr/libexec/wifid']",1c146e1d2287b6e5c07d663ca672a7b533cb0b64033b93e5fd571d71b46d044a,False,""
-/System/Library/LaunchDaemons/com.apple.wifivelocityd.plist,com.apple.wifivelocityd,"['/usr/libexec/wifivelocityd']",99b391a67b49d9e662dcbe58176bdc53654e3cdd6547615c0441cf203e833cf1,False,"None"
-/System/Library/LaunchDaemons/com.apple.WindowServer.plist,com.apple.WindowServer,"['/System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer', '-daemon']",308e164e5fcf6a08c488e9c1aa6129169a6c92f17253269bccc5862be982f445,False,""
-/System/Library/LaunchDaemons/com.apple.wirelessproxd.plist,com.apple.wirelessproxd,"['/usr/sbin/wirelessproxd']",0213b9d294328789f918a5c4dcbd9e53b2bbd9c410a790dd996ef3f57dee2053,False,""
-/System/Library/LaunchDaemons/com.apple.WirelessRadioManagerd-osx.plist,com.apple.WirelessRadioManagerd-osx,"['/usr/sbin/WirelessRadioManagerd']",874529d94d354e972a9e11d52f4f063198f9a17bb495747ad616148f4ccbfe14,False,""
-/System/Library/LaunchDaemons/com.apple.wwand.plist,com.apple.wwand,"['/System/Library/Extensions/IOSerialFamily.kext/Contents/PlugIns/AppleWWANSupport.kext/Contents/Resources/wwand']",02017b3ff60b93d77a50cd8acf605027a5a4ff3c177b13bbe175e7fd175fe7b3,False,""
-/System/Library/LaunchDaemons/com.apple.xpc.smd.plist,com.apple.xpc.smd,"['/usr/libexec/smd']",df9002235e2b41f44ae01822ba0b96d84f0cdb617b928a03859edff200fb7e28,False,""
-/System/Library/LaunchDaemons/com.apple.xpc.uscwoap.plist,com.apple.xpc.uscwoap,"['/bin/bash']",05fa593bb1247e5f73e21e8951c2215e4c83f60047167aad5e4371947587cce7,False,""
-/System/Library/LaunchDaemons/com.apple.xsan.plist,com.apple.xsan,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsand']",e52784268e7aad5e6c1e3221458e1bb847907d6ff1869b380ba832537ef1733c,False,""
-/System/Library/LaunchDaemons/com.apple.xsandaily.plist,com.apple.xsandaily,"['/System/Library/Filesystems/acfs.fs/Contents/bin/xsandaily']",bcdf58bd815603977712d79042f8fd34301e3468addef387387eedf3a8f389e0,False,""
-/System/Library/LaunchDaemons/com.apple.xscertadmin.plist,com.apple.xscertadmin,"['/usr/sbin/xscertadmin', 'update']",db6afabf5acff98338781979cc5ab071b8f9c7d8aefff106674a618bbcd52471,False,""
-/System/Library/LaunchDaemons/com.apple.xscertd-helper.plist,com.apple.xscertd-helper,"['/usr/libexec/xscertd-helper']",135c06e9b090198f6c84ebb039893fa602ed5cce29e071ebe5d45a0527b31503,False,""
-/System/Library/LaunchDaemons/com.apple.xscertd.plist,com.apple.xscertd,"['/usr/libexec/xscertd']",e7640cb80092966dee48006ac7fc26a411ca26b7099b2bb5c76908e6497e992b,False,""
-/System/Library/LaunchDaemons/com.vix.cron.plist,com.vix.cron,"['/usr/sbin/cron']",08b1dfda3e4c831013c40a5ca382bc80cb5a005c9376d2abce629db7e792851a,False,""
-/System/Library/LaunchDaemons/finger.plist,com.apple.fingerd,"['/usr/libexec/fingerd', '-s']",d631f7ab605ee5446602580ea994cd7c11dd177a5eef6f1839f33079a199e6b3,False,""
-/System/Library/LaunchDaemons/ftp.plist,com.apple.ftpd,"['/usr/libexec/ftpd']",c610ee26589862c19ef8f37c6878d6d53a807636b7c7d34e048bd3bce1f60487,False,""
-/System/Library/LaunchDaemons/ntalk.plist,com.apple.ntalkd,"['/usr/libexec/ntalkd']",137dce36b2ee244b5b527fb8edfc3b74bfb02fab49f9725fcda0ce1e31d45657,False,""
-/System/Library/LaunchDaemons/org.apache.httpd.plist,org.apache.httpd,"['/usr/sbin/httpd-wrapper', '-D', 'FOREGROUND']",c79a53bc3347ad16ca7e86753eb64733569e7e7d65fc1daeac2a41922f1dfa09,False,""
-/System/Library/LaunchDaemons/org.cups.cups-lpd.plist,org.cups.cups-lpd,"['/usr/libexec/cups/daemon/cups-lpd', '-o', 'document-format=application/octet-stream']",41baa504e181694922ea8d9bccc06afccca4d3b3c6577f55687925372aeae42a,False,""
-/System/Library/LaunchDaemons/org.cups.cupsd.plist,org.cups.cupsd,"['/usr/sbin/cupsd', '-l']",UNKNOWN,False,""
-/System/Library/LaunchDaemons/org.net-snmp.snmpd.plist,org.net-snmp.snmpd,"['/usr/sbin/snmpd']",30389db23c8d30e268dd7e3f98986a33b6a66bb2e13ad4e9248832247020b23c,False,""
-/System/Library/LaunchDaemons/org.ntp.ntpd.plist,org.ntp.ntpd,"['/usr/libexec/ntpd-wrapper']",af2e5171344166fae18d79ff27b81ac10b9fe2998e6fce449a7c57e54b3af80f,False,"Wrapper for ntpdate/ntpd called by launchd"
-/System/Library/LaunchDaemons/org.openldap.slapd.plist,org.openldap.slapd,"['/usr/libexec/slapd']",c2560a36e3754e9891359a1341cadb9d1a51cf4110cf9a95c9fa5fb1c3559aee,False,"Slapd is the stand-alone LDAP daemon."
-/System/Library/LaunchDaemons/ssh.plist,com.openssh.sshd,"['/usr/libexec/sshd-keygen-wrapper']",a7fc97ea60f6394f024de3f9a8fc97ad9bafdae5585b220d8bc7d5bc61f6a6cb,False,"Wrapper for OpenSSH SSH daemon called by launchd"
-/System/Library/LaunchDaemons/telnet.plist,com.apple.telnetd,"['/usr/libexec/telnetd']",8a36078d665c7e99ef7677add8f072c4f8870d27811bc6d73f96997117f957e0,False,""
-/System/Library/LaunchDaemons/tftp.plist,com.apple.tftpd,"['/usr/libexec/tftpd', '-i', '/private/tftpboot']",db32fce07cda30b3514ce30251689db4310c9e45d1c9a093330de7c5bf07b1f4,False,"TFTP server daemon"
-/System/Library/LaunchAgents/com.apple.accountsd.plist,com.apple.accountsd,"['/System/Library/Frameworks/Accounts.framework/Versions/A/Support/accountsd']",2c18649bbc5bd99d5ad244f16cd9512ca796b0362cda27e10796409ee712d867,False,""
-/System/Library/LaunchAgents/com.apple.AddressBook.abd.plist,com.apple.AddressBook.abd,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookManager.app/Contents/MacOS/AddressBookManager']",a1866b73806ae2d148d720a88cc4f0726eef0272d4b96a59b5d3aaba64a2b0d1,False,""
-/System/Library/LaunchAgents/com.apple.AddressBook.AssistantService.plist,com.apple.AddressBook.AssistantService,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/ABAssistantService.app/Contents/MacOS/ABAssistantService']",8d661db3b0de27213d1b748096238fe1f5b2df28b506a25904cdb31d9df14636,False,""
-/System/Library/LaunchAgents/com.apple.AddressBook.ContactsAccountsService.plist,com.apple.AddressBook.ContactsAccountsService,"['/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService']",f301931b1e2387f1234bef867b401826161a2b291ad78563c154d6355b71fbb3,False,"None"
-/System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist,com.apple.AddressBook.SourceSync,"['/System/Library/Frameworks/AddressBook.framework/Versions/A/Helpers/AddressBookSourceSync.app/Contents/MacOS/AddressBookSourceSync']",321e1acce457deaf4d496a959042cd7fd5de85bb5c5ecfb7a0275c9f018c4e11,False,""
-/System/Library/LaunchAgents/com.apple.AirPlayUIAgent.plist,com.apple.AirPlayUIAgent,"['/System/Library/CoreServices/AirPlayUIAgent.app/Contents/MacOS/AirPlayUIAgent', '--launchd']",30d7ec2bff38d06cfe781e3d6ffe68a9ed855559547d180cac91dba0938b0385,True,""
-/System/Library/LaunchAgents/com.apple.AirPortBaseStationAgent.plist,com.apple.AirPortBaseStationAgent,"['/System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent', '--launchd']",74e7775fba88b5c639b60dc6bad8d7b0bc9f79698e29cc54cfe17c423bded8ce,False,""
-/System/Library/LaunchAgents/com.apple.akd.plist,com.apple.akd,"['/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd']",670fb2f9b92fea1a38a454ae6c3b79ee0d08206f0e04d10439b02a7b80e7dae0,False,""
-/System/Library/LaunchAgents/com.apple.alf.useragent.plist,com.apple.alf.useragent,"['/usr/libexec/ApplicationFirewall/Firewall']",c6ce0695dbee625021b16132146547ee18ac5119fffe2c8cf6e362c48e628ae8,False,"Apple Application Firewall (User Process)"
-/System/Library/LaunchAgents/com.apple.AOSHeartbeat.plist,com.apple.AOSHeartbeat,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSHeartbeat.app/Contents/MacOS/AOSHeartbeat']",faf13fe146196ca8c5bfc1fda86833950193cedc6d74338b4b12a3e08fca8567,True,""
-/System/Library/LaunchAgents/com.apple.AOSPushRelay.plist,com.apple.AOSPushRelay,"['/System/Library/PrivateFrameworks/AOSKit.framework/Helpers/AOSPushRelay.app/Contents/MacOS/AOSPushRelay']",c1f9881455a5eaad3ae8623278f4829b89026007b45bebd6d53cec5af6f1473c,False,""
-/System/Library/LaunchAgents/com.apple.AppleGraphicsWarning.plist,com.apple.AppleGraphicsWarning,"['/System/Library/CoreServices/AppleGraphicsWarning.app/Contents/MacOS/AppleGraphicsWarning']",ef2de95fe4cc10abc5d2dfc2063c5fd956eb715baac666ea9c3356969c544b81,False,""
-/System/Library/LaunchAgents/com.apple.appleseed.seedusaged.plist,com.apple.appleseed.seedusaged,"['/System/Library/CoreServices/Applications/Feedback Assistant.app/Contents/Library/LaunchServices/seedusaged']",755f1fa8e0881969bb8c608f6e1e70050310ed7e8d1dac9822758cc548e222b7,True,""
-/System/Library/LaunchAgents/com.apple.appsleepd.plist,com.apple.appsleep,"['/usr/sbin/appsleepd']",7a8881516b13282b9c68bdb3512e73e99966b87fac7e33acea4c16bb79528139,False,""
-/System/Library/LaunchAgents/com.apple.appstoreupdateagent.plist,com.apple.appstoreupdateagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/appstoreupdateagent']",6701c79a64135d892c5566f5ae524d4f84ecd32330fd10716869d22eae35f68e,False,""
-/System/Library/LaunchAgents/com.apple.apsctl.plist,com.apple.apsctl,"['/System/Library/PrivateFrameworks/ApplePushService.framework/apsctl', 'login']",53f5c06bbd0a5635e67cde62d5434b04cbd982118457777913d9e95e287bcd56,True,""
-/System/Library/LaunchAgents/com.apple.askpermissiond.plist,com.apple.askpermissiond,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/askpermissiond']",18c33b96cb47fdacfc061f6bbe09ceeb7e67f4f3aa95adddc343fae45728c9b7,True,""
-/System/Library/LaunchAgents/com.apple.AskPermissionUI.plist,com.apple.AskPermissionUI,"['/System/Library/PrivateFrameworks/AskPermission.framework/Versions/A/Resources/AskPermissionUI.app/Contents/MacOS/AskPermissionUI']",e849dd60b5ef11b15b7f44641b4925ae8b8dd46e67e73308bdc1c2d28dbaed6e,False,""
-/System/Library/LaunchAgents/com.apple.AssetCacheLocatorService.plist,com.apple.AssetCacheLocatorService,"['/System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/Contents/MacOS/AssetCacheLocatorService', '-a']",8f62c38c566430ad038db3173c9589455f55c04bb38353a1df24a04fac455b64,False,""
-/System/Library/LaunchAgents/com.apple.assistant_service.plist,com.apple.assistant_service,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistant_service']",c1aa2eaee052a4bb3c58f11d597d16c838f6222f95c12038c680a8c7c0ae8899,False,""
-/System/Library/LaunchAgents/com.apple.assistantd.plist,com.apple.assistantd,"['/System/Library/PrivateFrameworks/AssistantServices.framework/assistantd']",e8bc2ff6fdb4039d9eccc8a997a7c1bd734db014131d693ef08cc12fe72e6479,True,""
-/System/Library/LaunchAgents/com.apple.AssistiveControl.plist,com.apple.AssistiveControl,"['/System/Library/Input Methods/Switch Control.app/Contents/MacOS/Switch Control', 'launchd', '-s']",4395099fc887b2e8911b94d0bddc3b8969f0e525cddac0abc2a449868450a14a,False,""
-/System/Library/LaunchAgents/com.apple.avconferenced.plist,com.apple.videoconference.camera,"['/usr/libexec/avconferenced']",53eeb82c8624ce67b10ffea0aa8384e91793cabe2fead79ed12d84e8b39887b2,False,"None"
-/System/Library/LaunchAgents/com.apple.bird.plist,com.apple.bird,"['/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird']",4d33a58f6397f3f3f3889e95b0649396ed1614ac53577db79077e3220ea0939c,False,"Documents in the Cloud feature daemon"
-/System/Library/LaunchAgents/com.apple.bluetooth.PacketLogger.plist,com.apple.bluetooth.PacketLogger,"['/AppleInternal/DevTools/Hardware/PacketLogger.app/Contents/MacOS/PacketLogger']",UNKNOWN,False,"None"
-/System/Library/LaunchAgents/com.apple.bluetoothUIServer.plist,com.apple.bluetoothUIServer,"['/System/Library/CoreServices/BluetoothUIServer.app/Contents/MacOS/BluetoothUIServer']",e31363577df4f470bc1532c30b7ea17c4b67e40df60fda66ebec54ae018ad213,False,""
-/System/Library/LaunchAgents/com.apple.btsa.plist,com.apple.btsa,"['/System/Library/CoreServices/Bluetooth Setup Assistant.app/Contents/MacOS/Bluetooth Setup Assistant', '-autoConfigure']",cb9c0cbe0c6f5bae7223971a3938331a04a164a76823efe2630784aedba630ab,False,""
-/System/Library/LaunchAgents/com.apple.cache_delete.plist,com.apple.cache_delete,"['/System/Library/PrivateFrameworks/CacheDelete.framework/deleted']",e68e08c6b61cf64bc680838c8fd1b61069c9094ee3db5cd823ca6d86e1d9aa0e,False,""
-/System/Library/LaunchAgents/com.apple.CalendarAgent.plist,com.apple.CalendarAgent,"['/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent']",c11f8f4bb16abb037ba583f3906d546b51a50e99308f98738d678c7777c2c453,True,""
-/System/Library/LaunchAgents/com.apple.CallHistoryPluginHelper.plist,com.apple.CallHistoryPluginHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistoryPluginHelper']",88e4764351d565564b31ee514432a7b76f9ee588ccfbdd5859124b756779be35,False,""
-/System/Library/LaunchAgents/com.apple.CallHistorySyncHelper.plist,com.apple.CallHistorySyncHelper,"['/System/Library/PrivateFrameworks/CallHistory.framework/Support/CallHistorySyncHelper']",1cefe1ee73c7ec3ce784e63785e2cdbdd10594c0e46411b638ddfba40bf0fe19,False,""
-/System/Library/LaunchAgents/com.apple.cdpd.plist,com.apple.cdpd,"['/System/Library/PrivateFrameworks/CoreCDP.framework/Versions/A/Resources/cdpd']",1a0e7cd5404edfc7d33771236078d9beaf556e30535f4f4eed653391891fa5cb,False,""
-/System/Library/LaunchAgents/com.apple.cfnetwork.AuthBrokerAgent.plist,com.apple.cfnetwork.AuthBrokerAgent,"['/System/Library/CoreServices/AuthBrokerAgent']",b61480e9a2c71af4bc953219c4bb9eb54ab8f3b4058369176f9cd96df16fcffc,False,""
-/System/Library/LaunchAgents/com.apple.cfnetwork.cfnetworkagent.plist,com.apple.cfnetwork.cfnetworkagent,"['/System/Library/CoreServices/CFNetworkAgent']",cb7f79261bc24bf73f2168c9b5f56a4bca82865307ebd46fede207a1a89e982f,False,""
-/System/Library/LaunchAgents/com.apple.cfprefsd.xpc.agent.plist,com.apple.cfprefsd.xpc.agent,"['/usr/sbin/cfprefsd', 'agent']",2147b55037302f85455852f6fb8b868dbf647ed70042442543329bcceef80bf6,False,""
-/System/Library/LaunchAgents/com.apple.cloudd.plist,com.apple.cloudd,"['/System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd']",8e2949d3f97993946f97ded10606a3dab58bdf3f949d05783f2a592313f268d6,False,""
-/System/Library/LaunchAgents/com.apple.cloudfamilyrestrictionsd-mac.plist,com.apple.cloudfamilyrestrictionsd,"['/System/Library/PrivateFrameworks/CloudFamilyRestrictions.framework/cloudfamilyrestrictionsd']",389ff1641251a8df83310b7b48c75063520f5b78afb5f57b06a20160a4d2ef31,False,""
-/System/Library/LaunchAgents/com.apple.cloudpaird.plist,com.apple.cloudpaird,"['/System/Library/CoreServices/cloudpaird']",1fd2ee037ce1b3986ce69f43845bee0560145a01badc9e8d1a300d308231fc19,False,""
-/System/Library/LaunchAgents/com.apple.cloudphotosd.plist,com.apple.cloudphotosd,"['/System/Library/CoreServices/cloudphotosd.app/Contents/MacOS/cloudphotosd']",5a187393ddb8a9fac8ec5baa6298c3c0d0c779f34c5e016b91a17964cb684b48,False,""
-/System/Library/LaunchAgents/com.apple.cmfsyncagent.plist,com.apple.cmfsyncagent,"['/System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent.app/Contents/MacOS/CMFSyncAgent']",e1aaa7e9216b9026e9b501802a695fdf114eba7f6239157bce03b2c4d404af6a,False,""
-/System/Library/LaunchAgents/com.apple.CommCenter-osx.plist,com.apple.CommCenter,"['/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter', '-L']",2a26424c37aa46637bca71c365286ef2b804e1802be0c7519ca4e2e21b621e29,False,""
-/System/Library/LaunchAgents/com.apple.ContactsAgent.plist,com.apple.ContactsAgent,"['/System/Library/PrivateFrameworks/ContactsAgent.framework/Executables/ContactsAgent']",c76d8289c9dbc955f38fe02ac08d44fd3ae84e90bf34ec58a88eeec6b4d52ec8,False,"None"
-/System/Library/LaunchAgents/com.apple.ContainerRepairAgent.plist,com.apple.ContainerRepairAgent,"['/usr/libexec/AppSandbox/ContainerRepairAgent']",d5e4f1e5d7e3c0052855c16a88634c250518218403774b311a0c2c2da9f9b87c,False,""
-/System/Library/LaunchAgents/com.apple.CoreAuthentication.agent.plist,com.apple.CoreAuthentication.agent,"['/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd']",c13632f348f86aae9b529a6323c7ff9447eeac75cc1c1afa5050d1dab46ef513,False,"None"
-/System/Library/LaunchAgents/com.apple.CoreLocationAgent.plist,com.apple.CoreLocationAgent,"['/System/Library/CoreServices/CoreLocationAgent.app/Contents/MacOS/CoreLocationAgent']",ed89bfecc5aaf5e0b6748ebe26021196ff5512cf87303415c826e93894581e7c,False,""
-/System/Library/LaunchAgents/com.apple.CoreRAIDAgent.plist,com.apple.CoreRAIDAgent,"['/System/Library/PrivateFrameworks/CoreRAID.framework/Versions/A/Resources/CoreRAIDAgent']",16b3b050a8484b1e5bec38a82ba37d511204ced10c1f7fa37bad0ed495a134e4,False,""
-/System/Library/LaunchAgents/com.apple.coreservices.appleid.authentication.plist,com.apple.coreservices.appleid.authentication,"['/System/Library/CoreServices/AppleIDAuthAgent']",d5e0eb2737df528d163166798900fbe8e69582e536aeb5202af0269e23d2eb7d,True,""
-/System/Library/LaunchAgents/com.apple.coreservices.lsactivity.plist,com.apple.coreservices.useractivityd,"['/System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd']",6b8139c0a2bedd0c068d5b38427f24c1aa5e3eaacb3ef9f4484310db1a03fd19,False,""
-/System/Library/LaunchAgents/com.apple.coreservices.sharedfilelistd.plist,com.apple.coreservices.sharedfilelistd,"['/System/Library/CoreServices/sharedfilelistd']",ce3f524e7ecde28bef9cc879ee1526ac3a661cc5e43f4c79fba2718153a9fd0f,False,""
-/System/Library/LaunchAgents/com.apple.coreservices.UASharedPasteboardProgressUI.plist,com.apple.coreservices.UASharedPasteboardProgressUI,"['/System/Library/PrivateFrameworks/UserActivity.framework/Agents/UASharedPasteboardProgressUI.app/Contents/MacOS/UASharedPasteboardProgressUI']",f3159e797bbfca2e59e520ae0a51c050663844371bfe38bfaf35246843f25be9,False,"None"
-/System/Library/LaunchAgents/com.apple.coreservices.uiagent.plist,com.apple.coreservices.uiagent,"['/System/Library/CoreServices/CoreServicesUIAgent.app/Contents/MacOS/CoreServicesUIAgent']",4e17e0e71f2a74d22d6250c9f142a06d8397277de64e62bee8424a2c99025e49,False,""
-/System/Library/LaunchAgents/com.apple.CryptoTokenKit.ahp.agent.plist,com.apple.CryptoTokenKit.ahp.agent,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp']",3e14730f8e5efc414616a87e0f357506bcd1eea6d0dc6121970858a17fff9e75,False,"None"
-/System/Library/LaunchAgents/com.apple.csuseragent.plist,com.apple.csuseragent,"['/System/Library/CoreServices/CSUserAgent']",0d73d0b5f5760a8f4e60902fa08440c4aa316cc7138a545526807343dc12f25e,False,""
-/System/Library/LaunchAgents/com.apple.ctkbind.plist,com.apple.ctkbind,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkbind.bundle/Contents/MacOS/ctkbind']",2856c154b71b062c66a130c2712e362a62078c67002f25d214bc3f291b4f9b25,False,"None"
-/System/Library/LaunchAgents/com.apple.ctkd.plist,com.apple.ctkd,"['/System/Library/Frameworks/CryptoTokenKit.framework/ctkd', '-tw']",caa6ffa56e93a88e0ca2b6e965850b0a11e63650ac9ec3998d7f6e6cc06a8c94,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3425AMD_i386.plist,com.apple.cvmsCompAgent3425AMD_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3425AMD/CVMCompiler', '6']",afe570534a05cea7f7731cf743ba2cde873540709470c82ff5d22433c111cd29,False,"None"
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3425AMD_i386_1.plist,com.apple.cvmsCompAgent3425AMD_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3425AMD/CVMCompiler', '7']",afe570534a05cea7f7731cf743ba2cde873540709470c82ff5d22433c111cd29,False,"None"
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3425AMD_x86_64.plist,com.apple.cvmsCompAgent3425AMD_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3425AMD/CVMCompiler', '6']",afe570534a05cea7f7731cf743ba2cde873540709470c82ff5d22433c111cd29,False,"None"
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3425AMD_x86_64_1.plist,com.apple.cvmsCompAgent3425AMD_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3425AMD/CVMCompiler', '7']",afe570534a05cea7f7731cf743ba2cde873540709470c82ff5d22433c111cd29,False,"None"
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_i386.plist,com.apple.cvmsCompAgent3600_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '4']",9510008596fd25a0a4677c5daf0b3e132a6ef3a3d28833065650e8c30a0854b8,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_i386_1.plist,com.apple.cvmsCompAgent3600_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '5']",9510008596fd25a0a4677c5daf0b3e132a6ef3a3d28833065650e8c30a0854b8,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_x86_64.plist,com.apple.cvmsCompAgent3600_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '4']",9510008596fd25a0a4677c5daf0b3e132a6ef3a3d28833065650e8c30a0854b8,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent3600_x86_64_1.plist,com.apple.cvmsCompAgent3600_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/3600/CVMCompiler', '5']",9510008596fd25a0a4677c5daf0b3e132a6ef3a3d28833065650e8c30a0854b8,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386.plist,com.apple.cvmsCompAgent_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",a54ad831d2801cfb1a5c0d4436b5dc1c0d83c01b5f99f8e0b3779ed93bb6faed,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_i386_1.plist,com.apple.cvmsCompAgent_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",a54ad831d2801cfb1a5c0d4436b5dc1c0d83c01b5f99f8e0b3779ed93bb6faed,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64.plist,com.apple.cvmsCompAgent_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '2']",a54ad831d2801cfb1a5c0d4436b5dc1c0d83c01b5f99f8e0b3779ed93bb6faed,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgent_x86_64_1.plist,com.apple.cvmsCompAgent_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/CVMCompiler', '3']",a54ad831d2801cfb1a5c0d4436b5dc1c0d83c01b5f99f8e0b3779ed93bb6faed,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386.plist,com.apple.cvmsCompAgentLegacy_i386,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",8c54e6a7842132c1a94f91650248d4cf37dd98c0b00aa241b928630cd25b1cad,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_i386_1.plist,com.apple.cvmsCompAgentLegacy_i386_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",8c54e6a7842132c1a94f91650248d4cf37dd98c0b00aa241b928630cd25b1cad,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64.plist,com.apple.cvmsCompAgentLegacy_x86_64,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler']",8c54e6a7842132c1a94f91650248d4cf37dd98c0b00aa241b928630cd25b1cad,False,""
-/System/Library/LaunchAgents/com.apple.cvmsCompAgentLegacy_x86_64_1.plist,com.apple.cvmsCompAgentLegacy_x86_64_1,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/Legacy/CVMCompiler', '1']",8c54e6a7842132c1a94f91650248d4cf37dd98c0b00aa241b928630cd25b1cad,False,""
-/System/Library/LaunchAgents/com.apple.DataDetectorsLocalSources.plist,com.apple.DataDetectorsLocalSources,"['/usr/libexec/DataDetectorsLocalSources']",d333efcb47a54f55233c007918a4f2bf58cdc87bdd642991bf6b936b59194b74,False,"None"
-/System/Library/LaunchAgents/com.apple.DiagnosticReportCleanup.plist,com.apple.DiagnosticReportCleanup.plist,"['/System/Library/CoreServices/SubmitDiagInfo', 'cleanup']",13a6f26878b72e9d3f83181dd793c843d46d314e1a8dabe0d9acfdf2d2e3fa2a,False,""
-/System/Library/LaunchAgents/com.apple.diagnostics_agent.plist,com.apple.diagnostics_agent,"['/System/Library/CoreServices/diagnostics_agent']",7707231098f667a704f6ed219326a636efb7d5efc53a82a4afeeb1c556a5be10,True,""
-/System/Library/LaunchAgents/com.apple.DictationIM.plist,com.apple.DictationIM,"['/System/Library/Input Methods/DictationIM.app/Contents/MacOS/DictationIM']",c55c94bfbdc457dcfe8c7eb150f6d73f14f95af7779fb8de42ca0b84bfbf26ee,False,""
-/System/Library/LaunchAgents/com.apple.DiskArbitrationAgent.plist,com.apple.DiskArbitrationAgent,"['/System/Library/Frameworks/DiskArbitration.framework/Versions/A/Support/DiskArbitrationAgent']",ecf863dd4d98dde988fa706278da439d364a0a96e3633d7c1359e689eb6f9729,False,""
-/System/Library/LaunchAgents/com.apple.diskspaced.plist,com.apple.diskspaced,"['/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/diskspaced']",2afcf5a4936d612b286b11e5c4e5ef4cd69483125167d450675fb72b0223fd50,False,"None"
-/System/Library/LaunchAgents/com.apple.distnoted.xpc.agent.plist,com.apple.distnoted.xpc.agent,"['/usr/sbin/distnoted', 'agent']",1972b5cf085b63fd15d157db20f0393152ab7a0881ffe58295321115ca43f3db,False,""
-/System/Library/LaunchAgents/com.apple.Dock.plist,com.apple.Dock.agent,"['/System/Library/CoreServices/Dock.app/Contents/MacOS/Dock']",4220c18d4c126ef7a9dead14717d342c3c8a274b40ad672cd0c4ca8aeeb10c53,False,""
-/System/Library/LaunchAgents/com.apple.dt.CommandLineTools.installondemand.plist,com.apple.dt.CommandLineTools.installondemand,"['/System/Library/CoreServices/Install Command Line Developer Tools.app/Contents/MacOS/Install Command Line Developer Tools']",d7456a74bc8fdcf3bdc8caada1c2605eb6fe2e3c3c7335a8c2257c174632aac3,False,""
-/System/Library/LaunchAgents/com.apple.DwellControl.plist,com.apple.DwellControl,"['/System/Library/CoreServices/Dwell Control.app/Contents/MacOS/Dwell Control', 'launchd', '-s']",2ab5d3cc1b9707f1dfe4265b4d62653862c5a0e27c6b7f5f0eb0fcf1884e05c1,False,"None"
-/System/Library/LaunchAgents/com.apple.EscrowSecurityAlert.plist,com.apple.EscrowSecurityAlert,"['/System/Library/CoreServices/EscrowSecurityAlert.app/Contents/MacOS/EscrowSecurityAlert']",bec0717853bf672110e48822526b1c3bcd53f1d2b28047400d8597788ddfd60a,False,""
-/System/Library/LaunchAgents/com.apple.familycircled.plist,com.apple.familycircled,"['/System/Library/PrivateFrameworks/FamilyCircle.framework/Versions/A/Resources/familycircled']",02d44e1f1937a21a1470c73cbb0987ca1b620e8f08835d4e8808a3f6163b1f88,False,""
-/System/Library/LaunchAgents/com.apple.familycontrols.useragent.plist,com.apple.familycontrols.useragent,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/ParentalControls.app/Contents/MacOS/ParentalControls']",b77bd38efb02d886f08009e0209de1b91da8de28030e7961c410cc6dcde761cc,False,""
-/System/Library/LaunchAgents/com.apple.familynotificationd.plist,com.apple.familynotificationd,"['/System/Library/PrivateFrameworks/FamilyNotification.framework/Versions/A/Resources/Family.app/Contents/MacOS/Family']",1b9ee813fdd992b87c72db63e606feb435bee6e2416d90e39a76cdc1810900bb,False,""
-/System/Library/LaunchAgents/com.apple.FileStatsAgent.plist,com.apple.FileStatsAgent,"['/usr/sbin/FileStatsAgent']",8067bcd81f529076bf89a17a28d155f825e557bdcbe25b3f0156b55f7aaaa1f8,False,""
-/System/Library/LaunchAgents/com.apple.FilesystemUI.plist,com.apple.FilesystemUI,"['/System/Library/CoreServices/KernelEventAgent.bundle/Contents/Resources/FileSystemUIAgent.app/Contents/MacOS/FileSystemUIAgent']",5a6a09f9e305f46166ec32650af332bab94f464c26a17f3f62bdb214e3ad42fc,False,""
-/System/Library/LaunchAgents/com.apple.Finder.plist,com.apple.Finder,"['/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder']",f745fcbd1716416dd7cce2f4ec3c43a6176cc2d7d61136a0a1f595e39c16f0fe,False,"Finder"
-/System/Library/LaunchAgents/com.apple.findmymacmessenger.plist,com.apple.findmymacmessenger,"['/System/Library/PrivateFrameworks/FindMyMac.framework/Resources/FindMyMacMessenger.app/Contents/MacOS/FindMyMacMessenger']",0a23396d2c23805801779a8a98d030d0d7dd9c030a81ea0943e47caa9fbe2b95,False,"iCloud Find My Mac feature daemon"
-/System/Library/LaunchAgents/com.apple.FirmwareUpdateHelper.plist,com.apple.FirmwareUpdateHelper,"['/System/Library/CoreServices/FirmwareUpdateHelper.app/Contents/MacOS/FirmwareUpdateHelper']",7bc6439e8cdefd269f31ff8dd7a8b6db22c6f02b12ae4aea92a999d45c8adb87,False,"None"
-/System/Library/LaunchAgents/com.apple.FolderActionsDispatcher.plist,com.apple.FolderActionsDispatcher,"['/System/Library/CoreServices/FolderActionsDispatcher.app/Contents/MacOS/FolderActionsDispatcher']",7c7f8995e12b1b62a3419320192c86c6c264e7bca0470db47715c834941b556f,True,""
-/System/Library/LaunchAgents/com.apple.followupd.plist,com.apple.followupd,"['/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Support/followupd']",a29a2a37be2d40d07045b2b95a9dd6539bc8b36606972662456b90c54bdf0639,False,""
-/System/Library/LaunchAgents/com.apple.FollowUpUI.plist,com.apple.FollowUpUI,"['/System/Library/PrivateFrameworks/CoreFollowUp.framework/Versions/A/Resources/FollowUpUI.app/Contents/MacOS/FollowUpUI']",eec4b3dcf0edf421e28ac118b738ce4144afd001db210382dcc6ff965fb70f9b,False,""
-/System/Library/LaunchAgents/com.apple.fontd.useragent.plist,com.apple.fontd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/fontd']",1a2f22229a71b23e9d0f99bd0657fa3a0bf2ef6356b954503c34b3267fbcd58c,False,""
-/System/Library/LaunchAgents/com.apple.FontRegistryUIAgent.plist,com.apple.FontRegistryUIAgent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/FontRegistryUIAgent.app/Contents/MacOS/FontRegistryUIAgent']",61662d406567021d0532e1594f4fd4b8f71d8d26247652b5040ff8ae601aaffd,False,""
-/System/Library/LaunchAgents/com.apple.FontValidator.plist,com.apple.ATS.FontValidator,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidator']",bf055eec4cc9ceced4dcf2f279bf16f2395b77b4bceeac4205a27c2c7df6b99c,False,""
-/System/Library/LaunchAgents/com.apple.FontValidatorConduit.plist,com.apple.ATS.FontValidatorConduit,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/FontValidatorConduit']",c9e4623bf0518a57535f408473d3184cfcd506b702e9e3e3d989c2dfe7398dec,False,""
-/System/Library/LaunchAgents/com.apple.FontWorker.plist,com.apple.FontWorker,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Support/fontworker']",824f81a46ba59bd26765aadf0776a95165356ff8fcd752a1b697a4f171de3fd6,False,""
-/System/Library/LaunchAgents/com.apple.gamed.plist,com.apple.gamed,"['/System/Library/PrivateFrameworks/GameCenterFoundation.framework/Versions/A/gamed']",39a9d0a1fd873a86cdac6fd1a87cdf6cd6e64f67bb7163065445b8627dbe5928,False,""
-/System/Library/LaunchAgents/com.apple.geodMachServiceBridge.plist,com.apple.geodMachServiceBridge,"['/System/Library/PrivateFrameworks/GeoServices.framework/geodMachServiceBridge']",b475228de74129bbf6b8ae39dcc26015db00792fc23e21cf22b0192063cf6f79,False,"None"
-/System/Library/LaunchAgents/com.apple.helpd.plist,com.apple.helpd,"['/System/Library/PrivateFrameworks/HelpData.framework/Versions/A/Resources/helpd']",2c08d20ba1351c9be7ce69e974fc15b300d956625d1929751a0c8ec065a72808,False,""
-/System/Library/LaunchAgents/com.apple.icdd.plist,com.apple.icdd,"['/System/Library/Image Capture/Support/icdd']",0396cb6d6f9554cea46a59526b0fc2f4a3b8d7f43496fd90853a27edf741598d,True,""
-/System/Library/LaunchAgents/com.apple.icloud.findmydeviced.findmydevice-user-agent.plist,com.apple.icloud.findmydeviced.findmydevice-user-agent,"['/usr/libexec/findmydevice-user-agent']",77ea051ee66dc9020e8483f8510c9de169f8eb79540ca8215de66baa318d668e,False,""
-/System/Library/LaunchAgents/com.apple.icloud.fmfd.plist,com.apple.icloud.fmfd,"['/usr/libexec/fmfd']",28a07b96d620b066069dc4af2491de205a83d42f7f3f7fe3d03e257da9a5edd0,False,""
-/System/Library/LaunchAgents/com.apple.iCloudUserNotifications.plist,com.apple.iCloudUserNotificationsd,"['/System/Library/PrivateFrameworks/AOSAccounts.framework/Versions/A/Resources/iCloudUserNotificationsd.app/Contents/MacOS/iCloudUserNotificationsd']",0bd8e7253091aaed773f1ac2f46a9962932ad6a3aa12ba89346e4a22cd1ac144,False,""
-/System/Library/LaunchAgents/com.apple.iconservices.iconservicesagent.plist,com.apple.iconservices.iconservicesagent,"['/System/Library/CoreServices/iconservicesagent']",6d4fa344e7c5789db51abf041e79fb085589ee12031cede5458e2d70d3c4ee15,True,""
-/System/Library/LaunchAgents/com.apple.identityservicesd.plist,com.apple.identityservicesd,"['/System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/Contents/MacOS/identityservicesd']",2c28689affe1a5f9f2d3de2edc411db9e85e7efc824770e90d82f44862794f46,False,""
-/System/Library/LaunchAgents/com.apple.idsremoteurlconnectionagent.plist,com.apple.idsfoundation.IDSRemoteURLConnectionAgent,"['/System/Library/PrivateFrameworks/IDSFoundation.framework/IDSRemoteURLConnectionAgent.app/Contents/MacOS/IDSRemoteURLConnectionAgent']",be77e55bff587e9462888dc0c96b53d03aba2610ff642675ec662e57ae8a2db3,False,""
-/System/Library/LaunchAgents/com.apple.imagent.plist,com.apple.imagent,"['/System/Library/PrivateFrameworks/IMCore.framework/imagent.app/Contents/MacOS/imagent']",1ab7b38f974e1f13484118e1cf0b36de82ddd4f590a287c4f57d71a28af895a7,False,""
-/System/Library/LaunchAgents/com.apple.imavagent.plist,com.apple.imavagent,"['/System/Library/PrivateFrameworks/IMAVCore.framework/imavagent.app/Contents/MacOS/imavagent']",2742b876530f2f1150bd28ed4fe2d0b8e731543d34925b2dd2a0cb7be0e5f201,False,""
-/System/Library/LaunchAgents/com.apple.imklaunchagent.plist,com.apple.imklaunchagent,"['/System/Library/Frameworks/InputMethodKit.framework/Resources/imklaunchagent']",9079c3557be6a30b669b5658b41ac124229f52883942aea77f26485760d765ac,False,""
-/System/Library/LaunchAgents/com.apple.IMLoggingAgent.plist,com.apple.IMLoggingAgent,"['/System/Library/PrivateFrameworks/IMFoundation.framework/IMLoggingAgent']",23e53d87d5eda772f81d6f3e31f0d7bab1c582611e2b30d8e29e42fcda58ba4b,False,""
-/System/Library/LaunchAgents/com.apple.imtransferagent.plist,com.apple.imcore.imtransferagent,"['/System/Library/PrivateFrameworks/IMTransferServices.framework/IMTransferAgent.app/Contents/MacOS/IMTransferAgent']",b8641b4abd530080c204ecf06fd78cc8f890cdd0e9a320a910d9b76852b3f745,False,""
-/System/Library/LaunchAgents/com.apple.installandsetup.migrationhelper.user.plist,com.apple.installandsetup.migrationhelper.user,"['/System/Library/PrivateFrameworks/SystemMigration.framework/Resources/migrationhelper']",8091f3e7ef3c79f5087ce9f8c92e44b252b069d0f7d1a71f3c6210f8f1a6b67e,False,""
-/System/Library/LaunchAgents/com.apple.installd.user.plist,com.apple.installd.user,"['/System/Library/PrivateFrameworks/PackageKit.framework/Resources/installd']",828d83797f7a6aacad52d10ec546941ccbc649f315dc85271c536a830db4d38c,False,""
-/System/Library/LaunchAgents/com.apple.InstallerProgress.la.plist,com.apple.InstallerProgress,"['/System/Library/CoreServices/Installer Progress.app/Contents/MacOS/Installer Progress', '--showProgress']",c5827808788413706ab7dd0414d987f382d6d444005ae0019c5f1337dfb0541b,False,"None"
-/System/Library/LaunchAgents/com.apple.isst.plist,com.apple.isst,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/isst']",663cf768f3c10215d8a1c1e604255fbbab9dd5731baa419a7999d92a694c46c9,True,""
-/System/Library/LaunchAgents/com.apple.java.InstallOnDemand.plist,com.apple.java.InstallOnDemand,"['/System/Library/Java/Support/CoreDeploy.bundle/Contents/Download Java Components.app/Contents/MacOS/Download Java Components']",c6005142d2bd421ac396b678d304dfc045463b33a7dd371eb0ba7645d25fcd2f,False,""
-/System/Library/LaunchAgents/com.apple.java.updateSharing.plist,com.apple.java.updateSharing,"['/System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/bin/updateSharingD']",c5f204730b3ec07cfecfd37d791ba787dd87f3e9f70284b1794d978414cc67c3,False,""
-/System/Library/LaunchAgents/com.apple.keyboardservicesd.plist,com.apple.keyboardservicesd,"['/usr/libexec/keyboardservicesd']",19f07a4fc21f10ef10edd6230003768e02050056b5981bf0ac359fe631ace5f6,False,"None"
-/System/Library/LaunchAgents/com.apple.languageassetd.plist,com.apple.languageassetd,"['/usr/libexec/languageassetd']",e070bae9f6dba590cb69aa6ae8eb400da35f1f162b806f72bc5d080b22f9637c,False,"None"
-/System/Library/LaunchAgents/com.apple.lateragent.plist,com.apple.lateragent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Resources/LaterAgent.app/Contents/MacOS/LaterAgent']",9ee04b86402978382f0a353e81dad5bbddb2ec5ce06ec69a8dd9b0a7bb17e66f,False,""
-/System/Library/LaunchAgents/com.apple.locationmenu.plist,com.apple.locationmenu,"['/System/Library/CoreServices/LocationMenu.app/Contents/MacOS/LocationMenu']",4caa32001180f54abeeb4c2f955816c68260f7fe88943f9d45febfce12be8782,False,""
-/System/Library/LaunchAgents/com.apple.loginwindow.LWWeeklyMessageTracer.plist,com.apple.loginwindow.LWWeeklyMessageTracer,"['/System/Library/CoreServices/loginwindow.app/Contents/Resources/LWWeeklyMessageTracer']",be3a1293a200ed0dc5684e1fa3f8929229f5422362c113e459a18d6602594ef8,False,"None"
-/System/Library/LaunchAgents/com.apple.lsd.plist,com.apple.lsd,"['/usr/libexec/lsd']",471ac181fab5fbeab8a4b27fe98258730da618bf585a892e5c2f6fc8c7cf3af5,False,""
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.agent.plist,com.apple.ManagedClientAgent.agent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-a']",9b1ac63533155c72899f5da9123420709efe4abcfc3f4d59a7fe94e01d318b80,False,""
-/System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist,com.apple.ManagedClientAgent.enrollagent,"['/System/Library/CoreServices/ManagedClient.app/Contents/Resources/ManagedClientAgent', '-j']",9b1ac63533155c72899f5da9123420709efe4abcfc3f4d59a7fe94e01d318b80,False,""
-/System/Library/LaunchAgents/com.apple.Maps.pushdaemon.plist,com.apple.Maps.mapspushd,"['/System/Library/CoreServices/mapspushd']",fe4f02c1d4eed96c7ad1b198bb9793b32ed02fff9e7184330003501bfd45a3dc,False,""
-/System/Library/LaunchAgents/com.apple.maspushagent.plist,com.apple.maspushagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/maspushagent']",aa8eb4099b577626eb20518ebc2c0e703bd8a79d6ead4b075db6f751856ecf0c,False,""
-/System/Library/LaunchAgents/com.apple.mbbackgrounduseragent.plist,com.apple.mbbackgrounduseragent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbbackgrounduseragent']",24016f2c65a75ba18fc1ccdae6025d66baef8f9d34f79cd03281e4fe029efa68,False,""
-/System/Library/LaunchAgents/com.apple.mbfloagent.plist,com.apple.mbfloagent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbfloagent']",40905f98caf8a207fd16e3f66ad338c3bc58b52ea42a2da94e69032f72bb2b4d,False,""
-/System/Library/LaunchAgents/com.apple.mbuseragent.plist,com.apple.mbuseragent,"['/System/Library/CoreServices/Setup Assistant.app/Contents/Resources/mbuseragent']",b2849c894d4eec2a2d8abc8490c5fbb48bf60637e264de4234c5f52a0b0c8acb,False,""
-/System/Library/LaunchAgents/com.apple.mdmclient.agent.plist,com.apple.mdmclient.agent,"['/usr/libexec/mdmclient', 'agent']",eecee657f6678b5bbbada7b0cda002fb5341385ee51fa4e3b0fa6e6d1dca771e,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.32bit.plist,com.apple.mdworker.32bit,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker32', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.32bit']",b7d2a2e46b89fcbf1825294aba34c3bf6f13490a8ca41e90f0678fa702a431ad,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.bundles.plist,com.apple.mdworker.bundles,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-bundle', '-c', 'MDSImporterBundleFinder', '-m', 'com.apple.mdworker.bundles']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.isolation.plist,com.apple.mdworker.isolation,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.isolation']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.lsb.plist,com.apple.mdworker.lsb,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-lsb', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.lsb']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.mail.plist,com.apple.mdworker.mail,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-mail', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.mail']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.shared.plist,com.apple.mdworker.shared,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.shared']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.single.plist,com.apple.mdworker.single,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker', '-c', 'MDSImporterWorker', '-m', 'com.apple.mdworker.single']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mdworker.sizing.plist,com.apple.mdworker.sizing,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker', '-s', 'mdworker-sizing', '-c', 'MDSSizingWorker', '-m', 'com.apple.mdworker.sizing']",019abfad5a68690d02a145719276e1e237f9e4ee9bd07dca41ee51058a1c572d,False,""
-/System/Library/LaunchAgents/com.apple.mediaanalysisd.plist,com.apple.mediaanalysisd,"['/System/Library/PrivateFrameworks/VideoProcessing.framework/Versions/A/mediaanalysisd']",5d03fdde9a65df8fcd9ab8a49b1c163902dfbca615071f4c3953136a48c0e884,False,"None"
-/System/Library/LaunchAgents/com.apple.mediaremoteagent.plist,com.apple.mediaremoteagent,"['/System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoteagent']",cd0d3e423b63e5e2e6a2bdbbbb0c4c888495dc1384dcd43c052ed0b327f6f9d1,False,"None"
-/System/Library/LaunchAgents/com.apple.metadata.mdbulkimport.plist,com.apple.metadata.mdbulkimport,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdbulkimport', '-s', 'mdbulkimport']",b3cd78425db64e692c5792478fe05909e085e369344d8befcbf910869ac48308,False,""
-/System/Library/LaunchAgents/com.apple.metadata.mdflagwriter.plist,com.apple.metadata.mdflagwriter,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdflagwriter']",ca5d69eae092150061a52decbec20ae16568f9f13886bc1f60bf4b3f48de099d,False,""
-/System/Library/LaunchAgents/com.apple.metadata.mdwrite.plist,com.apple.metadata.mdwrite,"['/System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdwrite']",1afac25b8dfda1afb206a930e7207516879c2123869acbec6f6faeaf0f6c1c67,False,""
-/System/Library/LaunchAgents/com.apple.midiserver.plist,com.apple.midiserver,"['/System/Library/Frameworks/CoreMIDI.framework/MIDIServer']",397d10e1998f61c5688bd803b08f47fd69bc2fc3ea5443cf86b6f674b1b85380,False,""
-/System/Library/LaunchAgents/com.apple.MRTa.plist,com.apple.MRTa,"['/System/Library/CoreServices/MRT.app/Contents/MacOS/MRT', '-a']",0100350f46e5f61a4e66fb90cc1a49c0bb60ccb502a6c28b2b96136a1d3aa47e,True,""
-/System/Library/LaunchAgents/com.apple.navd.plist,com.apple.navd,"['/System/Library/CoreServices/navd']",3ea139466dd955b8cfcb949fcf7b1264a7c87a1a53c311ec2c94e66265f5e2ce,False,""
-/System/Library/LaunchAgents/com.apple.neagent.plist,com.apple.neagent,"['/usr/libexec/neagent']",a8d2776aaeaadd3d79f86f6275d4e3d20449d156a59ab584620dea35eddc7b54,False,""
-/System/Library/LaunchAgents/com.apple.netauth.user.auth.plist,com.apple.netauth.user.auth,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthSysAgent']",eee74a6ea16f475de659b6a18ddf92e9a6b51f0fbf73bbcdc9b8a242b7e54a37,False,""
-/System/Library/LaunchAgents/com.apple.netauth.user.gui.plist,com.apple.netauth.user.gui,"['/System/Library/CoreServices/NetAuthAgent.app/Contents/MacOS/NetAuthAgent']",74d2a6ab4247631a21eb33d14fb33f7bde7bee59db6c4f7203e1dc98f494efa5,False,""
-/System/Library/LaunchAgents/com.apple.NetworkDiagnostics.plist,com.apple.NetworkDiagnostics,"['/System/Library/CoreServices/Network Diagnostics.app/Contents/MacOS/Network Diagnostics']",4ac7acbfe00efa3586025c4bf7fb50f5e7877a8e580ac7c41a05a8e08cb01b4a,False,""
-/System/Library/LaunchAgents/com.apple.networkserviceproxy-osx.plist,com.apple.networkserviceproxy,"['/usr/libexec/networkserviceproxy']",87df0424485d8c6b3895547505d98e0c81a32a61fb211094c1bbcea88d682732,False,"None"
-/System/Library/LaunchAgents/com.apple.noticeboard.agent.plist,com.apple.noticeboard.agent,"['/System/Library/PrivateFrameworks/Noticeboard.framework/Versions/A/Resources/nbagent.app/Contents/MacOS/nbagent']",61fc66f29f61cd915de00e51a1d70d07d4ca3753f7c930f99754d135c078afb5,False,""
-/System/Library/LaunchAgents/com.apple.notificationcenterui.plist,com.apple.notificationcenterui.agent,"['/System/Library/CoreServices/NotificationCenter.app/Contents/MacOS/NotificationCenter']",619ef0397a9647dec06e43b308d6683c69fe0ca6c65f2bf59519947c13a7e502,False,""
-/System/Library/LaunchAgents/com.apple.nsurlsessiond.plist,com.apple.nsurlsessiond,"['/usr/libexec/nsurlsessiond']",e398a8b6495aad49af02a3a5200ecd649832b0b8dd255b400a1a37d13559a0d2,False,""
-/System/Library/LaunchAgents/com.apple.nsurlstoraged.plist,com.apple.nsurlstoraged,"['/usr/libexec/nsurlstoraged']",7b73d6259e96cdfb749d0b6c143b5333ad3d8fda7be151abd2698823e7b7b4c7,False,""
-/System/Library/LaunchAgents/com.apple.OSDUIHelper.plist,com.apple.OSDUIHelper,"['/System/Library/CoreServices/OSDUIHelper.app/Contents/MacOS/OSDUIHelper']",a13f13ab1db2aa4e3fb57b4fba449bb8bb4e2bdab963f28dd3d1e6d2ed1dcf00,False,"None"
-/System/Library/LaunchAgents/com.apple.PackageKit.InstallStatus.plist,com.apple.PackageKit.InstallStatus,"['/System/Library/CoreServices/Install in Progress.app/Contents/MacOS/Install in Progress']",4ee8dc5e6c5f461a156507f00121b1a504115edcd419785ef65fb893728c1e66,False,""
-/System/Library/LaunchAgents/com.apple.parentalcontrols.check.plist,com.apple.parentalcontrols.check,"['/System/Library/PrivateFrameworks/FamilyControls.framework/Resources/pcdCheck']",d1a265b5f0ed30e01386a91afec9f45e48c1e7cdb6720b935e0f6e1ea0bc49eb,True,""
-/System/Library/LaunchAgents/com.apple.parsecd.plist,com.apple.parsecd,"['/System/Library/PrivateFrameworks/CoreParsec.framework/parsecd']",57de8f6284304175e75688eb2e8dcc88310394a9ce2c758295674dfb180d4ea6,False,"None"
-/System/Library/LaunchAgents/com.apple.passd.plist,com.apple.passd,"['/System/Library/PrivateFrameworks/PassKitCore.framework/passd']",00962fe46cc8dc4edf8b7640ce9b318bb5d827b83466f5b2797caba63ea0753f,False,"None"
-/System/Library/LaunchAgents/com.apple.pboard.plist,com.apple.pboard,"['/usr/libexec/pboard']",6a9073e6d77e050aa21aaff7c69f2679b15fe35fb15df499ba6f58ff9698d75b,False,""
-/System/Library/LaunchAgents/com.apple.pbs.plist,com.apple.pbs,"['/System/Library/CoreServices/pbs']",8fd9e9f801d1d70c733b050cc21530facc2212def185dbee569e4edc2b11b4c1,False,"Services menu daemon"
-/System/Library/LaunchAgents/com.apple.PCIESlotCheck.plist,com.apple.PCIESlotCheck,"['/System/Library/CoreServices/Expansion Slot Utility.app/Contents/Resources/PCIESlotCheck']",0cbdad8c23138cdfd19d14aa2b399ca1ce3d56b706ec388b07d55aa290fc1a90,True,""
-/System/Library/LaunchAgents/com.apple.personad.plist,com.apple.personad,"['/System/Library/PrivateFrameworks/PersonaKit.framework/Versions/A/Support/personad']",5a772e1a11f09b632b66b3b78d88800933104f041ba0b3992d877fa61256ea2e,False,"None"
-/System/Library/LaunchAgents/com.apple.photoanalysisd.plist,com.apple.photoanalysisd,"['/System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd']",28cb710e6a75d81e7ba893327fab78171dca534c520f6a59272ce46106f0078e,False,"None"
-/System/Library/LaunchAgents/com.apple.photolibraryd.plist,com.apple.photolibraryd,"['/System/Library/PrivateFrameworks/PhotoLibraryPrivate.framework/Versions/A/Support/photolibraryd']",3a94f82e037f35ab46853cdf4050ff31a3e4035c53ad9ee0dafdd6dd868930d7,False,""
-/System/Library/LaunchAgents/com.apple.PhotoLibraryMigrationUtility.XPC.plist,com.apple.PhotoLibraryMigrationUtility.XPC,"['/System/Library/CoreServices/Photo Library Migration Utility.app/Contents/MacOS/Photo Library Migration Utility', '-server']",9f81315e397fe2f0584afbebe8977e09e7eb99ff5d649c4b3a2197296ccd6f45,False,""
-/System/Library/LaunchAgents/com.apple.pictd.plist,com.apple.pictd,"['/usr/sbin/pictd']",24e231675f8fa5f905a35a8d468fd515ead7f77b44387a29a9be138bd7c559d5,False,""
-/System/Library/LaunchAgents/com.apple.PIPAgent.plist,com.apple.PIPAgent,"['/System/Library/CoreServices/PIPAgent.app/Contents/MacOS/PIPAgent']",300d37989400719c3cdee2239714c972494921cac58e8b84ee78a660ced65593,False,"None"
-/System/Library/LaunchAgents/com.apple.pluginkit.pkd.plist,com.apple.pluginkit.pkd,"['/usr/libexec/pkd']",a5098161f5fcc40ab64396bbad62635ecf43c994b46cb8550f30318234d437f2,False,""
-/System/Library/LaunchAgents/com.apple.pluginkit.pkreporter.plist,com.apple.pluginkit.pkreporter,"['/usr/libexec/pkreporter']",0b5e79255fead173992b2bf8b02ac84ce71ed74cf1ae0fec2bb15e1ae09f0c15,False,""
-/System/Library/LaunchAgents/com.apple.powerchime.plist,com.apple.powerchime,"['/System/Library/CoreServices/PowerChime.app/Contents/MacOS/PowerChime']",34eb25a2110ebaee8eb51719a63e93f4cd7b86386a955835d5c68553ab5fd6c2,True,""
-/System/Library/LaunchAgents/com.apple.printtool.agent.plist,com.apple.printtool.agent,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/PrintCore.framework/Versions/A/printtool', 'agent']",eaf12c090dd671bbf82116de2d7c175ea775610b0b3a7c18626b54dfae0679e2,False,""
-/System/Library/LaunchAgents/com.apple.printuitool.agent.plist,com.apple.printuitool.agent,"['/System/Library/PrivateFrameworks/PrintingPrivate.framework/Versions/A/PrintUITool']",1e5200d6bf4e78ce8440775d973e24603996ae884425323c71ddb95b32c60fcb,False,""
-/System/Library/LaunchAgents/com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist,com.apple.protectedcloudstorage.protectedcloudkeysyncing,"['/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing']",da860346440ac65cf1c6098d562087ab0a739b5b9aaff3417e43c854235594a5,False,"None"
-/System/Library/LaunchAgents/com.apple.PubSub.Agent.plist,com.apple.PubSub.Agent,"['/System/Library/Frameworks/PubSub.framework/Versions/A/Resources/PubSubAgent.app/Contents/MacOS/PubSubAgent']",8eca5d557b21657416c4b8ac418f8bcfae0fee9156854ab83621f2fe97e9903b,False,""
-/System/Library/LaunchAgents/com.apple.quicklook.32bit.plist,com.apple.quicklook.32bit,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd32.app/Contents/MacOS/quicklookd32']",49325fb2eec37df64604ecdd4dee1fd22c928416c1df9ef101eae4169de7e77b,False,""
-/System/Library/LaunchAgents/com.apple.quicklook.config.plist,com.apple.quicklook.config,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookconfig']",12a8ef5b0ba6c65535a0551aeb4546098560e940a8ac455b99c3ec6c7ec3530b,False,""
-/System/Library/LaunchAgents/com.apple.quicklook.plist,com.apple.quicklook,"['/System/Library/Frameworks/QuickLook.framework/Resources/quicklookd.app/Contents/MacOS/quicklookd']",f47e5ee500aa55d7c1c63eec82122854871c56269950e33c7aeba9c059ee3e61,False,""
-/System/Library/LaunchAgents/com.apple.quicklook.ThumbnailsAgent.plist,com.apple.quicklook.ThumbnailsAgent,"['/System/Library/PrivateFrameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent']",9d14a78ac173aae36c41c41c03e9afc28eb2677b08d462f475639636342e2c68,False,"None"
-/System/Library/LaunchAgents/com.apple.quicklook.ui.helper.plist,com.apple.quicklook.ui.helper,"['/System/Library/Frameworks/Quartz.framework/Frameworks/QuickLookUI.framework/Resources/QuickLookUIHelper.app/Contents/MacOS/QuickLookUIHelper']",b7af3a62434062ec429e195d815656eec8fe6c8172da94e43b5a4db07b3e4e1a,False,""
-/System/Library/LaunchAgents/com.apple.rcd.plist,com.apple.rcd,"['/System/Library/CoreServices/rcd.app/Contents/MacOS/rcd']",41603b4dafd5a38e6a27561cb64bf2d0c81b9969c430959fdef37ecf2de0a913,False,""
-/System/Library/LaunchAgents/com.apple.recentsd.plist,com.apple.recentsd,"['/System/Library/PrivateFrameworks/CoreRecents.framework/Versions/A/Support/recentsd']",dafe3f9a00949e119955b670319890020ec87397b585ec163870f1353849db1e,False,""
-/System/Library/LaunchAgents/com.apple.RemoteDesktop.plist,com.apple.RemoteDesktop.agent,"['/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent']",17c2a06f6b378737b347505eb83cfde082528700a3b992fd4a0501b5c178f91b,False,""
-/System/Library/LaunchAgents/com.apple.ReportCrash.plist,com.apple.ReportCrash,"['/System/Library/CoreServices/ReportCrash']",a64d420ec2bc8d826c8298072c279b17061e796759db64f719b1dbd9ae510279,False,"Analyzes crashing processes and saves a crash report to disk"
-/System/Library/LaunchAgents/com.apple.ReportCrash.Self.plist,com.apple.ReportCrash.Self,"['/System/Library/CoreServices/ReportCrash']",a64d420ec2bc8d826c8298072c279b17061e796759db64f719b1dbd9ae510279,False,""
-/System/Library/LaunchAgents/com.apple.ReportGPURestart.plist,com.apple.ReportGPURestart,"['/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/ReportGPURestart']",3a46d422792790e04e3d5aa862dc7fe3f742411dc61506fc0be4aceda604c94e,False,""
-/System/Library/LaunchAgents/com.apple.ReportPanic.plist,com.apple.ReportPanic,"['/System/Library/CoreServices/ReportPanic.app/Contents/MacOS/ReportPanic']",20e12f0323501473844f1e29c3ad8b7486f3a365ea22a1e2cfa076ec8b698a87,False,""
-/System/Library/LaunchAgents/com.apple.reversetemplated.plist,com.apple.reversetemplated,"['/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/reversetemplated']",8757b19095a0f5dd1df07f5e3d71e7082625705727ff0d750fb9633bba066cd4,False,""
-/System/Library/LaunchAgents/com.apple.Safari.SafeBrowsing.Service.plist,com.apple.Safari.SafeBrowsing.Service,"['/System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service']",3035e6c1b818c1bd516c4254093f984ac3bdb1ebf0e4aedf65eb6312c0f3082c,False,""
-/System/Library/LaunchAgents/com.apple.SafariCloudHistoryPushAgent.plist,com.apple.SafariCloudHistoryPushAgent,"['/usr/libexec/SafariCloudHistoryPushAgent']",8220a9c93d2790ff1f41d0beb92bd8709804530db697f68b6e2c475e4e9c601f,False,""
-/System/Library/LaunchAgents/com.apple.safaridavclient.plist,com.apple.safaridavclient,"['/System/Library/PrivateFrameworks/BookmarkDAV.framework/Helpers/SafariDAVClient']",bc592e69e7185e8fcc8e331bb8f0c03057d6aca1266809b06e39da140b17732d,False,""
-/System/Library/LaunchAgents/com.apple.SafariNotificationAgent.plist,com.apple.SafariNotificationAgent,"['/usr/libexec/SafariNotificationAgent']",f4b535c7e3f4aa8a937ec10db2d9cab8b55527fbcf20aa67fcb5182f4a74a325,False,""
-/System/Library/LaunchAgents/com.apple.SafariPlugInUpdateNotifier.plist,com.apple.SafariPlugInUpdateNotifier,"['/usr/libexec/SafariPlugInUpdateNotifier']",f9cc06a4486a8b24abdf08dba2a4e28e5031f0197b0adb70464c82517a02a42e,False,""
-/System/Library/LaunchAgents/com.apple.scopedbookmarkagent.xpc.plist,com.apple.scopedbookmarksagent.xpc,"['/System/Library/CoreServices/ScopedBookmarkAgent']",50f125e0c2e92ddf494377bb882b5c2f55afe9f5f453c43c70599ed7b4a70325,False,""
-/System/Library/LaunchAgents/com.apple.ScreenReaderUIServer.plist,com.apple.ScreenReaderUIServer,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Resources/ScreenReaderUIServer.app/Contents/MacOS/ScreenReaderUIServer']",a4af357b81f5b3f9b20eee41e1cca65c6d8a4b7e8ddbe65d17181d8cf9421235,False,""
-/System/Library/LaunchAgents/com.apple.screensharing.agent.plist,com.apple.screensharing.agent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/MacOS/ScreensharingAgent']",a31f1b6b7b54305c52e53f8a1cfc47ce9f5da396e0423d5154af54adae3075a9,False,""
-/System/Library/LaunchAgents/com.apple.screensharing.MessagesAgent.plist,com.apple.screensharing.MessagesAgent,"['/System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer']",92dc82dbee3b4b3ae80cb70d63b9dcd106a8e1b2803bde9497b86a6d0be409a7,False,""
-/System/Library/LaunchAgents/com.apple.scrod.plist,com.apple.scrod,"['/System/Library/PrivateFrameworks/ScreenReader.framework/Frameworks/ScreenReaderOutput.framework/Resources/scrod']",8f725cbdd8ccfd21d9d34a6c09fb971a25113c6304fb462029126a9ce43ead3b,False,""
-/System/Library/LaunchAgents/com.apple.secd.plist,com.apple.secd,"['/usr/libexec/secd']",1b9f50548015a9a8c5d73dbc8bc806482acee94c3f9f74a7f018c5fde42af4d0,False,""
-/System/Library/LaunchAgents/com.apple.secinitd.plist,com.apple.secinitd,"['/usr/libexec/secinitd']",3de685f119f1c94f99ff2867106f086a0c37db53bc80c4369e03611f4d64fae3,False,""
-/System/Library/LaunchAgents/com.apple.security.agent.plist,com.apple.security.agent,"['/System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent']",bd1a5f8764e5f479bb094e4a08b7c314d24be3ee1f8dff9a6e12007f9d131d4f,False,""
-/System/Library/LaunchAgents/com.apple.security.cloudkeychainproxy3.plist,com.apple.security.cloudkeychainproxy3,"['/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy']",34cd004d8aa2bdc95beeed71ac41427540693308c3c594175d5e3fbb7fc64812,False,""
-/System/Library/LaunchAgents/com.apple.security.DiskUnmountWatcher.plist,com.apple.security.DiskUnmountWatcher,"['/System/Library/PrivateFrameworks/KerberosHelper/Helpers/DiskUnmountWatcher']",f82f52a97b773fbde88d97ca752de56e43b8701797a6138f5f7160d5d7ac5aab,False,""
-/System/Library/LaunchAgents/com.apple.security.idskeychainsyncingproxy.plist,com.apple.security.idskeychainsyncingproxy,"['/System/Library/Frameworks/Security.framework/Versions/A/Resources/IDSKeychainSyncingProxy.bundle/Contents/MacOS/IDSKeychainSyncingProxy']",6a589fbc82c0f9eca03f6e147799a682b205a174778d80a7bb9b22273c541841,False,""
-/System/Library/LaunchAgents/com.apple.security.keychain-circle-notification.plist,com.apple.security.keychain-circle-notification,"['/System/Library/CoreServices/Keychain Circle Notification.app/Contents/MacOS/Keychain Circle Notification']",491323b6c4d4d444f4722de3924570365e46b2a2a31b3b0f70b3687fed2f18ca,False,""
-/System/Library/LaunchAgents/com.apple.sharingd.plist,com.apple.sharingd,"['/usr/libexec/sharingd']",bb19e63102a77bb5973f535d3fb7b9cd605f1aaaaae82d252a793a33dc535c6a,True,"Sharing Daemon that enables AirDrop, Handoff, Instant Hotspot, Shared Computers, and Remote Disc in the Finder"
-/System/Library/LaunchAgents/com.apple.Siri.plist,com.apple.Siri.agent,"['/System/Library/CoreServices/Siri.app/Contents/MacOS/Siri', 'launchd']",76cb2b1816918f1666462fb07b7a24d620bb49afb5365d1f42ca370f9844f90a,False,"None"
-/System/Library/LaunchAgents/com.apple.soagent.plist,com.apple.soagent,"['/System/Library/PrivateFrameworks/MessagesKit.framework/Resources/soagent.app/Contents/MacOS/soagent']",ecca65efcb3afa85a23bbce9dfd37442c5a86f8102983ef5ea889a22bfd6bf81,True,""
-/System/Library/LaunchAgents/com.apple.SocialPushAgent.plist,com.apple.SocialPushAgent,"['/System/Library/CoreServices/SocialPushAgent.app/Contents/MacOS/SocialPushAgent']",3fe4153715701bbcef3815db8c798af7483047cd8725a4c797ba3e08fe2c714d,True,""
-/System/Library/LaunchAgents/com.apple.softwareupdate_notify_agent.plist,com.apple.softwareupdate_notify_agent,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/softwareupdate_notify_agent']",72e5777f50bc4aabe0a34fcc509a23c2cd1f9e6602b0313e9766b6142b449771,False,""
-/System/Library/LaunchAgents/com.apple.speech.speechdatainstallerd.plist,com.apple.speech.speechdatainstallerd,"['/System/Library/PrivateFrameworks/SpeechObjects.framework/Versions/A/SpeechDataInstallerd.app/Contents/MacOS/SpeechDataInstallerd']",23f2092cb95e37f22f2f67466259c796cd6f4fce63b592835cddd879a1439d33,False,""
-/System/Library/LaunchAgents/com.apple.speech.speechsynthesisd.plist,com.apple.speech.speechsynthesisd,"['/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd']",d37eec8945fe3d7a4f29c241eff0b35da57fa1ec74672771fbf3239ea1d1917e,False,""
-/System/Library/LaunchAgents/com.apple.speech.synthesisserver.plist,com.apple.speech.synthesisserver,"['/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app/Contents/MacOS/SpeechSynthesisServer', 'launchd']",cb384caba4a1805adf1f8ffa0f8a00134e3b05b0aec20a2d4af46866fbd378a8,False,""
-/System/Library/LaunchAgents/com.apple.spindump_agent.plist,com.apple.spindump_agent,"['/usr/libexec/spindump_agent']",91316bc9169625bb5b70a54f5d6a1845bda3baabedb5c217dc548f02d0458539,True,""
-/System/Library/LaunchAgents/com.apple.spotlight.IndexAgent.plist,com.apple.spotlight.IndexAgent,"['/System/Library/PrivateFrameworks/CoreSpotlight.framework/Support/com.apple.spotlight.IndexAgent']",1052d614877e440940fcc081eb2b880ff3f52fc98d83cd214aebcd35d404eba3,False,""
-/System/Library/LaunchAgents/com.apple.Spotlight.plist,com.apple.Spotlight,"['/System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight']",12e03c2ff2f84cd0388415291fa31adbe526379effb3335d15e9b16db9d266a6,False,""
-/System/Library/LaunchAgents/com.apple.SSInvitationAgent.plist,com.apple.ssinvitationagent,"['/System/Library/CoreServices/RemoteManagement/ScreensharingAgent.bundle/Contents/Support/SSInvitationAgent.app/Contents/MacOS/SSInvitationAgent']",55de18cf5ae18b802ddbfbdc5bf7d7d2eefe5dcbb0ccb1d1d571052645746fb3,False,""
-/System/Library/LaunchAgents/com.apple.StorageManagementUIHelper.plist,com.apple.STMUIHelper,"['/System/Library/PrivateFrameworks/StorageManagement.framework/Resources/STMUIHelper.app/Contents/MacOS/STMUIHelper']",69b442188c5c328a19ddf7b9ce4e164cf8b58afca91e6947eb40578126d494f0,False,"None"
-/System/Library/LaunchAgents/com.apple.storeaccountd.plist,com.apple.storeaccountd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeaccountd']",1f5b284bae1a1f34c385bbb858460cff6858fe453730e9594e6742a9236ff7eb,False,""
-/System/Library/LaunchAgents/com.apple.storeassetd.plist,com.apple.storeassetd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeassetd']",fa9af393b6dbe8244f66b012c7b3726a95dbaf0b2afd9448108240fcd365f038,False,""
-/System/Library/LaunchAgents/com.apple.storedownloadd.plist,com.apple.storedownloadd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storedownloadd']",e9f3678a540fdbd26fff350937c61f717af8cf769fe14e1716c821979a8e000c,False,""
-/System/Library/LaunchAgents/com.apple.storeinappd.plist,com.apple.storeinappd,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeinappd']",2e585d2adf1aac94a22ee0db5540111f97401ee28e1cc56caefcba648b29fa1e,False,""
-/System/Library/LaunchAgents/com.apple.storeinstallagent.plist,com.apple.storeinstallagent,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeinstallagent']",6abb54288204bdea0d8b8a4e07a3e12d750c3ef823bd0f5189f6d6d219e3a3c7,False,"None"
-/System/Library/LaunchAgents/com.apple.storelegacy.plist,com.apple.storelegacy,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storelegacy']",d72eb418db720a85fb01b0994d6863ef01a55e3b38c42efecd7ed7dc92b1ed05,False,""
-/System/Library/LaunchAgents/com.apple.storeuid.plist,com.apple.storeuid,"['/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid']",3965b2e902c644aafb02401f6abbbacad0446283cf6a84d620e5fcd057b09bdb,False,""
-/System/Library/LaunchAgents/com.apple.suggestd.plist,com.apple.suggestd,"['/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd']",d38fdd71d4b724c79929e344e59d35da6664dd9a0697be10098defda96462252,False,""
-/System/Library/LaunchAgents/com.apple.sulogoutmonitor.plist,com.apple.sulogoutmonitor,"['/System/Library/CoreServices/Software Update.app/Contents/Resources/sulogoutmonitor']",8c230ccd95ed30581c5941a7060d0695ee3191de1c545176af12ecd6e009ac61,True,"None"
-/System/Library/LaunchAgents/com.apple.swcd.plist,com.apple.swcd,"['/usr/libexec/swcd']",3f2eadce48f28aa91bd036189e8352df5c029be76a0b133bef66808fae824140,False,""
-/System/Library/LaunchAgents/com.apple.syncdefaultsd.plist,com.apple.syncdefaultsd,"['/System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd']",de66931fd702a93aab22efbe524585f7427fa398fd6e831004e58c065a8cae1b,False,""
-/System/Library/LaunchAgents/com.apple.syncservices.SyncServer.plist,com.apple.syncservices.SyncServer,"['/System/Library/Frameworks/SyncServices.framework/Versions/Current/Resources/SyncServer.app/Contents/MacOS/SyncServer']",2dc2eb28809490be6e7c041b7d13f9a495cd68891cfad8c1d12edb1f7c458e54,False,""
-/System/Library/LaunchAgents/com.apple.syncservices.uihandler.plist,com.apple.syncservices.uihandler,"['/System/Library/PrivateFrameworks/SyncServicesUI.framework/Versions/Current/Resources/syncuid.app/Contents/MacOS/syncuid']",777a757608cbba762f56c276b108317bcb3b4235d07e5be45e6a6adeeec95910,False,""
-/System/Library/LaunchAgents/com.apple.sysdiagnose_agent.plist,com.apple.sysdiagnose_agent,"['/usr/libexec/sysdiagnose_agent']",45adcae8b81d8a9cf5e13aff4127604c9ecf44e8b3ca98d45381e007c1502103,False,"None"
-/System/Library/LaunchAgents/com.apple.systemprofiler.plist,com.apple.systemprofiler,"['/Applications/Utilities/System Information.app/Contents/MacOS/System Information']",fb8236990567b86473053dd39e132be3354ed51981e07e8f94cab2f668d82791,False,""
-/System/Library/LaunchAgents/com.apple.SystemUIServer.plist,com.apple.SystemUIServer.agent,"['/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer']",0e1b385d10a6b187d3533a0f0f66baf2386d83d32f00f4c906956d6788292e44,False,""
-/System/Library/LaunchAgents/com.apple.talagent.plist,com.apple.talagent,"['/System/Library/CoreServices/talagent']",21d5228c0c3361352b296be1a3a2bc286c3d8d4fa3b7c13636af8b0f41396b16,True,""
-/System/Library/LaunchAgents/com.apple.tccd.plist,com.apple.tccd,"['/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd']",f8ba72775dcc31f2b1ad218a356795c1ddc45ae5afb704162bad02efacbdf4ad,False,""
-/System/Library/LaunchAgents/com.apple.telephonyutilities.callservicesd.plist,com.apple.telephonyutilities.callservicesd,"['/System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd']",660fa6be5283e68353191fec41bd3bac8906177362bc1f77282b187e99ca7cde,False,""
-/System/Library/LaunchAgents/com.apple.thermaltrap.plist,com.apple.thermaltrap,"['/System/Library/CoreServices/ThermalTrap.app/Contents/MacOS/ThermalTrap']",0793a6ba51a71052ced06ff43c64981b89023450aa2169229d97c1436d78f04a,False,""
-/System/Library/LaunchAgents/com.apple.tiswitcher.plist,com.apple.tiswitcher,"['/System/Library/CoreServices/Menu Extras/TextInput.menu/Contents/SharedSupport/TISwitcher.app/Contents/MacOS/TISwitcher']",c064be6efc1abee945bf40eea41e4dba88b4d687b26dc0e5b5802c2a2b8773cc,False,""
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.plist,com.apple.TMHelperAgent,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent']",e643174ab97189486809a7de68b8ce7f6eebe397a463dba4a3f807cafbd02902,False,""
-/System/Library/LaunchAgents/com.apple.TMHelperAgent.SetupOffer.plist,com.apple.TMHelperAgent.SetupOffer,"['/System/Library/CoreServices/backupd.bundle/Contents/Resources/TMHelperAgent.app/Contents/MacOS/TMHelperAgent', '-offer']",e643174ab97189486809a7de68b8ce7f6eebe397a463dba4a3f807cafbd02902,False,""
-/System/Library/LaunchAgents/com.apple.touristd.plist,com.apple.touristd,"['/System/Library/PrivateFrameworks/Tourist.framework/Versions/A/Resources/touristd']",3f482470c287ed69ba6779811ef028d6df6a56a8caf12097fde78bc508b5e2ca,False,"None"
-/System/Library/LaunchAgents/com.apple.trustd.agent.plist,com.apple.trustd.agent,"['/usr/libexec/trustd', '--agent']",872b9574d20649ce20c78e6ead6a40b6ed494f24fac77535c27f0f71e5a114dc,False,""
-/System/Library/LaunchAgents/com.apple.TrustEvaluationAgent.plist,com.apple.TrustEvaluationAgent,"['/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Resources/trustevaluationagent']",ce6d7839e819198d7589ad73eb560960e01651e52e0339c24c6d6e9d68a20b1f,False,""
-/System/Library/LaunchAgents/com.apple.universalaccessAuthWarn.plist,com.apple.universalaccessAuthWarn,"['/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/Resources/universalAccessAuthWarn.app/Contents/MacOS/universalAccessAuthWarn', 'launchd', '-s']",5f5429530117a444af89c99f2bd23c327a3d5a3e85498e5e606c2158f934d306,False,""
-/System/Library/LaunchAgents/com.apple.universalaccesscontrol.plist,com.apple.universalaccesscontrol,"['/System/Library/CoreServices/UniversalAccessControl.app/Contents/MacOS/UniversalAccessControl', 'launchd', '-s']",54c4ea54577eae189b3af6b3faa66e7fc215ae6ae5005568394dc6db1e81e833,False,""
-/System/Library/LaunchAgents/com.apple.universalaccessd.plist,com.apple.universalaccessd,"['/usr/sbin/universalaccessd', 'launchd', '-s']",34abb9fd0ed401cb8a53c9fd080cdb68ef6a283da39ad80783a36f78cb03f788,True,""
-/System/Library/LaunchAgents/com.apple.universalaccessHUD.plist,com.apple.universalaccessHUD,"['/System/Library/PrivateFrameworks/UniversalAccess.framework/Versions/A/Resources/UniversalAccessHUD.app/Contents/MacOS/UniversalAccessHUD', 'launchd', '-s']",5aee033db38a01c8d065b8f3cf7eb8afc8b11e32733138f8d1722ef5555ce24f,False,"None"
-/System/Library/LaunchAgents/com.apple.unmountassistant.useragent.plist,com.apple.unmountassistant.useragent,"['/System/Library/CoreServices/UnmountAssistantAgent.app/Contents/MacOS/UnmountAssistantAgent']",37b2dce24c9ca5cf5596bac0dcb2b3e61d853f44ff0e5d54f7a9640d9744de4f,False,""
-/System/Library/LaunchAgents/com.apple.USBAgent.plist,com.apple.USBAgent,"['/usr/libexec/USBAgent']",5264537451aaf4bc1da13789ab95730b245979614149a1beb353d6771b28bb55,False,""
-/System/Library/LaunchAgents/com.apple.UserEventAgent-Aqua.plist,com.apple.UserEventAgent-Aqua,"['/usr/libexec/UserEventAgent', '(Aqua)']",0db2c6f3f3370cdc06524a4824186c8733ce732d2b5946d7f068e8b4d4bae4c9,False,""
-/System/Library/LaunchAgents/com.apple.UserEventAgent-LoginWindow.plist,com.apple.UserEventAgent-LoginWindow,"['/usr/libexec/UserEventAgent', '(LoginWindow)']",0db2c6f3f3370cdc06524a4824186c8733ce732d2b5946d7f068e8b4d4bae4c9,False,""
-/System/Library/LaunchAgents/com.apple.usernoted.plist,com.apple.usernoted,"['/usr/sbin/usernoted']",4b11ef82cd74a380510bf7fda98f8f1229ce7e1e760304a4f5a3a0b360be6cea,True,""
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent-LoginWindow.plist,com.apple.UserNotificationCenterAgent-LoginWindow,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter', '-loginwindow']",c14559361ebb79ef29ea71654013946362cb9dc7e9def31f188a633fed7a5c59,False,""
-/System/Library/LaunchAgents/com.apple.UserNotificationCenterAgent.plist,com.apple.UserNotificationCenterAgent,"['/System/Library/CoreServices/UserNotificationCenter.app/Contents/MacOS/UserNotificationCenter']",c14559361ebb79ef29ea71654013946362cb9dc7e9def31f188a633fed7a5c59,False,""
-/System/Library/LaunchAgents/com.apple.VoiceOver.plist,com.apple.VoiceOver,"['/System/Library/CoreServices/VoiceOver.app/Contents/MacOS/VoiceOver', 'launchd', '-s']",db420561d8eeac28b8ad36b46437671fa8ff307be6abb83aca569eb571a9e007,False,""
-/System/Library/LaunchAgents/com.apple.warmd_agent.plist,com.apple.warmd_agent,"['/usr/libexec/warmd_agent']",e7542426d0a476ee71a1f0f53068f1368c40d071b69a3f1a992c8f069bfe4eca,False,""
-/System/Library/LaunchAgents/com.apple.webdriverd.plist,com.apple.webdriverd,"['/usr/libexec/webdriverd']",69f5cb47506cd6656e7f6f66dabc4069ada2738c99cd730ace3fd08e25b8388e,False,"None"
-/System/Library/LaunchAgents/com.apple.webinspectord.plist,com.apple.webinspectord,"['/usr/libexec/webinspectord']",354e23702c287c1a201e2c8a44dc383a514d2af41df719e7c6bc013d2c581fcb,False,""
-/System/Library/LaunchAgents/com.apple.WebKit.PluginAgent.plist,com.apple.WebKit.PluginAgent,"['/System/Library/Frameworks/WebKit.framework/Frameworks/WebKitLegacy.framework/WebKitPluginAgent']",7c6be1f002928a1a7e32b259f6595635d5399708a3fdf559344d77f70f0758f3,False,""
-/System/Library/LaunchAgents/com.apple.wifi.WiFiAgent.plist,com.apple.wifi.WiFiAgent,"['/System/Library/CoreServices/WiFiAgent.app/Contents/MacOS/WiFiAgent']",8adb0646534136bc16b0f83ca8e48f0b29aa5daab69b0e8345eadc53783a42a0,True,""
-/System/Library/LaunchAgents/com.apple.WiFiVelocityAgent.plist,com.apple.WiFiVelocityAgent,"['/usr/libexec/WiFiVelocityAgent']",9a225ebbbd22810270ce7422288f818a40f66bd47bf3cc2af7d870e46e5c577c,False,"None"
-/System/Library/LaunchAgents/com.apple.xpc.loginitemregisterd.plist,com.apple.xpc.loginitemregisterd,"['/usr/libexec/loginitemregisterd']",5af881aa40a33ef7dc26604f2601e1710e2980a6e51c4d41c43ae25a6ab18bcd,False,""
-/System/Library/LaunchAgents/com.apple.xpc.otherbsd.plist,com.apple.xpc.otherbsd,"['/usr/libexec/otherbsd']",949d29ac4189e9aa5028f30cb75f62826d178db02f08bf7cc15cbe8865c360f6,False,""
-/System/Library/LaunchAgents/com.apple.ZoomWindow.plist,com.apple.ZoomWindow,"['/System/Library/CoreServices/ZoomWindow.app/Contents/MacOS/ZoomWindowStarter', 'launchd', '-s']",549c0bb305ab4739b6ff3f0c000591ae2a9bc9dee88380ac64b829491d760c0e,False,""
-/System/Library/LaunchAgents/com.openssh.ssh-agent.plist,com.openssh.ssh-agent,"['/usr/bin/ssh-agent', '-l']",7815ec173d45abb2606c718fc1261bb4309254daa7b474e87541c6dc19dc934c,False,"None"
diff --git a/CNAME b/CNAME
deleted file mode 100644
index 68db904c..00000000
--- a/CNAME
+++ /dev/null
@@ -1 +0,0 @@
-macos.duh.to
\ No newline at end of file
diff --git a/InstallESD_Hashes.csv b/InstallESD_Hashes.csv
deleted file mode 100644
index a5f8b636..00000000
--- a/InstallESD_Hashes.csv
+++ /dev/null
@@ -1,18 +0,0 @@
-Version,Build,SHA-256,SHA-1
-10.10.2,14C109,1652d5bd574fd79eda00c19f71187bbf78a01fe22cbcf1443c066524d5f29f0c,059f2603a91465bcee24c864d446da30df920f85
-10.10.5,14F27,24c4934d91401dd2f738c7811d35ae16d3d7993586592a64b9baf625fe0427db,ef5cc8851b893dbe4bc9a5cf5c648c10450af6bc
-10.10.5,14F27,6a2d563b89d4c2733e8ff087c16db0caaa6594375ac835b3110df4306edb2459,0e063fd87d5b0a4f68dbd35da95b2018748f88eb
-10.11,15A284,d20002ec8328784d65274eb49663b24a48be95dc06c6623ec67c9f28a7481352,5e21097f2e98417ecc12574a7bb46a402594ea4a
-10.11.1,15B42,6275929722c35674fce90d2272d383d49696096e8626ee7f7900dd0334167a9a,306a080c07e293b6765ba950bab213572704acec
-10.11.2,15C50,8e81dc547f07bc92408d5269983c64cf6ab2206e4d9a1cd94eb6e9003279921b,2b11b8b618a2e5100507c3c432363081db65c4c8
-10.11.3,15D21,bc46b9b02e69546e1446e131d4a8d3b0203a6bbad73a003749571da85f51a613,e4311d93127d0668372b32e5342f3b455b6bc9bd
-10.11.4,15E65,532830b2a04b6f496b1cc1b18cc1645d1cda34151c212b68133f41c19d1431ed,f6292573395b46e8110be6077fd4827409bc948b
-10.11.5,15F34,8be0c4144d79dc0ef275d6bea60db4d23ccf83b22b6c22a99ff35261862b0758,850781fe8cb5d88c5d1bc23e704e6686ff1fcc2f
-10.11.6,15G31,0b8156957236865e170bc7784bf067ba8b5b231ad8ce45790865e16c9c653615,7739e3f62080000da5d28efa689c53976112a262
-10.12,16A323,78a2701bb63a0dcb30862314d1a4598522cfe6a2dd2b096a4e30f256909a4446,139ef35e4af0da8286b2a3af326cb114d774f606
-10.12.1,16B2657,8608c0cebf689431ad35d37bcb0035aac266c78f95e7e2a3fd8104d153a24e9b,e559e142a4c9ebaaa740c575d5c3c23c6eb3fb06
-10.12.1,16B2659,8efa85e12bcc6c2145cce68b6ecaf9ce23e11f58c1452982b1907fe0f9f76fd1,f7f147c54627c2a9beb1fa318394e1579b30b167
-10.12.2,16C67,6c2b16f248407a3853a9c4a63efadc94813321708f5eed5c09b73f33e5edd855,1432e3be6222c434b536721076ed8b16b1c6050e
-10.12.2,16C68,6e8ccda1849bb49b1acf75f455019fe327adb47c676dbff018ea811c2456dcce,94f9e8f7ae2540dee6fe3465f60fc037e2547d16
-10.12.3,16D32,75a288fe6efc0591f757baf08305270f1b843b54cfb66fe6b257049400a0d6e9,77d354ec06df0d0acc37c105ae524ba96948142b
-10.12.4,16E195,30319aeae18c3277919c59fe678201553f5a11022d6966b67a43422996391181,30b9245f7c7608c40bbdf4d4a74f3ab84dbac716
diff --git a/LICENSE b/LICENSE
index 20efd1b3..de682fe8 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2015 
+Copyright (c) 2015
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -19,4 +19,3 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
-
diff --git a/README-cn.md b/README-cn.md
deleted file mode 100755
index fbe6f900..00000000
--- a/README-cn.md
+++ /dev/null
@@ -1,2007 +0,0 @@
-# MacOS 的安全和隐私指南
-
-> * 原文地址：[macOS Security and Privacy Guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide)
-> * 原文作者：[drduh](https://github.com/drduh)
-> * 译文出自：[掘金翻译计划](https://github.com/xitu/gold-miner)
-> * 译者：[Nicolas(Yifei) Li](https://github.com/yifili09), [MAYDAY1993](https://github.com/MAYDAY1993), [DeadLion](https://github.com/DeadLion)
-> * 校对者：[lovelyCiTY](https://github.com/lovelyCiTY), [sqrthree](https://github.com/sqrthree)
-> * 这个 [链接](https://github.com/xitu/macOS-Security-and-Privacy-Guide/compare/master...drduh:master) 用来查看本翻译与英文版是否有差别（如果你没有看到 README.md 发生变化，那就意味着这份翻译文档是最新的）。
-
-这里汇集了一些想法，它们是有关如何保护运行了 macOS 10.12 "Sierra" 操作系统（以前是 **OS X**）的现代化苹果 Mac 电脑，也包含了一些提高个人网络隐私的小贴士。
-
-这份指南的目标读者是那些希望采用企业级安全标准的"高级用户"，但是也适用于那些想在 Mac 上提高个人隐私和安全性的初级用户们。
-
-一个系统的安全与否完全取决于管理员的能力。没有一个单独的技术、软件，或者任何一个科技能保证计算机完全安全；现代的计算机和操作系统都是非常复杂的，并且需要大量的增量修改才能获得在安全性和隐私性上真正意义的提高。
-
-**免责声明**：若按照以下操作后对您的 Mac 电脑造成损伤，**望您自行负责**。
-
-如果你发现了本文中的错误或者有待改进的内容，请提交 `pull request` 或者 [创建一个 `issue`](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues).
-
-- [基础知识](#基础知识)
-- [固件](#固件)
-- [准备和安装 macOS](#准备和安装-macos)
-    - [虚拟机](#虚拟机)
-- [首次启动](#首次启动)
-- [管理员和普通用户账号](#管理员和普通用户账号)
-- [对整个磁盘进行数据加密](#对整个磁盘进行数据加密)
-- [防火墙](#防火墙)
-    - [应用程序层的防火墙](#应用程序层的防火墙)
-    - [第三方防火墙](#第三方防火墙)
-    - [内核级的数据包过滤](#内核级的数据包过滤)
-- [系统服务](#系统服务)
-- [Spotlight 建议](#spotlight-建议)
-- [Homebrew](#homebrew)
-- [DNS](#dns)
-    - [Hosts 文件](#hosts-文件)
-    - [Dnsmasq](#dnsmasq)
-      - [检测 DNSSEC 验证](#检测-dnssec-验证)
-    - [DNSCrypt](#dnscrypt)
-- [Captive portal](#captive-portal)
-- [证书授权](#证书授权)
-- [OpenSSL](#openssl)
-- [Curl](#curl)
-- [Web](#web)
-    - [代理](#代理)
-    - [浏览器](#浏览器)
-    - [插件](#插件)
-- [PGP/GPG](#pgpgpg)
-- [OTR](#otr)
-- [Tor](#tor)
-- [VPN](#vpn)
-- [病毒和恶意软件](#病毒和恶意软件)
-- [系统完整性保护](#系统完整性保护)
-- [Gatekeeper 和 XProtect](#gatekeeper-和-xprotect)
-- [密码](#密码)
-- [备份](#备份)
-- [Wi-Fi](#wi-fi)
-- [SSH](#ssh)
-- [物理访问](#物理访问)
-- [系统监控](#系统监控)
-    - [OpenBSM 监测](#openbsm-监测)
-    - [DTrace](#dtrace)
-    - [运行](#运行)
-    - [网络](#网络)
-- [二进制白名单](#二进制白名单)
-- [其它](#其它)
-- [相关软件](#相关软件)
-- [其它资源](#其它资源)
-
-## 基础知识
-
-安全标准的最佳实践适用于以下几点:
-
-* 创建一个威胁模型
-    *  考虑下什么是你需要保护的，避免谁的侵害？你的对手会是一个 [TLA](https://theintercept.com/document/2015/03/10/strawhorse-attacking-macos-ios-software-development-kit/) 机构么？（如果是的，你需要考虑替换使用 [OpenBSD](http://www.openbsd.org)），或者是一个在网络上好管闲事的偷听者，还是一起针对你精心策划的 [apt](https://en.wikipedia.org/wiki/Advanced_persistent_threat) 网络攻击？
-    * 研究并识别出[那些威胁](https://www.usenix.org/system/files/1401_08-12_mickens.pdf)，想一想如何减少被攻击的面。
-
-* 保持系统更新
-    * 请为你的系统和软件持续更新补丁！更新补丁！更新补丁！（重要的事情说三遍）。
-    * 可以使用 `App Store` 应用程序来完成对 `macOS` 系统的更新，或者使用命令行工具 `softwareupdate`，这两个都不需要注册苹果账号。
-    * 请为那些你经常使用的程序，订阅公告邮件列表（例如，[Apple 安全公告](https://lists.apple.com/mailman/listinfo/security-announce)）。
-
-* 对敏感数据进行加密
-    * 除了对整个磁盘加密之外，创建一个或者多个加密的容器，用它们来保存一些你的密码、秘钥、那些个人文件和余下的其他数据。
-    * 这有助于减少数据泄露造成的危害。
-
-* 经常备份数据
-    * 定期创建[数据备份](https://www.amazon.com/o/ASIN/0596102461/backupcentral)，并且做好遇到危机时候的数据恢复工作。
-    * 在拷贝数据备份到外部存储介质或者 “云” 系统中之前，始终对它们进行加密。
-    * 定期对备份进行测试，验证它们是可以工作的。例如，访问某一部分文件或者对比哈希校验值。
-
-* 注意钓鱼网站
-    * 最后，具有高安全意识的管理员能大大降低系统的安全风险。
-    * 在安装新软件的时候，请加倍小心。始终选择[免费的软件](https://www.gnu.org/philosophy/free-sw.en.html)和开源的软件（[当然了，macOS 不是开源的](https://superuser.com/questions/19492/is-mac-os-x-open-source))
-
-## 固件
-
-为固件设定一个密码，它能阻止除了你的启动盘之外的任何其它设备启动你的 Mac 电脑。它也能设定成每次启动时为必选项。
-
-[当你的计算机被盗或者丢失的时候，这个功能是非常有用的](https://www.ftc.gov/news-events/blogs/techftc/2015/08/virtues-strong-enduser-device-controls)，该功能可以防止直接内存访问从而可以读取您的 FileVault 密码并注入诸如 [pcileech](https://github.com/ufrisk/pcileech) 之类的内核模块这种攻击方式，因为唯一能重置固件密码的方式是通过 `Apple Store`，或者使用一个 [SPI 程序](https://reverse.put.as/2016/06/25/apple-efi-firmware-passwords-and-the-scbo-myth/)，例如 [Bus Pirate](http://ho.ax/posts/2012/06/unbricking-a-macbook/) 或者其它刷新电路的程序。
-
-1. 开始时，按下 `Command` 和 `R` 键来启动[恢复模式 / Recovery Mode](https://support.apple.com/en-au/HT201314)。
-
-2. 当出现了恢复模式的界面，从 `Utilities / 工具` 菜单中选择 **Firmware Password Utility / 固件密码实用工具**。
-
-3. 在固件工具窗口中，选择 **Turn On Firmware Password / 打开固件密码**。
-
-4. 输入一个新的密码，之后在 **Verify / 验证** 处再次输入一样的密码。
-
-5. 选择 **Set Password / 设定密码**。
-
-6. 选择 **Quit Firmware Utility / 退出固件工具** 关闭固件密码实用工具。
-
-7. 选择 Apple 菜单，并且选择重新启动或者关闭计算机。
-
-这个固件密码会在下一次启动后激活。为了验证这个密码，在启动过程中按住 `Alt` 键 - 按照提示输入密码。
-
-当启动进操作系统以后。固件密码也能通过 `firmwarepasswd` 工具管理。例如，从另一个模式启动的时候可以这样：
-
-$ sudo firmwarepasswd -setpasswd -setmode command
-
-输入一个密码然后重启。
-
-<img width="750" alt="Using a Dediprog SF600 to dump and flash a 2013 MacBook SPI Flash chip to remove a firmware password, sans Apple" src="https://cloud.githubusercontent.com/assets/12475110/17075918/0f851c0c-50e7-11e6-904d-0b56cf0080c1.png">
-
-**在没有 Apple 技术支持下，使用 [Dediprog SF600](http://www.dediprog.com/pd/spi-flash-solution/sf600) 来输出并且烧录一个 2013 款的 MacBook SPI 闪存芯片，或者移除一个固件密码**
-
-可参考 [HT204455](https://support.apple.com/en-au/HT204455), [LongSoft/UEFITool](https://github.com/LongSoft/UEFITool) 或者 [chipsec/chipsec](https://github.com/chipsec/chipsec) 了解更多信息。
-
-## 准备和安装 macOS
-
-有很多种方式来安装一个全新的 macOS 副本。
-
-最简单的方式是在启动过程中按住 `Command` 和 `R` 键进入 [Recovery Mode / 恢复模式](https://support.apple.com/en-us/HT201314)。系统镜像文件能够直接从 `Apple` 官网上下载并且使用。然而，这样的方式会以明文形式直接在网络上暴露出你的机器识别码和其它的识别信息。
-
-<img width="500" alt="PII is transmitted to Apple in plaintext when using macOS Recovery" src="https://cloud.githubusercontent.com/assets/12475110/20312189/8987c958-ab20-11e6-90fa-7fd7c8c1169e.png">
-
-**在 macOS 恢复过程中，捕获到未加密的 HTTP 会话包**
-
-另一种方式是，从 [App Store](https://itunes.apple.com/us/app/macos-sierra/id1127487414) 或者其他地方下载 **macOS Sierra** 安装程序，之后创建一个自定义可安装的系统镜像。
-
-这个 macOS Sierra 安装应用程序是经过[代码签名的](https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-SW6)，它可以使用 `code sign` 命令来验证并确保你接收到的是一个正版文件的拷贝。
-
-```
-$ codesign -dvv /Applications/Install\ macOS\ Sierra.app
-Executable=/Applications/Install macOS Sierra.app/Contents/MacOS/InstallAssistant
-Identifier=com.apple.InstallAssistant.Sierra
-Format=app bundle with Mach-O thin (x86_64)
-CodeDirectory v=20200 size=297 flags=0x200(kill) hashes=5+5 location=embedded
-Signature size=4167
-Authority=Apple Mac OS Application Signing
-Authority=Apple Worldwide Developer Relations Certification Authority
-Authority=Apple Root CA
-Info.plist entries=30
-TeamIdentifier=K36BKF7T3D
-Sealed Resources version=2 rules=7 files=137
-Internal requirements count=1 size=124
-```
-
-macOS 安装程序也可以由 `createinstallmedia` 工具制作，它在 `Install macOS Sierra.app/Contents/Resources/` 文件路径中。请参考[为 macOS 制作一个启动安装程序](https://support.apple.com/en-us/HT201372)，或者直接运行这个命令（不需要输入任何参数），看看它是如何工作的。
-
-**注意** Apple 的安装程序[并不能跨版本工作](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/120)。如果你想要创造一个 10.12 的镜像，例如，以下指令也必须要在 10.12 的机器上运行!
-
-为了创建一个 **macOS USB 启动安装程序**，需要挂载一个 USB 驱动器，清空它的内容、进行重新分区，之后使用 `createinstallmedia` 工具:
-
-```
-$ diskutil list
-[Find disk matching correct size, usually "disk2"]
-
-$ diskutil unmountDisk /dev/disk2
-
-$ diskutil partitionDisk /dev/disk2 1 JHFS+ Installer 100%
-
-$ cd /Applications/Install\ macOS\ Sierra.app
-
-$ sudo ./Contents/Resources/createinstallmedia --volume /Volumes/Installer --applicationpath /Applications/Install\ macOS\ Sierra.app --nointeraction
-Erasing Disk: 0%... 10%... 20%... 30%... 100%...
-Copying installer files to disk...
-Copy complete.
-Making disk bootable...
-Copying boot files...
-Copy complete.
-Done.
-```
-
-为了创建一个自定义、可安装的镜像，能用它恢复一台 Mac 电脑，你需要找到 `InstallESD.dmg`，这个文件也包含在 `Install macOS Sierra.app` 中。
-
-通过 `Finder` 找到，并在这个应用程序图标上点击鼠标右键，选择 **Show Package Contents / 显示包内容**，之后从 **Contents / 内容** 进入到 **SharedSupport / 共享支持**，找到 `InstallESD.dmg` 文件。
-
-你能通过 `openssl sha1 InstallESD.dmg` 、`shasum -a 1 InstallESD.dmg` 或者 `shasum -a 256 InstallESD.dmg` 得到的加密过的哈希值[验证](https://support.apple.com/en-us/HT201259)来确保你得到的是同一份正版拷贝（在 Finder 中，你能把文件直接拷贝到终端中，它能提供这个文件的完整路径地址）。
-
-可以参考 [HT204319](https://support.apple.com/en-us/HT204319)，它能确定你最初采购来的计算机使用了哪个版本的 macOS，或者哪个版本适合你的计算机。
-
-可以参考 [InstallESD_Hashes.csv](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/blob/master/InstallESD_Hashes.csv) 这个在我代码仓库中的文件，它是现在和之前该版本文件的哈希值。你也可以使用 Google 搜索这些加密的哈希值，确保这个文件是正版且没有被修改过的。
-
-可以使用 [MagerValp/AutoDMG](https://github.com/MagerValp/AutoDMG) 来创建这个镜像文件，或者手动创建、挂载和安装这个操作系统到一个临时镜像中:
-
-    $ hdiutil attach -mountpoint /tmp/install_esd ./InstallESD.dmg
-
-    $ hdiutil create -size 32g -type SPARSE -fs HFS+J -volname "macOS" -uid 0 -gid 80 -mode 1775 /tmp/output.sparseimage
-
-    $ hdiutil attach -mountpoint /tmp/os -owners on /tmp/output.sparseimage
-
-    $ sudo installer -pkg /tmp/install_esd/Packages/OSInstall.mpkg -tgt /tmp/os -verbose
-
-这一步需要花费一些时间，请耐心等待。你能使用 `tail -F /var/log/install.log` 命令在另一个终端的窗口内查看进度。
-
-**（可选项）** 安装额外的软件，例如，[Wireshark](https://www.wireshark.org/download.html):
-
-    $ hdiutil attach Wireshark\ 2.2.0\ Intel\ 64.dmg
-
-    $ sudo installer -pkg /Volumes/Wireshark/Wireshark\ 2.2.0\ Intel\ 64.pkg -tgt /tmp/os
-
-    $ hdiutil unmount /Volumes/Wireshark
-
-遇到安装错误时，请参考 [MagerValp/AutoDMG/wiki/Packages-Suitable-for-Deployment](https://github.com/MagerValp/AutoDMG/wiki/Packages-Suitable-for-Deployment)，使用 [chilcote/outset](https://github.com/chilcote/outset) 来替代解决首次启动时候的包和脚本。
-
-当你完成的时候，分离、转换并且验证这个镜像:
-
-    $ hdiutil detach /tmp/os
-
-    $ hdiutil detach /tmp/install_esd
-
-    $ hdiutil convert -format UDZO /tmp/output.sparseimage -o ~/sierra.dmg
-
-    $ asr imagescan --source ~/sierra.dmg
-
-现在，`sierra.dmg` 已经可以被用在一个或者多个 Mac 电脑上了。它能继续自定义化这个镜像，比如包含预先定义的用户、应用程序、预置参数等。
-
-这个镜像能使用另一个在 [Target Disk Mode / 目标磁盘模式](https://support.apple.com/en-us/HT201462) 下的 Mac 进行安装，或者从 USB 启动安装盘安装。
-
-为了使用 **Target Disk Mode / 目标磁盘模式**，按住 `T` 键的同时启动 Mac 电脑，并且通过 `Firewire` 接口，`Thunderbolt` 接口或者 `USB-C` 线连接另外一台 Mac 电脑。
-
-如果你没有其它 Mac 电脑，通过启动的时候，按住 **Option** 键用 USB 安装盘启动，把 `sierra.dmg` 和其它需要的文件拷贝到里面。
-
-执行 `diskutil list` 来识别连接着的 Mac 磁盘，通常是 `/dev/disk2`
-
-**（可选项）** 一次性[安全清除](https://www.backblaze.com/blog/securely-erase-mac-ssd/)磁盘（如果之前通过 FileVault 加密，该磁盘必须先要解锁，并且装载在 `/dev/disk3s2`）:
-
-    $ sudo diskutil secureErase freespace 1 /dev/disk3s2
-
-把磁盘分区改成 `Journaled HFS+` 格式:
-
-    $ sudo diskutil unmountDisk /dev/disk2
-
-    $ sudo diskutil partitionDisk /dev/disk2 1 JHFS+ macOS 100%
-
-把该镜像还原到新的卷中:
-
-    $ sudo asr restore --source ~/sierra.dmg --target /Volumes/macOS --erase --buffersize 4m
-
-你也能使用 **Disk Utility / 磁盘工具** 应用程序来清除连接着的 Mac 磁盘，之后将 `sierra.dmg` 还原到新创建的分区中。
-
-如果你正确按照这些步骤执行，该目标 Mac 电脑应该安装了新的 macOS Sierra 了。
-
-如果你想传送一些文件，把它们拷贝到一个共享文件夹，例如在挂载磁盘的镜像中， `/Users/Shared`，例如，`cp Xcode_8.0.dmg /Volumes/macOS/Users/Shared`
-
-<img width="1280" alt="Finished restore install from USB recovery boot" src="https://cloud.githubusercontent.com/assets/12475110/14804078/f27293c8-0b2d-11e6-8e1f-0fb0ac2f1a4d.png">
-
-**完成从 USB 启动的还原安装**
-
-这里还没有大功告成！除非你使用 [AutoDMG](https://github.com/MagerValp/AutoDMG) 创建了镜像，或者把 macOS 安装在你 Mac 上的其它分区内，你需要创建一块还原分区（为了使用对整个磁盘加密的功能）。你能使用 [MagerValp/Create-Recovery-Partition-Installer](https://github.com/MagerValp/Create-Recovery-Partition-Installer) 或者按照以下步骤:
-
-请下载 [RecoveryHDUpdate.dmg](https://support.apple.com/downloads/DL1464/en_US/RecoveryHDUpdate.dmg) 这个文件。
-
-```
-RecoveryHDUpdate.dmg
-SHA-256: f6a4f8ac25eaa6163aa33ac46d40f223f40e58ec0b6b9bf6ad96bdbfc771e12c
-SHA-1:   1ac3b7059ae0fcb2877d22375121d4e6920ae5ba
-```
-
-添加并且扩展这个安装程序，之后执行以下命令:
-
-```
-$ hdiutil attach RecoveryHDUpdate.dmg
-
-$ pkgutil --expand /Volumes/Mac\ OS\ X\ Lion\ Recovery\ HD\ Update/RecoveryHDUpdate.pkg /tmp/recovery
-
-$ hdiutil attach /tmp/recovery/RecoveryHDUpdate.pkg/RecoveryHDMeta.dmg
-
-$ /tmp/recovery/RecoveryHDUpdate.pkg/Scripts/Tools/dmtest ensureRecoveryPartition /Volumes/macOS/ /Volumes/Recovery\ HD\ Update/BaseSystem.dmg 0 0 /Volumes/Recovery\ HD\ Update/BaseSystem.chunklist
-```
-
-必要的时候把 `/Volumes/macOS` 替换成以目标磁盘启动的 Mac 的路径。
-
-这个步骤需要花几分钟才能完成。再次执行 `diskutil list` 来确保 **Recovery HD** 已经存在 `/dev/disk2` 或者相似的路径下。
-
-一旦你完成了这些，执行 `hdituil unmount /Volumes/macOS` 命令弹出磁盘，之后关闭以目标磁盘模式启动的 Mac 电脑。
-
-### 虚拟机
-
-在虚拟机内安装 macOS，可以使用 [VMware Fusion](https://www.vmware.com/products/fusion.html) 工具，按照上文中的说明来创建一个镜像。你**不需要**再下载，也不需要手动创建还原分区。
-
-```
-VMware-Fusion-8.5.6-5234762.dmg
-SHA-256: 57a879095c9fcce0066bea0d3c203571689fb53205915fda156c0d742f7c7ad2
-SHA-1:   b7315d00a7c92dbad280d0f01f42dd8b56d96040
- ```
-
-选择 **Install OS X from the recovery parition** 这个安装方法。可自定义配置任意的内存和 CPU，之后完成设置。默认情况下，这个虚拟机应该进入 [Recovery Mode / 还原模式](https://support.apple.com/en-us/HT201314)。
-
-在还原模式中，选择一个语言，之后在菜单条中由 Utilities 打开 Terminal。
-
-在虚拟机内，输入 `ifconfig | grep inet` — 你应该能看到一个私有地址，比如 `172.16.34.129`
-
-在 Mac 宿主机内，输入 `ifconfig | grep inet` — 你应该能看到一个私有地址，比如 `172.16.34.1`
-
-通过修改 Mac 宿主机内的文件让可安装镜像对虚拟器起作用，比如，修改 `/etc/apache2/htpd.conf` 并且在该文件最上部增加以下内容：(使用网关分配给 Mac 宿主机的地址和端口号 80):
-
-    Listen 172.16.34.1:80
-
-在 Mac 宿主机上，把镜像链接到 Apache 网络服务器目录:
-
-    $ sudo ln ~/sierra.dmg /Library/WebServer/Documents
-
-在 Mac 宿主机的前台运行 Apache:
-
-    $ sudo httpd -X
-
-在虚拟机上通过本地网络命令 `asr`，安装镜像文件到卷分区内:
-
-```
--bash-3.2# asr restore --source http://172.16.34.1/sierra.dmg --target /Volumes/Macintosh\ HD/ --erase --buffersize 4m
-    Validating target...done
-    Validating source...done
-    Erase contents of /dev/disk0s2 (/Volumes/Macintosh HD)? [ny]: y
-    Retrieving scan information...done
-    Validating sizes...done
-    Restoring  ....10....20....30....40....50....60....70....80....90....100
-    Verifying  ....10....20....30....40....50....60....70....80....90....100
-    Remounting target volume...done
-```
-
-完成后，在 `sudo httpd -X` 窗口内通过 `Control` 和 `C` 组合键停止在宿主机 Mac 上运行的  Apache 网络服务器服务，并且通过命令 `sudo rm /Library/WebServer/Documents/sierra.dmg` 删除镜像备份文件。
-
-在虚拟机内，在左上角 Apple 菜单中选择 **Startup Disk**，选择硬件驱动器并重启你的电脑。你可能想在初始化虚拟机启动的时候禁用网络适配器。
-
-例如，在访问某些有风险的网站之前保存虚拟机的快照，并在之后用它还原该虚拟机。或者使用一个虚拟机来安装和使用有潜在问题的软件。
-
-## 首次启动
-
-**注意** 在设置 macOS 之前，请先断开网络连接并且配置一个防火墙。然而，装备有触摸条（`Touch Bar`）的 [2016 最新款 MacBook](https://www.ifixit.com/Device/MacBook_Pro_15%22_Late_2016_Touch_Bar)，它[需要在线激活系统](https://onemoreadmin.wordpress.com/2016/11/27/the-untouchables-apples-new-os-activation-for-touch-bar-macbook-pros/).
-
-在首次启动时，按住 `Command` `Option` `P` `R` 键位组合，它用于[清除 NVRAM](https://support.apple.com/en-us/HT204063)。
-
-当 macOS 首次启动时，你会看到 **Setup Assistant / 设置助手** 的欢迎画面。
-
-请在创建你个人账户的时候，使用一个没有任何提示的[高安全性密码](http://www.explainxkcd.com/wiki/index.php/936:_Password_Strength)。
-
-如果你在设置账户的过程中使用了真实的名字，你得意识到，你的[计算机的名字和局域网的主机名](https://support.apple.com/kb/PH18720)将会因为这个名字而泄露 (例如，**John Applesseed's MacBook**)，所以这个名字会显示在局域网络和一些配置文件中。这两个名字都能在 **System Preferences / 系统配置 > Sharing / 共享** 菜单中或者以下命令来改变:
-
-    $ sudo scutil --set ComputerName your_computer_name
-
-    $ sudo scutil --set LocalHostName your_hostname
-
-## 管理员和普通用户账号
-
-管理员账户始终是第一个账户。管理员账户是管理组中的成员并且有访问 `sudo` 的能力，允许它们修改其它账户，特别是 `root`，赋予它们对系统更高效的控制权。管理员执行的任何程序也有可能获得一样的权限，这就造成了一个安全风险。类似于 `sudo` 这样的工具[都有一些能被利用的弱点](https://bogner.sh/2014/03/another-mac-os-x-sudo-password-bypass/)，例如在默认管理员账户运行的情况下，并行打开的程序或者很多系统的设定都是[处于解锁的状态](http://csrc.nist.gov/publications/drafts/800-179/sp800_179_draft.pdf) [p. 61–62]。[Apple](https://help.apple.com/machelp/mac/10.12/index.html#/mh11389) 提供了一个最佳实践和[其它一些方案](http://csrc.nist.gov/publications/drafts/800-179/sp800_179_draft.pdf) [p. 41–42]，例如，为每天基本的工作建立一个单独的账号，使用管理员账号仅为了安装软件和配置系统。
-
-每一次都通过 macOS 登录界面进入管理员帐号并不是必须的。系统会在需要认证许可的时候弹出提示框，之后交给终端就行了。为了达到这个目的，Apple 为隐藏管理员账户和它的根目录提供了一些[建议](https://support.apple.com/HT203998)。这对避免显示一个可见的 `影子` 账户来说是一个好办法。管理员账户也能[从 FileVault 里移除](http://apple.stackexchange.com/a/94373)。
-
-#### 错误警告
-
-1. 只有管理员账户才能把应用程序安装在 `/Applications` 路径下 （本地目录）。Finder 和安装程序将为普通用户弹出一个许可对话框。然而，许多应用程序都能安装在 `~/Applications` （该目录能被手动创建） 路径下。经验之谈： 那些不需要管理员权限的应用程序 — 或者在不在 `/Applications` 目录下都没关系的应用程序 — 都应该安装在用户目录内，其它的应安装在本地目录。Mac App Store 上的应用程序仍然会安装在 `/Applications` 并且不需要额外的管理员认证。
-
-2. `sudo` 无法在普通用户的 shell 内使用，它需要使用 `su` 或者 `login` 在 shell 内输入一个管理员账户。这需要很多技巧和一些命令行界面操作的经验。
-
-3. 系统配置和一些系统工具 （比如 Wi-Fi 诊断器） 为了所有的功能都能执行，它会需要 root 权限。在系统配置界面中的一些面板都是上锁的，所以需要单独的解锁按钮。一些应用程序在打开的时候会提示认证对话框，其它一些则需要通过一个管理员账号直接打开才能获得全部功能的权限。（例如 Console）
-
-4. 有些第三方应用程序无法正确运行，因为它们假设当前的用户是管理员账户。这些程序只能在登录管理员账户的情况下才能被执行，或者使用 `open` 工具。
-
-#### 设置
-
-账户能在系统设置中创建和管理。在一个已经建立的系统中，通常很容易就能创建第二个管理员账号并且把之前的管理员帐号降级。这就避免了数据迁移的问题。新安装的系统都能增加普通账号。对一个账号降级能通过新建立的管理员帐号中的系统设置 — 当然那个管理员账号必须已经注销 — 或者执行这些命令（这两个指令可能没有必要都执行，可以参考[issue #179](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/179)）:
-
-```
-$ sudo dscl . -delete /Groups/admin GroupMembership <username>
-
-$ sudo dscl . -delete /Groups/admin GroupMembers <GeneratedUID>
-```
-
-通过以下指令，你就能发现你账号的 “GeneratedUID”:
-
-```
-$ dscl . -read /Users/<username> GeneratedUID
-```
-
-也可以参考[这篇文章](https://superuser.com/a/395738)，它能带给你有关更多 macOS 是如何确定组成员的内容。
-
-## 对整个磁盘进行数据加密
-
-[FileVault](https://en.wikipedia.org/wiki/FileVault) 提供了在 macOS 上对整个磁盘加密的能力（技术上来说，是**整个卷宗**。）
-
-FileVault 加密在休眠的时候保护数据，并且使通过物理访问形式偷取数据或者使用你的 Mac 修改数据的某人更为艰难(但[不总是阻止](http://blog.frizk.net/2016/12/filevault-password-retrieval.html))。
-
-因为大部分的加密操作都[高效地运作在硬件上](https://software.intel.com/en-us/articles/intel-advanced-encryption-standard-aes-instructions-set/)，性能上的损失对 FireVault 来说并不凸显。
-
-FileVault 的安全性依赖于伪随机数生成器 (PRNG)。
-
-> 这个随机设备实现了 Yarrow 伪随机数生成器算法并且维护着它自己的熵池。额外的熵值通常由守护进程 SecurityServer 提供，它由内核测算得到的随机抖动决定。
-
-> SecurityServer 也常常负责定期保存一些熵值到磁盘，并且在启动的时候重新加载它们，把这些熵值提供给早期的系统使用。
-
-参考 `man 4 random` 获得更多信息。
-
-在开启 FileVault 之前，PRNG 也能通过写入 /dev/random 文件手动提供熵的种子。也就是说，在激活 FileVault 之前，我们能用这种方式撑一段时间。
-
-在启用 FileVault **之前**，手动配置种子熵:
-
-    $ cat > /dev/random
-    [Type random letters for a long while, then press Control-D]
-
-通过 `sudo fdsetup enable` 启用 FileVault 或者通过 **System Preferences** > **Security & Privacy** 之后重启电脑。
-
-如果你能记住你的密码，那就没有理由不保存一个**还原秘钥**。然而，如果你忘记了密码或者还原秘钥，那意味着你加密的数据将永久丢失了。
-
-如果你想深入了解 FileVault 是如何工作得， 可以参考这篇论文 [Infiltrate the Vault: Security Analysis and Decryption of Lion Full Disk Encryption](https://eprint.iacr.org/2012/374.pdf) (pdf) 和这篇相关的[演讲文稿](http://www.cl.cam.ac.uk/~osc22/docs/slides_fv2_ifip_2013.pdf) (pdf)。也可以参阅 [IEEE Std 1619-2007 “The XTS-AES Tweakable Block Cipher”](http://libeccio.di.unisa.it/Crypto14/Lab/p1619.pdf) (pdf).
-
-你可能希望强制开启**休眠**并且从内存中删除 FileVault 的秘钥，而非一般情况下系统休眠对内存操作的处理方式:
-
-    $ sudo pmset -a destroyfvkeyonstandby 1
-    $ sudo pmset -a hibernatemode 25
-
-> 所有计算机都有 EFI 或 BIOS 这类的固件，它们帮助发现其它硬件，最终使用所需的操作系统实例把计算机正确启动起来。以 Apple 硬件和 EFI 的使用来说，Apple 把有关的信息保存在 EFI 内，它辅助 macOS 的功能正确运行。举例来说，FileVault 的秘钥保存在 EFI 内，在待机模式的时候出现。
-
-> 那些容易被高频攻击的部件，或者那些待机模式下，容易被暴露给所有设备访问的设备，它们都应该销毁在固件中的 FileVault 秘钥来减少这个风险。这么干并不会影响 FileVault 的正常使用，但是系统需要用户在每次跳出待机模式的时候输入这个密码。
-
-如果你选择在待机模式下删除 FileVault 秘钥，你也应该修改待机模式的设置。否则，你的机器可能无法正常进入待机模式，会因为缺少 FileVault 秘钥而关机。参考 [issue #124](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/124) 获得更多信息。可以通过以下命令修改这些设置:
-
-    $ sudo pmset -a powernap 0
-    $ sudo pmset -a standby 0
-    $ sudo pmset -a standbydelay 0
-    $ sudo pmset -a autopoweroff 0
-
-如果你想了解更多， 请参考 [Best Practices for Deploying FileVault 2](http://training.apple.com/pdf/WP_FileVault2.pdf) (pdf) 和这篇论文 [Lest We Remember: Cold Boot Attacks on Encryption Keys](https://www.usenix.org/legacy/event/sec08/tech/full_papers/halderman/halderman.pdf) (pdf)
-
-
-## 防火墙
-
-在准备连接进入互联网之前，最好是先配置一个防火墙。
-
-在 macOS 上有好几种防火墙。
-
-#### 应用程序层的防火墙
-
-系统自带的那个基本的防火墙，它只阻止**对内**的连接。
-
-注意，这个防火墙没有监控的能力，也没有阻止**对外**连接的能力。
-
-它能在 **System Preferences** 中 **Security & Privacy** 标签中的 **Firewall** 控制，或者使用以下的命令。
-
-开启防火墙:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
-
-开启日志:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on
-
-你可能还想开启私密模式:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on
-
-> 计算机黑客会扫描网络，所以它们能标记计算机并且实施网络攻击。你能使用**私密模式**，避免你的计算机响应一些这样的恶意扫描。当开启了防火墙的私密模式后，你的计算机就不会响应 ICMP 请求，并且不响应那些已关闭的 TCP 或 UDP 端口的连接。这会让那些网络攻击者们很难发现你的计算机。
-
-最后，你可能会想阻止**系统自带的软件**和**经过代码签名，下载过的软件自动加入白名单:**
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsignedapp off
-
-> 那些经过一个认证签名的应用程序会自动允许加入列表，而不是提示用户再对它们进行认证。包含在 OS X 内的应用程序都被 Apple 代码签名，并且都允许接对内的连接，当这个配置开启了。举例来说，因为 iTunes 已经被 Apple 代码签名，所以它能自动允许防火墙接收对内的连接。
-
-> 如果你执行一个未签名的应用程序，它也没有被纳入防火墙白名单，此时一个带允许或者拒绝该连接选项的对话框会出现。如果你选择“允许连接”，macOS 对这个应用程序签名并且自动把它增加进防火墙的白名单。如果你选择“拒绝连接”，macOS 也会把它加入名单中，但是会拒绝对这个应用程序的对内连接。
-
-在使用完 `socketfilterfw` 之后，你需要重新启动（或者结束）这个进程:
-
-    $ sudo pkill -HUP socketfilterfw
-
-#### 第三方防火墙
-
-例如 [Little Snitch](https://www.obdev.at/products/littlesnitch/index.html), [Hands Off](https://www.oneperiodic.com/products/handsoff/), [Radio Silence](http://radiosilenceapp.com/) 和 [Security Growler](https://pirate.github.io/security-growler/) 这样的程序都提供了一个方便、易用且安全的防火墙。
-
-<img width="349" alt="Example of Little Snitch monitored session" src="https://cloud.githubusercontent.com/assets/12475110/10596588/c0eed3c0-76b3-11e5-95b8-9ce7d51b3d82.png">
-
-**以下是一段 Little Snitch 监控会话的例子**
-
-```
-LittleSnitch-3.7.4.dmg
-SHA-256: b0ce3519d72affbc7910c24c264efa94aa91c9ad9b1a905c52baa9769156ea22
-SHA-1:   868ad75623c60cb9ad428c7c1d3e5ae449a9033e
- ```
-
-这些程序都具备有监控和阻拦**对内**和**对外**网络连接的能力。然而，它们可能会需要使用一个闭源的[内核扩展](https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/KernelProgramming/Extend/Extend.html)。
-
-如果过多的允许或者阻拦网络连接的选择让你不堪重负，使用配置过白名单的**静谧模式**，之后定期检查你设定项，来了解这么多应用程序都在干什么。
-
-需要指出的是，这些防火墙都会被以 **root** 权限运行的程序绕过，或者通过 [OS vulnerabilities](https://www.blackhat.com/docs/us-15/materials/us-15-Wardle-Writing-Bad-A-Malware-For-OS-X.pdf) (pdf)，但是它们还是值得拥有的 — 只是不要期待完全的保护。然而，一些恶意软件实际上能[自我删除](https://www.cnet.com/how-to/how-to-remove-the-flashback-malware-from-os-x/)，如果发现 `Little Snitch` 或者其他一些安全软件已经安装，它就根本不启动。
-
-若想了解更多有关 Little Snitch 是如何工作的，可参考以下两篇文章：[Network Kernel Extensions Programming Guide](https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/NKEConceptual/socket_nke/socket_nke.html#//apple_ref/doc/uid/TP40001858-CH228-SW1) 和 [Shut up snitch! – reverse engineering and exploiting a critical Little Snitch vulnerability](https://reverse.put.as/2016/07/22/shut-up-snitch-reverse-engineering-and-exploiting-a-critical-little-snitch-vulnerability/).
-
-#### 内核级的数据包过滤
-
-有一个高度可定制化、功能强大，但的确也是最复杂的防火墙存在内核中。它能通过 `pfctl` 或者很多配置文件控制。
-
-pf 也能通过一个 GUI 应用程序控制，例如 [IceFloor](http://www.hanynet.com/icefloor/) 或者 [Murus](http://www.murusfirewall.com/)。
-
-有很多书和文章介绍 pf 防火墙。这里，我们只介绍一个有关通过 IP 地址阻拦访问的例子。
-
-将以下内容增加到 `pf.rules` 文件中:
-
-```
-set block-policy drop
-set fingerprints "/etc/pf.os"
-set ruleset-optimization basic
-set skip on lo0
-scrub in all no-df
-table <blocklist> persist
-block in log
-block in log quick from no-route to any
-pass out proto tcp from any to any keep state
-pass out proto udp from any to any keep state
-block log on en0 from {<blocklist>} to any
-```
-
-使用以下命令:
-
-* `sudo pfctl -e -f pf.rules` — 开启防火墙
-* `sudo pfctl -d` — 禁用防火墙
-* `sudo pfctl -t blocklist -T add 1.2.3.4` — 把某个主机加入阻止清单中
-* `sudo pfctl -t blocklist -T show` — 查看阻止清单
-* `sudo ifconfig pflog0 create` — 为某个接口创建日志
-* `sudo tcpdump -ni pflog0` — 输出打印数据包
-
-我不建议你花大量时间在如何配置 pf 上，除非你对数据包过滤器非常熟悉。比如说，如果你的 Mac 计算机连接在一个 [NAT](https://www.grc.com/nat/nat.htm) 后面，它存在于一个安全的家庭网络中，那以上操作是完全没有必要的。
-
-可以参考 [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor) 来了解如何使用 pf 监控用户和系统级别对“背景连接通讯"的使用。
-
-## 系统服务
-
-在你连接到互联网之前，你不妨禁用一些系统服务，它们会使用一些资源或者后台连接通讯到 Apple。
-
-可参考这三个代码仓库获得更多建议，[fix-macosx/yosemite-phone-home](https://github.com/fix-macosx/yosemite-phone-home), [l1k/osxparanoia](https://github.com/l1k/osxparanoia) 和 [karek314/macOS-home-call-drop](https://github.com/karek314/macOS-home-call-drop)。
-
-在 macOS 上的系统服务都由 **launchd** 管理。可参考 [launchd.info](http://launchd.info/)，也可以参考以下两个材料，[Apple's Daemons and Services Programming Guide](https://developer.apple.com/library/mac/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/CreatingLaunchdJobs.html) 和 [Technical Note TN2083](https://developer.apple.com/library/mac/technotes/tn2083/_index.html)。
-
-你也可以运行 [KnockKnock](https://github.com/synack/knockknock)，它能展示出更多有关启动项的内容。
-
-* 使用 `launchctl list` 查看正在运行的用户代理
-* 使用 `sudo launchctl list` 查看正在运行的系统守护进程
-* 通过指定服务名称查看，例如，`launchctl list com.apple.Maps.mapspushd`
-* 使用 `defaults read` 来检查在 `/System/Library/LaunchDaemons` 和 `/System/Library/LaunchAgents` 工作中的 plist
-* 使用 `man`，`strings` 和 Google 来学习运行中的代理和守护进程是什么
-
-举例来说，想要知道某个系统启动的守护进程或者代理干了什么，可以输入以下指令:
-
-    $ defaults read /System/Library/LaunchDaemons/com.apple.apsd.plist
-
-看一看 `Program` 或者 `ProgramArguments` 这两个部分的内容，你就知道哪个二进制文件在运行，此处是 `apsd`。可以通过 `man apsd` 查看更多有关它的信息。
-
-再举一个例子，如果你对 `Apple Push Nofitications` 不感兴趣，可以禁止这个服务:
-
-    $ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.apsd.plist
-
-**注意** 卸载某些服务可能造成某些应用程序无法使用。首先，请阅读手册或者使用 Google 检索确保你明白自己在干什么。
-
-禁用那些你不理解的系统进程的时候一定要万分小心，因为它可能会让你的系统瘫痪无法启动。如果你弄坏了你的 Mac，可以使用[单一用户模式](https://support.apple.com/en-us/HT201573)来修复。
-
-如果你觉得 Mac 持续升温，感觉卡顿或者常常表现出诡异的行为，可以使用 [Console](https://en.wikipedia.org/wiki/Console_(OS_X)) 和 [Activity Monitor](https://support.apple.com/en-us/HT201464) 这两个应用程序，因为这可能是你不小心操作造成的。
-
-以下指令可以查看现在已经禁用的服务:
-
-    $ find /var/db/com.apple.xpc.launchd/ -type f -print -exec defaults read {} \; 2>/dev/null
-
-有详细注释的启动系统守护进程和代理的列表，各自运行的程序和程序的哈希校验值都包含在这个代码仓库中了。
-
-**（可选项）** 运行 `read_launch_plists.py` 脚本，使用 `diff` 输出和你系统对比后产生的差异，例如:
-
-    $ diff <(python read_launch_plists.py) <(cat 16A323_launchd.csv)
-
-你可以参考这篇 [cirrusj.github.io/Yosemite-Stop-Launch](http://cirrusj.github.io/Yosemite-Stop-Launch/)，它对具体服务进行了一些解释， 也可以看看这篇 [Provisioning OS X and Disabling Unnecessary Services](https://vilimpoc.org/blog/2014/01/15/provisioning-os-x-and-disabling-unnecessary-services/)，这篇是其它一些解释。
-
-## Spotlight 建议
-
-在 Spotlight 偏好设置面板和 Safari 的搜索偏好设置中都禁用 **Spotlight 建议**，来避免你的搜索查询项会发送给 Apple。
-
-在 Spotlight 偏好设置面板中也禁用**必应 Web 搜索**来避免你的搜索查询项会发送给 Microsoft。
-
-查看 [fix-macosx.com](https://fix-macosx.com/) 获得更详细的信息。
-
-> 如果你已经更新到 Mac OS X Yosemite(10.10)并且在用默认的设置，每一次你开始在 Spotlight （去打开一个应用或在你的电脑中搜索一个文件）中打字，你本地的搜索词和位置会被发送给 Apple 和第三方（包括 Microsoft ）。
-
- **注意** 这个网站和它的指导说明已不再适用于 macOS Sierra — 参考[issue 164](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/164).
-
-下载，查看并应用他们建议的补丁：
-
-```
-$ curl -O https://fix-macosx.com/fix-macosx.py
-
-$ less fix-macosx.py
-
-$ /usr/bin/python fix-macosx.py
-All done. Make sure to log out (and back in) for the changes to take effect.
-```
-
-谈到 Microsoft，你可能还想看看 <https://fix10.isleaked.com/>，挺有意思的。
-
-## Homebrew
-
-考虑使用 [Homebrew](http://brew.sh/) 来安装软件和更新用户工具（查看 [Apple’s great GPL purge](http://meta.ath0.com/2012/02/05/apples-great-gpl-purge/)），这样更简单些。
-**注意**如果你还没安装 Xcode 或命令行工具，可以用 `xcode-select --install` 来从 Apple 下载、安装。
-
-要[安装 Homebrew](https://github.com/Homebrew/brew/blob/master/docs/Installation.md#installation):
-
-    $ mkdir homebrew && curl -L https://github.com/Homebrew/brew/tarball/master | tar xz --strip 1 -C homebrew
-
-
-在你的脚本或 rc 文件中编辑 `PATH` 来使用 `~/homebrew/bin` 和 `~/homebrew/sbin`。例如，先 `echo 'PATH=$PATH:~/homebrew/sbin:~/homebrew/bin' >> .zshrc`，然后用 `chsh -s /bin/zsh` 把登录脚本改为 Z shell，打开一个新的终端窗口并运行 `brew update`。
-
-Homebrew 使用 SSL/TLS 与 GitHub 通信并验证下载包的校验，所以它是[相当安全的](https://github.com/Homebrew/homebrew/issues/18036)。
-
-记得定期在可信任的、安全的网络上运行 `brew update` 和 `brew upgrade` 来下载、安装软件更新。想在安装前得到关于一个包的信息，运行 `brew info <package>` 在线查看。
-
-依据 [Homebrew 匿名汇总用户行为分析](https://github.com/Homebrew/brew/blob/master/docs/Analytics.md)，Homebrew 获取匿名的汇总的用户行为分析数据并把它们报告给 Google Analytics。
-
-你可以在你的（shell）环境或 rc 文件中设置 `export HOMEBREW_NO_ANALYTICS=1`，或使用 `brew analytics off` 来退出 Homebrew 的分析。
-
-可能你还希望启用[额外的安全选项](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/138)，例如 `HOMEBREW_NO_INSECURE_REDIRECT=1` 和 `HOMEBREW_CASK_OPTS=--require-sha`。
-
-## DNS
-
-#### Hosts 文件
-
-使用 [Hosts 文件](https://en.wikipedia.org/wiki/Hosts_(file)) 来屏蔽蔽已知的恶意软件、广告或那些不想访问的域名。
-
-用 root 用户编辑 hosts 文件，例如用 `sudo vi /etc/hosts`。hosts 文件也能用可视化的应用 [2ndalpha/gasmask](https://github.com/2ndalpha/gasmask) 管理。
-
-要屏蔽一个域名，在 `/etc/hosts` 中加上 `0 example.com` 或 `0.0.0.0 example.com` 或 `127.0.0.1 example.com`。
-
-网上有很多可用的域名列表，你可以直接复制过来，要确保每一行以 `0`, `0.0.0.0`, `127.0.0.1` 开始，并且 `127.0.0.1 localhost` 这一行包含在内。
-
-对于这些主机列表，可以查看 [someonewhocares.org](http://someonewhocares.org/hosts/zero/hosts)、[l1k/osxparanoia/blob/master/hosts](https://github.com/l1k/osxparanoia/blob/master/hosts)、[StevenBlack/hosts](https://github.com/StevenBlack/hosts) 和 [gorhill/uMatrix/hosts-files.json](https://github.com/gorhill/uMatrix/blob/master/assets/umatrix/hosts-files.json)。
-
-要添加一个新的列表：
-
-```
-$ curl "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" | sudo tee -a /etc/hosts
-
-$ wc -l /etc/hosts
-31998
-
-$ egrep -ve "^#|^255.255.255|^0.0.0.0|^127.0.0.0|^0 " /etc/hosts
-::1 localhost
-fe80::1%lo0 localhost
-[should not return any other IP addresses]
-```
-
-更多信息请查看 `man hosts` 和 [FreeBSD 配置文件](https://www.freebsd.org/doc/handbook/configtuning-configfiles.html)。
-
-#### Dnsmasq
-
-与其他特性相比，[dnsmasq](http://www.thekelleys.org.uk/dnsmasq/doc.html) 能缓存请求，避免无资格名单中的查询数据上传和屏蔽所有的顶级域名。
-
-另外，和 DNSCrypt 一起使用来加密输出的 DNS 流量。
-
-如果你不想使用 DNSCrypt，再怎么滴也不要用 [ISP](http://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking) [提供](http://bcn.boulder.co.us/~neal/ietf/verisign-abuse.html) 的 DNS。两个流行的选择是 [Google DNS](https://developers.google.com/speed/public-dns/) 和 [OpenDNS](https://www.opendns.com/home-internet-security/)。
-
-**(可选)** [DNSSEC](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) 是一系列 DNS 的扩展，为 DNS 客户端提供 DNS 数据的来源验证、否定存在验证和数据完整性检验。所有来自 DNSSEC 保护区域的应答都是数字签名的。签名的记录通过一个信任链授权，以一系列验证过的 DNS 根区域的公钥开头。当前的根区域信任锚点可能下载下来[从 IANA 网站](https://www.iana.org/dnssec/files)。关于 DNSSEC 有很多的资源，可能最好的一个是 [dnssec.net 网站](http://www.dnssec.net)。
-
-安装 Dnsmasq (DNSSEC 是可选的)：
-
-    $ brew install dnsmasq --with-dnssec
-
-    $ cp /usr/local/opt/dnsmasq/dnsmasq.conf.example /usr/local/etc/dnsmasq.conf
-
-
-编辑配置项：
-
-    $ vim /usr/local/etc/dnsmasq.conf
-
-检查所有的选项。这有一些推荐启用的设置：
-
-```
-# Forward queries to DNSCrypt on localhost port 5355
-server=127.0.0.1#5355
-
-# Uncomment to forward queries to Google Public DNS
-#server=8.8.8.8
-
-# Never forward plain names
-domain-needed
-
-# Examples of blocking TLDs or subdomains
-address=/.onion/0.0.0.0
-address=/.local/0.0.0.0
-address=/.mycoolnetwork/0.0.0.0
-address=/.facebook.com/0.0.0.0
-
-# Never forward addresses in the non-routed address spaces
-bogus-priv
-
-# Reject private addresses from upstream nameservers
-stop-dns-rebind
-
-# Query servers in order
-strict-order
-
-# Set the size of the cache
-# The default is to keep 150 hostnames
-cache-size=8192
-
-# Optional logging directives
-log-async
-log-dhcp
-log-facility=/var/log/dnsmasq.log
-
-# Uncomment to log all queries
-#log-queries
-
-# Uncomment to enable DNSSEC
-#dnssec
-#trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
-#dnssec-check-unsigned
-```
-
-安装并启动程序（`sudo` 需要绑定在 [53 特权端口](https://unix.stackexchange.com/questions/16564/why-are-the-first-1024-ports-restricted-to-the-root-user-only)）：
-
-    $ sudo brew services start dnsmasq
-
-要设置 Dnsmasq 为本地的 DNS 服务器，打开**系统偏好设置** > **网络**并选择“高级”（译者注：原文为 ‘active interface’，实际上‘高级’），接着切换到 **DNS** 选项卡，选择 **+** 并 添加 `127.0.0.1`, 或使用：
-
-    $ sudo networksetup -setdnsservers "Wi-Fi" 127.0.0.1
-
-确保 Dnsmasq 正确配置：
-
-```
-$ scutil --dns
-DNS configuration
-
-resolver #1
-  search domain[0] : whatever
-  nameserver[0] : 127.0.0.1
-  flags    : Request A records, Request AAAA records
-  reach    : Reachable, Local Address, Directly Reachable Address
-
-$ networksetup -getdnsservers "Wi-Fi"
-127.0.0.1
-```
-
-**注意** 一些 VPN 软件一链接会覆盖 DNS 设置。更多信息查看 [issue #24](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/24)。
-
-#### 检测 DNSSEC 验证
-
-测试已签名区域的 DNSSEC（域名系统安全扩展协议）验证是否成功：
-
-    $ dig +dnssec icann.org
-
-应答应该有`NOERROR`状态并包含`ad`。例如：
-
-    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47039
-    ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
-
-不恰当签名的区域会导致检测 DNSSEC 验证的失败：
-
-    $ dig www.dnssec-failed.org
-
-应答应该包含`SERVFAIL`状态。例如：
-
-    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15190
-    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
-
-#### dnscrypt
-
-使用 [dnscrypt](https://dnscrypt.org/) 在可选的范围内加密 DNS 流量（译者注：原文为 ‘the provider of choice’）。
-
-如果你更喜欢一个 GUI 应用程序，看这里 [alterstep/dnscrypt-osxclient](https://github.com/alterstep/dnscrypt-osxclient)。
-
-从 Homebrew 安装 DNSCrypt：
-
-    $ brew install dnscrypt-proxy
-
-如果要和 Dnsmasq 一起使用，找到这个文件`homebrew.mxcl.dnscrypt-proxy.plist`
-
-```
-$ find ~/homebrew -name homebrew.mxcl.dnscrypt-proxy.plist
-/Users/drduh/homebrew/Cellar/dnscrypt-proxy/1.7.0/homebrew.mxcl.dnscrypt-proxy.plist
-```
-
-将下面一行编辑进去：
-
-    <string>--local-address=127.0.0.1:5355</string>
-
-接着写：
-
-    <string>/usr/local/opt/dnscrypt-proxy/sbin/dnscrypt-proxy</string>
-
-<img width="1015" alt="dnscrypt" src="https://cloud.githubusercontent.com/assets/12475110/19222914/8e6f853e-8e31-11e6-8dd6-27c33cbfaea5.png">
-
-**添加一行本地地址来使用 DNScrypt，使用 53 以外的端口，比如 5355**
-
-用 Homebrew 也能实现上述过程，安装 `gnu-sed` 并使用` gsed` 命令行：
-
-    $ sudo gsed -i "/sbin\\/dnscrypt-proxy<\\/string>/a<string>--local-address=127.0.0.1:5355<\\/string>\n" $(find ~/homebrew -name homebrew.mxcl.dnscrypt-proxy.plist)
-
-默认情况下，`resolvers-list` 将会指向 dnscrypt 版本特定的 resolvers 文件。当更新了 dnscrypt，这一版本将不再存在，若它存在，可能指向一个过期的文件。在 `homebrew.mxcl.dnscrypt-proxy.plist` 中把 resolvers 文件改为 `/usr/local/share` 中的符号链接的版本，能解决上述问题：
-
-    <string>--resolvers-list=/usr/local/share/dnscrypt-proxy/dnscrypt-resolvers.csv</string>
-
-还有下面这一行:
-
-    <string>/usr/local/opt/dnscrypt-proxy/sbin/dnscrypt-proxy</string>
-
-启用 DNSCrypt：
-
-    $ sudo brew services start dnscrypt-proxy
-
-确保 DNSCrypt 在运行：
-
-```
-$ sudo lsof -Pni UDP:5355
-COMMAND   PID   USER   FD   TYPE             DEVICE SIZE/OFF NODE NAME
-dnscrypt-  83 nobody    7u  IPv4 0x1773f85ff9f8bbef      0t0  UDP 127.0.0.1:5355
-
-$ ps A | grep '[d]nscrypt'
-   83   ??  Ss     0:00.27 /Users/drduh/homebrew/opt/dnscrypt-proxy/sbin/dnscrypt-proxy --local-address=127.0.0.1:5355 --ephemeral-keys --resolvers-list=/Users/drduh/homebrew/opt/dnscrypt-proxy/share/dnscrypt-proxy/dnscrypt-resolvers.csv --resolver-name=dnscrypt.eu-dk --user=nobody
-```
-
-> 默认情况下，dnscrypt-proxy 运行在本地 (127.0.0.1) ，53 端口，并且 "nobody" 身份使用dnscrypt.eu-dk DNSCrypt-enabled
-resolver。如果你想改变这些设置，你得编辑 plist 文件 (例如, --resolver-address, --provider-name, --provider-key, 等。)
-
-通过编辑 `homebrew.mxcl.dnscrypt-proxy.plist` 也能完成
-
-你能从一个信任的位置或使用 [public servers](https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv) 中的一个运行你自己的 [dnscrypt server](https://github.com/Cofyc/dnscrypt-wrapper)（也可以参考 [drduh/Debian-Privacy-Server-Guide#dnscrypt](https://github.com/drduh/Debian-Privacy-Server-Guide#dnscrypt)）
-
-确保输出的 DNS 流量已加密：
-
-```
-$ sudo tcpdump -qtni en0
-IP 10.8.8.8.59636 > 77.66.84.233.443: UDP, length 512
-IP 77.66.84.233.443 > 10.8.8.8.59636: UDP, length 368
-
-$ dig +short -x 77.66.84.233
-resolver2.dnscrypt.eu
-```
-
-你也可以阅读 [What is a DNS leak](https://dnsleaktest.com/what-is-a-dns-leak.html)，[mDNSResponder manual page](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/mDNSResponder.8.html) 和 [ipv6-test.com](http://ipv6-test.com/)。
-
-## Captive portal
-
-当 macOS 连接到新的网络，它会**检测**网络，如果连接没有被接通，则会启动 Captive Portal assistant 功能。
-
-一个攻击者能触发这一功能，无需用户交互就将一台电脑定向到有恶意软件的网站，最好禁用这个功能并用你经常用的浏览器登录 captive portals， 前提是你必须首先禁用了任何的客户端 / 代理设置。
-
-    $ sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.captive.control Active -bool false
-
-也可以看看 [Apple OS X Lion Security: Captive Portal Hijacking Attack](https://www.securestate.com/blog/2011/10/07/apple-os-x-lion-captive-portal-hijacking-attack)，[Apple's secret "wispr" request](http://blog.erratasec.com/2010/09/apples-secret-wispr-request.html)，[How to disable the captive portal window in Mac OS Lion](https://web.archive.org/web/20130407200745/http://www.divertednetworks.net/apple-captiveportal.html)，和 [An undocumented change to Captive Network Assistant settings in OS X 10.10 Yosemite](https://grpugh.wordpress.com/2014/10/29/an-undocumented-change-to-captive-network-assistant-settings-in-os-x-10-10-yosemite/)。
-
-## 证书授权
-
-macOS 上有从像 Apple、Verisign、Thawte、Digicert 这样的营利性公司和来自中国、日本、荷兰、美国等等的政府机关安装的[超过 200](https://support.apple.com/en-us/HT202858) 个可信任的根证书。这些证书授权(CAs)能够针对任一域名处理 SSL/TLS 认证，代码签名证书等等。
-
-想要了解更多，可以看看 [Certification Authority Trust Tracker](https://github.com/kirei/catt)、[Analysis of the HTTPS certificate ecosystem](http://conferences.sigcomm.org/imc/2013/papers/imc257-durumericAemb.pdf)(pdf) 和 [You Won’t Be Needing These Any More: On Removing Unused Certificates From Trust Stores](http://www.ifca.ai/fc14/papers/fc14_submission_100.pdf)(pdf)。
-
-你可以在**钥匙串访问**中的**系统根证书**选项卡下检查系统根证书，或者使用 `security` 命令行工具和 `/System/Library/Keychains/SystemRootCertificates.keychain` 文件。
-
-你可以通过钥匙串访问将它们标记为**永不信任**禁用证书授权并关闭窗口：
-
-<img width="450" alt="A certificate authority certificate" src="https://cloud.githubusercontent.com/assets/12475110/19222972/6b7aabac-8e32-11e6-8efe-5d3219575a98.png">
-
-被你的系统信任的被迫或妥协的证书授权产生一个假的 / 欺骗的 SSL 证书，这样的一个[中间人攻击](https://en.wikipedia.org/wiki/Man-in-the-middle_attack)的风险很低，但仍然是[可能的](https://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulent_certificates)。
-
-## OpenSSL
-
-在 Sierra 中 OpenSSL 的版本是`0.9.8zh`，这[不是最新的](https://apple.stackexchange.com/questions/200582/why-is-apple-using-an-older-version-of-openssl)。它不支持 TLS 1.1 或新的版本，elliptic curve ciphers，[还有更多](https://stackoverflow.com/questions/27502215/difference-between-openssl-09-8z-and-1-0-1)。
-
-Apple 在他们的 [Cryptographic Services 指南](https://developer.apple.com/library/mac/documentation/Security/Conceptual/cryptoservices/GeneralPurposeCrypto/GeneralPurposeCrypto.html)文档中宣布**弃用** OpenSSL。他们的版本也有补丁，可能会[带来惊喜喔](https://hynek.me/articles/apple-openssl-verification-surprises/)。
-
-如果你要在你的 Mac 上用 OpenSSL，用 `brew install openssl` 下载并安装一个 OpenSSL 最近的版本。注意，brew 已经链接了 `/usr/bin/openssl` ，可能和内置软件冲突。查看 [issue #39](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/39)。
-
-在 homebrew 版本和 OpenSSL 系统版本之间比较 TLS 协议和密码：
-
-```
-$ ~/homebrew/bin/openssl version; echo | ~/homebrew/bin/openssl s_client -connect github.com:443 2>&1 | grep -A2 SSL-Session
-OpenSSL 1.0.2j  26 Sep 2016
-SSL-Session:
-    Protocol  : TLSv1.2
-    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
-
-$ /usr/bin/openssl version; echo | /usr/bin/openssl s_client -connect github.com:443 2>&1 | grep -A2 SSL-Session
-OpenSSL 0.9.8zh 14 Jan 2016
-SSL-Session:
-    Protocol  : TLSv1
-    Cipher    : AES128-SHA
-```
-
-阅读 [Comparison of TLS implementations](https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations)，[How's My SSL](https://www.howsmyssl.com/)，[Qualys SSL Labs Tools](https://www.ssllabs.com/projects/) 了解更多，查看更详细的解释和最新的漏洞测试请看 [ssl-checker.online-domain-tools.com](http://ssl-checker.online-domain-tools.com)。
-
-## Curl
-
-macOS 中 Curl 的版本针对 SSL/TLS 验证使用[安全传输](https://developer.apple.com/library/mac/documentation/Security/Reference/secureTransportRef/)。
-
-如果你更愿意使用 OpenSSL，用 `brew install curl --with-openssl` 安装并通过 `brew link --force curl` 确保它是默认的。
-
-这里推荐几个向 `~/.curlrc` 中添加的[可选项](http://curl.haxx.se/docs/manpage.html)（更多请查看 `man curl`）：
-
-```
-user-agent = "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
-referer = ";auto"
-connect-timeout = 10
-progress-bar
-max-time = 90
-verbose
-show-error
-remote-time
-ipv4
-```
-
-## Web
-
-### 代理
-
-考虑使用 [Privoxy](http://www.privoxy.org/) 作为本地代理来过滤网络浏览内容。
-
-一个已签名的 privoxy 安装包能从 [silvester.org.uk](http://silvester.org.uk/privoxy/OSX/) 或 [Sourceforge](http://sourceforge.net/projects/ijbswa/files/Macintosh%20%28OS%20X%29/) 下载。签过名的包比 Homebrew 版本[更安全](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/65)，而且能得到 Privoxy 项目全面的支持。
-
-另外，用 Homebrew 安装、启动 privoxy：
-
-    $ brew install privoxy
-
-    $ brew services start privoxy
-
-
-默认情况下，privoxy 监听本地的 8118 端口。
-
-为你的网络接口设置系统 **http** 代理为`127.0.0.1` 和 `8118`（可以通过 **系统偏好设置 > 网络 > 高级 > 代理**）：
-
-    $ sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 8118
-
-
-**(可选)** 用下述方法设置系统 **https** 代理，这仍提供了域名过滤功能：
-
-    $ sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 8118
-
-确保代理设置好了：
-
-```
-$ scutil --proxy
-<dictionary> {
-  ExceptionsList : <array> {
-    0 : *.local
-    1 : 169.254/16
-  }
-  FTPPassive : 1
-  HTTPEnable : 1
-  HTTPPort : 8118
-  HTTPProxy : 127.0.0.1
-}
-```
-
-在一个浏览器里访问 <http://p.p/>，或用 Curl 访问：
-
-```
-$ ALL_PROXY=127.0.0.1:8118 curl -I http://p.p/
-HTTP/1.1 200 OK
-Content-Length: 2401
-Content-Type: text/html
-Cache-Control: no-cache
-```
-
-代理已经有很多好的规则，你也能自己定义。
-
-编辑 `~/homebrew/etc/privoxy/user.action` 用域名或正则表达式来过滤。
-
-示例如下：
-
-```
-{ +block{social networking} }
-www.facebook.com/(extern|plugins)/(login_status|like(box)?|activity|fan)\.php
-.facebook.com
-
-{ +block{unwanted images} +handle-as-image }
-.com/ads/
-/.*1x1.gif
-/.*fb-icon.[jpg|gif|png]
-/assets/social-.*
-/cleardot.gif
-/img/social.*
-ads.*.co.*/
-ads.*.com/
-
-{ +redirect{s@http://@https://@} }
-.google.com
-.wikipedia.org
-code.jquery.com
-imgur.com
-```
-
-验证 Privoxy 能够拦截和重定向：
-
-```
-$ ALL_PROXY=127.0.0.1:8118 curl ads.foo.com/ -IL
-HTTP/1.1 403 Request blocked by Privoxy
-Content-Type: image/gif
-Content-Length: 64
-Cache-Control: no-cache
-
-$ ALL_PROXY=127.0.0.1:8118 curl imgur.com/ -IL
-HTTP/1.1 302 Local Redirect from Privoxy
-Location: https://imgur.com/
-Content-Length: 0
-Date: Sun, 09 Oct 2016 18:48:19 GMT
-
-HTTP/1.1 200 OK
-Content-Type: text/html; charset=utf-8
-```
-
-你能用小猫的图片来代替广告图片，例如，通过启动一个本地的 Web 服务器然后[重定向屏蔽的请求](https://www.privoxy.org/user-manual/actions-file.html#SET-IMAGE-BLOCKER)到本地。
-
-### 浏览器
-
-Web 浏览器引发最大的安全和隐私风险，因为它基本的工作是从因特网上下载和运行未信任的代码。
-
-对于你的大部分浏览请使用 [Google Chrome](https://www.google.com/chrome/browser/desktop/)。它提供了[独立的配置文件](https://www.chromium.org/user-experience/multi-profiles)，[好的沙盒处理](https://www.chromium.org/developers/design-documents/sandbox)，[经常更新](http://googlechromereleases.blogspot.com/)（包括 Flash，尽管你应该禁用它 —— 原因看下面），并且[自带牛哄哄的资格证书](https://www.chromium.org/Home/chromium-security/brag-sheet)。
-
-Chrome 也有一个很好的 [PDF 阅读器](http://0xdabbad00.com/2013/01/13/most-secure-pdf-viewer-chrome-pdf-viewer/)。
-
-如果你不想用 Chrome，[Firefox](https://www.mozilla.org/en-US/firefox/new/) 也是一个很好的浏览器。或两个都用。看这里的讨论 [#2](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/2)，[#90](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/90)。
-
-如果用 Firefox，查看 [TheCreeper/PrivacyFox](https://github.com/TheCreeper/PrivacyFox) 里推荐的隐私偏好设置。也要确保为基于 Mozilla 的浏览器检查 [NoScript](https://noscript.net/)，它允许基于白名单预先阻止脚本。
-
-创建至少三个配置文件，一个用来浏览**可信任的**网站 (邮箱，银行)，另一个为了**大部分是可信的** 网站（聚合类，新闻类站点），第三个是针对完全**无 cookie** 和**无脚本**的网站浏览。
-
-* 一个启用了 **无 cookies 和 Javascript**（例如, 在 `chrome://settings/content`中被关掉）的配置文件就应该用来访问未信任的网站。然而，如果不启用 Javascript，很多页面根本不会加载。
-
-* 一个有 [uMatrix](https://github.com/gorhill/uMatrix) 或 [uBlock Origin](https://github.com/gorhill/uBlock)（或两个都有）的配置文件。用这个文件来访问**大部分是可信的**网站。花时间了解防火墙扩展程序是怎么工作的。其他经常被推荐的扩展程序是 [Privacy Badger](https://www.eff.org/privacybadger)、[HTTPSEverywhere](https://www.eff.org/https-everywhere) 和 [CertPatrol](http://patrol.psyced.org/)（仅限 Firefox）。
-
-* 一个或更多的配置文件用来满足安全和可信任的浏览需求，例如仅限于银行和邮件。
-
-想法是分隔并划分数据，那么如果一个“会话”出现漏洞或泄露隐私并不一定会影响其它数据。
-
-在每一个文件里，访问 `chrome://plugins/` 并禁用 **Adobe Flash Player**。如果你一定要用 Flash，访问 `chrome://settings/contents`，在插件部分，启用在**让我自行选择何时运行插件内容**（也叫做 *click-to-play*）。
-
-花时间阅读 [Chromium 安全](https://www.chromium.org/Home/chromium-security)和 [Chromium 隐私](https://www.chromium.org/Home/chromium-privacy)。
-
-例如你可能希望禁用 [DNS prefetching](https://www.chromium.org/developers/design-documents/dns-prefetching)（也可以阅读 [DNS Prefetching and Its Privacy Implications](https://www.usenix.org/legacy/event/leet10/tech/full_papers/Krishnan.pdf)）。
-
-你也应该知道 [WebRTC](https://en.wikipedia.org/wiki/WebRTC#Concerns)，它能获取你本地或外网的（如果连到 VPN）IP 地址。这可以用诸如 [uBlock Origin](https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-leaking-local-IP-address) 和 [rentamob/WebRTC-Leak-Prevent](https://github.com/rentamob/WebRTC-Leak-Prevent) 这样的扩展程序禁用掉。
-
-很多源于 Chromium 的浏览器本文是不推荐的。它们通常[不开源](http://yro.slashdot.org/comments.pl?sid=4176879&cid=44774943)，[维护性差](https://plus.google.com/+JustinSchuh/posts/69qw9wZVH8z)，[有很多 bug](https://code.google.com/p/google-security-research/issues/detail?id=679)，而且对保护隐私有可疑的声明。阅读 [The Private Life of Chromium Browsers](http://thesimplecomputer.info/the-private-life-of-chromium-browsers)。
-
-也不推荐 Safari。代码一团糟而且[安全问题](https://nakedsecurity.sophos.com/2014/02/24/anatomy-of-a-goto-fail-apples-ssl-bug-explained-plus-an-unofficial-patch/)[漏洞](https://vimeo.com/144872861)经常发生，并且打补丁很慢（阅读 [Hacker News 上的讨论](https://news.ycombinator.com/item?id=10150038)）。安全[并不是](https://discussions.apple.com/thread/5128209) Safari 的一个优点。如果你硬要使用它，至少在偏好设置里[禁用](https://thoughtsviewsopinions.wordpress.com/2013/04/26/how-to-stop-downloaded-files-opening-automatically/)**下载后打开"安全的文件**，也要了解其他的[隐私差别](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/93)。
-
-其他乱七八糟的浏览器，例如 [Brave](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/94)，在这个指南里没有评估，所以既不推荐也不反对使用。
-
-想浏览更多安全方面的问题，请阅读 [HowTo: Privacy & Security Conscious Browsing](https://gist.github.com/atcuno/3425484ac5cce5298932)，[browserleaks.com](https://www.browserleaks.com/) 和 [EFF Panopticlick](https://panopticlick.eff.org/)。
-
-### 插件
-
-**Adobe Flash**, **Oracle Java**, **Adobe Reader**, **Microsoft Silverlight**（Netflix 现在使用了 [HTML5](https://help.netflix.com/en/node/23742)） 和其他的插件有[安全风险](https://news.ycombinator.com/item?id=9901480)，不应该安装。
-
-如果它们是必须的，只在一个虚拟机里安装它们并且订阅安全通知以便确保你总能及时修补漏洞。
-
-阅读 [Hacking Team Flash Zero-Day](http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-flash-zero-day-integrated-into-exploit-kits/)、[Java Trojan BackDoor.Flashback](https://en.wikipedia.org/wiki/Trojan_BackDoor.Flashback)、[Acrobat Reader: Security Vulnerabilities](http://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-497/Adobe-Acrobat-Reader.html) 和 [Angling for Silverlight Exploits](https://blogs.cisco.com/security/angling-for-silverlight-exploits)。
-
-## PGP/GPG
-
-PGP 是一个端对端邮件加密标准。这意味着只是选中的接收者能解密一条消息，不像通常的邮件被提供者永久阅读和保存。
-
-**GPG** 或 **GNU Privacy Guard**，是一个符合标准的 GPL 协议项目。
-
-**GPG** 被用来验证你下载和安装的软件签名，既可以[对称](https://en.wikipedia.org/wiki/Symmetric-key_algorithm)也可以[非对称](https://en.wikipedia.org/wiki/Public-key_cryptography)的加密文件和文本。
-
-从 Homebrew 上用 `brew install gnupg2` 安装。
-
-如果你更喜欢图形化的应用，下载安装 [GPG Suite](https://gpgtools.org/)。
-
-这有几个往 `~/.gnupg/gpg.conf` 中添加的[推荐选项](https://github.com/drduh/config/blob/master/gpg.conf)：
-
-```
-auto-key-locate keyserver
-keyserver hkps://hkps.pool.sks-keyservers.net
-keyserver-options no-honor-keyserver-url
-keyserver-options ca-cert-file=/etc/sks-keyservers.netCA.pem
-keyserver-options no-honor-keyserver-url
-keyserver-options debug
-keyserver-options verbose
-personal-cipher-preferences AES256 AES192 AES CAST5
-personal-digest-preferences SHA512 SHA384 SHA256 SHA224
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
-cert-digest-algo SHA512
-s2k-digest-algo SHA512
-s2k-cipher-algo AES256
-charset utf-8
-fixed-list-mode
-no-comments
-no-emit-version
-keyid-format 0xlong
-list-options show-uid-validity
-verify-options show-uid-validity
-with-fingerprint
-```
-
-安装 keyservers [CA 认证](https://sks-keyservers.net/verify_tls.php)：
-
-    $ curl -O https://sks-keyservers.net/sks-keyservers.netCA.pem
-
-    $ sudo mv sks-keyservers.netCA.pem /etc
-
-这些设置将配置 GnuPG 在获取新密钥和想用强加密原语时使用 SSL。
-
-请阅读 [ioerror/duraconf/configs/gnupg/gpg.conf](https://github.com/ioerror/duraconf/blob/master/configs/gnupg/gpg.conf)。你也应该花时间读读 [OpenPGP Best Practices](https://help.riseup.net/en/security/message-security/openpgp/best-practices)。
-
-如果你没有一个密钥对，可以用 `gpg --gen-key` 创建一个。也可以阅读 [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide)。
-
-读[在线的](https://alexcabal.com/creating-the-perfect-gpg-keypair/)[指南](https://security.stackexchange.com/questions/31594/what-is-a-good-general-purpose-gnupg-key-setup)并练习给你自己和朋友们加密解密邮件。让他们也对这篇文章感兴趣吧！
-
-## OTR
-
-OTR 代表 **off-the-record** 并且是一个针对即时消息对话加密和授权的密码协议。
-
-你能在任何一个已存在的 [XMPP](https://xmpp.org/about) 聊天服务中使用 OTR，甚至是 Google Hangouts（它只在使用 TLS 的用户和服务器之间加密对话）。
-
-你和某人第一次开始一段对话，你将被要求去验证他们的公钥指纹。确保是本人亲自操作或通过其它一些安全的方式(例如 GPG 加密过的邮件)。
-针对 XMPP 和其他的聊天协议，有一个流行的 macOS GUI 客户端是 [Adium](https://adium.im/)。
-
-考虑下载一个 [beta 版本](https://beta.adium.im/)，使用 OAuth2 验证，确保登录谷歌账号[更](https://adium.im/blog/2015/04/)[安全](https://trac.adium.im/ticket/16161)。
-
-```
-Adium_1.5.11b3.dmg
-SHA-256: 999e1931a52dc327b3a6e8492ffa9df724a837c88ad9637a501be2e3b6710078
-SHA-1:   ca804389412f9aeb7971ade6812f33ac739140e6
-```
-
-记住对于 Adium 的 OTR 聊天[禁用登录](https://trac.adium.im/ticket/15722)。
-
-一个好的基于控制台的 XMPP 客户端是 [profanity](http://www.profanity.im/)，它能用 `brew install profanity` 安装。
-
-想增加匿名性的话，查看 [Tor Messenger](https://blog.torproject.org/blog/tor-messenger-beta-chat-over-tor-easily)，尽管它还在测试中，[Ricochet](https://ricochet.im/)（它最近接受了一个彻底的[安全审查](https://ricochet.im/files/ricochet-ncc-audit-2016-01.pdf)）也是，这两个都使用 Tor 网络而不是依赖于消息服务器。
-
-如果你想了解 OTR 是如何工作的，可以阅读这篇论文 [Off-the-Record Communication, or, Why Not To Use PGP](https://otr.cypherpunks.ca/otr-wpes.pdf)
-
-## Tor
-
-Tor 是一个用来浏览网页的匿名代理。
-
-从[官方 Tor 项目网站](https://www.torproject.org/projects/torbrowser.html)下载 Tor 浏览器。
-
-**不要**尝试配置其他的浏览器或应用程序来使用 Tor，因为你可能会导致一个错误，危及你的匿名信息。
-
-下载 `dmg` 和 `asc` 签名文件，然后验证已经被 Tor 开发者签过名的磁盘镜像：
-
-```
-$ cd Downloads
-
-$ file Tor*
-TorBrowser-6.0.5-osx64_en-US.dmg:     bzip2 compressed data, block size = 900k
-TorBrowser-6.0.5-osx64_en-US.dmg.asc: PGP signature Signature (old)
-
-$ gpg Tor*asc
-gpg: assuming signed data in `TorBrowser-6.0.5-osx64_en-US.dmg'
-gpg: Signature made Fri Sep 16 07:51:52 2016 EDT using RSA key ID D40814E0
-gpg: Can't check signature: public key not found
-
-$ gpg --recv 0x4E2C6E8793298290
-gpg: requesting key 0x4E2C6E8793298290 from hkp server keys.gnupg.net
-gpg: key 0x4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported
-gpg: no ultimately trusted keys found
-gpg: Total number processed: 1
-gpg:               imported: 1  (RSA: 1)
-
-$ gpg Tor*asc
-gpg: assuming signed data in 'TorBrowser-6.0.5-osx64_en-US.dmg'
-gpg: Signature made Fri Sep 16 07:51:52 2016 EDT using RSA key ID D40814E0
-gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [unknown]
-gpg: WARNING: This key is not certified with a trusted signature!
-gpg:          There is no indication that the signature belongs to the owner.
-Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
-     Subkey fingerprint: BA1E E421 BBB4 5263 180E  1FC7 2E1A C68E D408 14E0
-```
-
-确保 `Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>"`出现在输出结果中。关于密钥没被认证的警告没有危害的，因为它还没被手动分配信任。
-
-看 [How to verify signatures for packages](https://www.torproject.org/docs/verifying-signatures.html) 获得更多信息。
-
-要完成安装 Tor 浏览器，打开磁盘镜像，拖动它到应用文件夹里，或者这样：
-
-```
-$ hdiutil mount TorBrowser-6.0.5-osx64_en-US.dmg
-
-$ cp -rv /Volumes/Tor\ Browser/TorBrowser.app /Applications
-```
-
-也可以验证是否这个 Tor 应用程序是由名为 **MADPSAYN6T** 的 Apple 开发者账号进行签名编译的:
-
-```
-$ codesign -dvv /Applications/TorBrowser.app
-Executable=/Applications/TorBrowser.app/Contents/MacOS/firefox
-Identifier=org.mozilla.tor browser
-Format=app bundle with Mach-O thin (x86_64)
-CodeDirectory v=20200 size=247 flags=0x0(none) hashes=5+3 location=embedded
-Library validation warning=OS X SDK version before 10.9 does not support Library Validation
-Signature size=4247
-Authority=Developer ID Application: The Tor Project, Inc (MADPSAYN6T)
-Authority=Developer ID Certification Authority
-Authority=Apple Root CA
-Signed Time=Nov 30, 2016, 10:40:34 AM
-Info.plist entries=21
-TeamIdentifier=MADPSAYN6T
-Sealed Resources version=2 rules=12 files=130
-Internal requirements count=1 size=184
-```
-
-为了查看证书的详细内容，可以使用 `codesign` 提取并且使用 `openssl` 对它进行解码:
-
-```
-$ codesign -d --extract-certificates /Applications/TorBrowser.app
-Executable=/Applications/TorBrowser.app/Contents/MacOS/firefox
-
-$ file codesign*
-codesign0: data
-codesign1: data
-codesign2: data
-
-$ openssl x509 -inform der -in codesign0 -subject -issuer -startdate -enddate -noout
-subject= /UID=MADPSAYN6T/CN=Developer ID Application: The Tor Project, Inc (MADPSAYN6T)/OU=MADPSAYN6T/O=The Tor Project, Inc/C=US
-issuer= /CN=Developer ID Certification Authority/OU=Apple Certification Authority/O=Apple Inc./C=US
-notBefore=Apr 12 22:40:13 2016 GMT
-notAfter=Apr 13 22:40:13 2021 GMT
-
-$ openssl x509 -inform der -in codesign0  -fingerprint -noout
-SHA1 Fingerprint=95:80:54:F1:54:66:F3:9C:C2:D8:27:7A:29:21:D9:61:11:93:B3:E8
-
-$ openssl x509 -inform der -in codesign0 -fingerprint -sha256 -noout
-SHA256 Fingerprint=B5:0D:47:F0:3E:CB:42:B6:68:1C:6F:38:06:2B:C2:9F:41:FA:D6:54:F1:29:D3:E4:DD:9C:C7:49:35:FF:F5:D9
-```
-
-Tor 流量对于[出口节点](https://en.wikipedia.org/wiki/Tor_anonymity_network#Exit_node_eavesdropping)（不能被一个网络窃听者读取）是**加密的**， Tor 是**可以**被发现的- 例如，TLS 握手“主机名”将会以明文显示：
-
-```
-$ sudo tcpdump -An "tcp" | grep "www"
-listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
-.............". ...www.odezz26nvv7jeqz1xghzs.com.........
-.............#.!...www.bxbko3qi7vacgwyk4ggulh.com.........
-.6....m.....>...:.........|../*	Z....W....X=..6...C../....................................0...0..0.......'....F./0..	*.H........0%1#0!..U....www.b6zazzahl3h3faf4x2.com0...160402000000Z..170317000000Z0'1%0#..U....www.tm3ddrghe22wgqna5u8g.net0..0..
-```
-
-查看 [Tor Protocol Specification](https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt) 和 [Tor/TLSHistory](https://trac.torproject.org/projects/tor/wiki/org/projects/Tor/TLSHistory) 获得更多信息。
-
-另外，你可能也希望使用一个 [pluggable transport](https://www.torproject.org/docs/pluggable-transports.html)，例如 [Yawning/obfs4proxy](https://github.com/Yawning/obfs4) 或 [SRI-CSL/stegotorus](https://github.com/SRI-CSL/stegotorus) 来混淆 Tor 流量。
-
-这能通过建立你自己的 [Tor relay](https://www.torproject.org/docs/tor-relay-debian.html) 或找到一个已存在的私有或公用的 [bridge](https://www.torproject.org/docs/bridges.html.en#RunningABridge) 来作为一个混淆入口节点来实现。
-
-对于额外的安全性，在 [VirtualBox](https://www.virtualbox.org/wiki/Downloads) 或 [VMware](https://www.vmware.com/products/fusion)，可视化的 [GNU/Linux](http://www.brianlinkletter.com/installing-debian-linux-in-a-virtualbox-virtual-machine/) 或 [BSD](http://www.openbsd.org/faq/faq4.html) 机器里用 Tor。
-
-最后，记得 Tor 网络提供了[匿名](https://www.privateinternetaccess.com/blog/2013/10/how-does-privacy-differ-from-anonymity-and-why-are-both-important/)，这并不等于隐私。Tor 网络不一定能防止一个全球的窃听者能获得流量统计和[相关性](https://blog.torproject.org/category/tags/traffic-correlation)。你也可以阅读 [Seeking Anonymity in an Internet Panopticon](http://bford.info/pub/net/panopticon-cacm.pdf) 和 [Traffic Correlation on Tor by Realistic Adversaries](http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf)。
-
-阅读 [Invisible Internet Project (I2P)](https://geti2p.net/en/about/intro) 和它的 [Tor 对比](https://geti2p.net/en/comparison/tor)。
-
-## VPN
-
-如果你在未信任的网络使用 Mac - 机场，咖啡厅等 - 你的网络流量会被监控并可能被篡改。
-
-用一个 VPN 是个好想法，它能用一个你信任的提供商加密**所有**输出的网络流量。举例说如何建立并拥有自己的 VPN，阅读 [drduh/Debian-Privacy-Server-Guide](https://github.com/drduh/Debian-Privacy-Server-Guide)。
-
-不要盲目地还没理解整个流程和流量将如何被传输就为一个 VPN 服务签名。如果你不理解 VPN 是怎样工作的或不熟悉软件的使用，你就最好别用它。
-
-当选择一个 VPN 服务或建立你自己的服务时，确保研究过协议，密钥交换算法，认证机制和使用的加密类型。诸如 [PPTP](https://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security) 这样的一些协议，应该避免支持 [OpenVPN](https://en.wikipedia.org/wiki/OpenVPN)。
-
-当 VPN 被中断或失去连接时，一些客户端可能通过下一个可用的接口发送流量。查看 [scy/8122924](https://gist.github.com/scy/8122924) 研究下如何允许流量只通过 VPN。
-
-另一些脚本会关闭系统，所以只能通过 VPN 访问网络，这就是 the Voodoo Privacy project - [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) 的一部分，有一个更新的指南用来在一个虚拟机上（[hwdsl2/setup-ipsec-vpn](https://github.com/hwdsl2/setup-ipsec-vpn)）或一个 docker 容器（[hwdsl2/docker-ipsec-vpn-server](https://github.com/hwdsl2/docker-ipsec-vpn-server)）上建立一个 IPSec VPN。
-
-## 病毒和恶意软件
-
-面对[日益增长](https://www.documentcloud.org/documents/2459197-bit9-carbon-black-threat-research-report-2015.html)的恶意软件，Mac 还无法很好的防御这些病毒和恶意软件！
-
-一些恶意软件捆绑在正版软件上，比如 [Java bundling Ask Toolbar](http://www.zdnet.com/article/oracle-extends-its-adware-bundling-to-include-java-for-macs/)，还有 [Mac.BackDoor.iWorm](https://docs.google.com/document/d/1YOfXRUQJgMjJSLBSoLiUaSZfiaS_vU3aG4Bvjmz6Dxs/edit?pli=1) 这种和盗版软件捆绑到一块的。 [Malwarebytes Anti-Malware for Mac](https://www.malwarebytes.com/antimalware/mac/) 是一款超棒的应用，它可以帮你摆脱种类繁多的垃圾软件和其他恶意程序的困扰。
-
-看看[恶意软件驻留在 Mac OS X 的方法](https://www.virusbtn.com/pdf/conference/vb2014/VB2014-Wardle.pdf) (pdf) 和[恶意软件在 OS X Yosemite 后台运行](https://www.rsaconference.com/events/us15/agenda/sessions/1591/malware-persistence-on-os-x-yosemite)了解各种恶意软件的功能和危害。
-
-你可以定期运行 [Knock Knock](https://github.com/synack/knockknock) 这样的工具来检查在持续运行的应用(比如脚本，二进制程序)。但这种方法可能已经过时了。[Block Block](https://objective-see.com/products/blockblock.html) 和 [Ostiarius](https://objective-see.com/products/ostiarius.html) 这样的应用可能还有些帮助。可以在 [issue #90](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/90) 中查看相关警告。除此之外，使用 [Little Flocker](https://www.littleflocker.com/) 也能保护部分文件系统免遭非法写入，类似 Little Snitch 保护网络 (注意，该软件目前是 beat 版本，[谨慎使用](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/pull/128))。
-
-**反病毒**软件是把双刃剑 -- 对于**高级**用户没什么用，却可能面临更多复杂攻击的威胁。然而对于 Mac **新手**用户可能是有用的，可以检测到“各种”恶意软件。不过也要考到额外的处理开销。
-
-看看 [Sophail: Applied attacks against Antivirus](https://lock.cmpxchg8b.com/sophailv2.pdf) (pdf), [Analysis and Exploitation of an ESET Vulnerability](http://googleprojectzero.blogspot.ro/2015/06/analysis-and-exploitation-of-eset.html), [a trivial Avast RCE](https://code.google.com/p/google-security-research/issues/detail?id=546), [Popular Security Software Came Under Relentless NSA and GCHQ Attacks](https://theintercept.com/2015/06/22/nsa-gchq-targeted-kaspersky/), 和 [AVG: "Web TuneUP" extension multiple critical vulnerabilities](https://code.google.com/p/google-security-research/issues/detail?id=675).
-
-因此，最好的防病毒方式是日常地防范。看看 [issue #44](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/44) 中的讨论。
-
-macOS 上有很多本地提权漏洞，所以要小心那些从第三方网站或 HTTP([案例](http://arstechnica.com/security/2015/08/0-day-bug-in-fully-patched-os-x-comes-under-active-exploit-to-hijack-macs/))下载且运行受信或不受信的程序。
-
-看看 [The Safe Mac](http://www.thesafemac.com/) 上过去和目前的 Mac 安全新闻。
-
-也检查下 [Hacking Team](https://www.schneier.com/blog/archives/2015/07/hacking_team_is.html) 为 Mac OS 开发的恶意软件：[root installation for MacOS](https://github.com/hackedteam/vector-macos-root)、 [Support driver for Mac Agent](https://github.com/hackedteam/driver-macos) 和 [RCS Agent for Mac](https://github.com/hackedteam/core-macos)，这是一个很好的示例，一些高级的恶意程序是如何在**用户空间**隐藏自己的(例如 `ps`、`ls`)。想了解更多的话，看看 [A Brief Analysis of an RCS Implant Installer](https://objective-see.com/blog/blog_0x0D.html) 和 [reverse.put.as](https://reverse.put.as/2016/02/29/the-italian-morons-are-back-what-are-they-up-to-this-time/)。
-
-## 系统完整性保护
-
-[System Integrity Protection](https://support.apple.com/en-us/HT204899) (SIP) 这个安全特性源于 OS X 10.11 "El Capitan"。默认是开启的，不过[可以禁用](https://derflounder.wordpress.com/2015/10/01/system-integrity-protection-adding-another-layer-to-apples-security-model/)，这可能需要更改某些系统设置，如删除根证书颁发机构或卸载某些启动守护进程。保持这项功能默认开启状态。
-
-摘取自 [OS X 10.11 新增功能](https://developer.apple.com/library/prerelease/mac/releasenotes/MacOSX/WhatsNewInOSX/Articles/MacOSX10_11.html):
-
-> 一项新的安全政策，应用于每个正在运行的进程，包括特权代码和非沙盒中运行的代码。该策略对磁盘上和运行时的组件增加了额外的保护，只允许系统安装程序和软件更新修改系统二进制文件。不再允许代码注入和运行时附加系统二进制文件。
-
-阅读 [What is the “rootless” feature in El Capitan, really?](https://apple.stackexchange.com/questions/193368/what-is-the-rootless-feature-in-el-capitan-really)
-
-[禁用 SIP](http://appleinsider.com/articles/16/11/17/system-integrity-protection-disabled-by-default-on-some-touch-bar-macbook-pros) 的一些 MacBook 已经售出。要验证 SIP 是否已启用，请使用命令 `csrutil status`，该命令应返回：`System Integrity Protection status: enabled.`。否则，通过恢复模式[启用 SIP](https://developer.apple.com/library/content/documentation/Security/Conceptual/System_Integrity_Protection_Guide/ConfiguringSystemIntegrityProtection/ConfiguringSystemIntegrityProtection.html)。
-
-## Gatekeeper 和 XProtect
-
-**Gatekeeper** 和 **quarantine** 系统试图阻止运行（打开）未签名或恶意程序及文件。
-
-**XProtect** 防止执行已知的坏文件和过时的版本插件，但并不能清除或停止现有的恶意软件。
-
-两者都提供了对常见风险的一些保护，默认设置就好。
-
-你也可以阅读 [Mac Malware Guide : How does Mac OS X protect me?](http://www.thesafemac.com/mmg-builtin/) 和 [Gatekeeper, XProtect and the Quarantine attribute](http://ilostmynotes.blogspot.com/2012/06/gatekeeper-xprotect-and-quarantine.html)。
-
-**注意** Quarantine 会将下载的文件信息存储在 `~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2`，这可能会造成隐私泄露的风险。简单的使用 `strings` 或下面的命令来检查文件:
-
-    $ echo 'SELECT datetime(LSQuarantineTimeStamp + 978307200, "unixepoch") as LSQuarantineTimeStamp, LSQuarantineAgentName, LSQuarantineOriginURLString, LSQuarantineDataURLString from LSQuarantineEvent;' | sqlite3 /Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-阅读[这篇文章](http://www.zoharbabin.com/hey-mac-i-dont-appreciate-you-spying-on-me-hidden-downloads-log-in-os-x/)了解更多信息。
-
-想永久禁用此项功能，[清除文件](https://superuser.com/questions/90008/how-to-clear-the-contents-of-a-file-from-the-command-line)和[让它不可更改](http://hints.macworld.com/article.php?story=20031017061722471)：
-
-    $ :>~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-    $ sudo chflags schg ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-此外，macOS 附加元数据（[HFS+ extended attributes](https://en.wikipedia.org/wiki/Extended_file_attributes#OS_X)）来下载文件，能通过 `mdls` 和 `xattr` 指令来观察：
-
-```
-$ ls -l@ ~/Downloads/TorBrowser-6.0.8-osx64_en-US.dmg
--rw-r--r--@ 1 drduh  staff  59322237 Dec  1 12:00 TorBrowser-6.0.8-osx64_en-US.dmg
-com.apple.metadata:kMDItemWhereFroms	     186
-com.apple.quarantine	      68
-
-$ mdls ~/Downloads/TorBrowser-6.0.8-osx64_en-US.dmg
-_kMDItemOwnerUserID            = 501
-kMDItemContentCreationDate     = 2016-12-01 12:00:00 +0000
-kMDItemContentModificationDate = 2016-12-01 12:00:00 +0000
-kMDItemContentType             = "com.apple.disk-image-udif"
-kMDItemContentTypeTree         = (
-    "public.archive",
-    "public.item",
-    "public.data",
-    "public.disk-image",
-    "com.apple.disk-image",
-    "com.apple.disk-image-udif"
-)
-kMDItemDateAdded               = 2016-12-01 12:00:00 +0000
-kMDItemDisplayName             = "TorBrowser-6.0.8-osx64_en-US.dmg"
-kMDItemFSContentChangeDate     = 2016-12-01 12:00:00 +0000
-kMDItemFSCreationDate          = 2016-12-01 12:00:00 +0000
-kMDItemFSCreatorCode           = ""
-kMDItemFSFinderFlags           = 0
-kMDItemFSHasCustomIcon         = (null)
-kMDItemFSInvisible             = 0
-kMDItemFSIsExtensionHidden     = 0
-kMDItemFSIsStationery          = (null)
-kMDItemFSLabel                 = 0
-kMDItemFSName                  = "TorBrowser-6.0.8-osx64_en-US.dmg"
-kMDItemFSNodeCount             = (null)
-kMDItemFSOwnerGroupID          = 5000
-kMDItemFSOwnerUserID           = 501
-kMDItemFSSize                  = 60273898
-kMDItemFSTypeCode              = ""
-kMDItemKind                    = "Disk Image"
-kMDItemLogicalSize             = 60273898
-kMDItemPhysicalSize            = 60276736
-kMDItemWhereFroms              = (
-    "https://dist.torproject.org/torbrowser/6.0.8/TorBrowser-6.0.8-osx64_en-US.dmg",
-    "https://www.torproject.org/projects/torbrowser.html.en"
-)
-
-$ xattr -l TorBrowser-6.0.8-osx64_en-US.dmg
-com.apple.metadata:kMDItemWhereFroms:
-00000000  62 70 6C 69 73 74 30 30 A2 01 02 5F 10 4D 68 74  |bplist00..._.Mht|
-00000010  74 70 73 3A 2F 2F 64 69 73 74 2E 74 6F 72 70 72  |tps://dist.torpr|
-00000020  6F 6A 65 63 74 2E 6F 72 67 2F 74 6F 72 62 72 6F  |oject.org/torbro|
-00000030  77 73 65 72 2F 36 2E 30 2E 38 2F 54 6F 72 42 72  |wser/6.0.8/TorBr|
-00000040  6F 77 73 65 72 2D 36 2E 30 2E 38 2D 6F 73 78 36  |owser-6.0.8-osx6|
-00000050  34 5F 65 6E 2D 55 53 2E 64 6D 67 5F 10 36 68 74  |4_en-US.dmg_.6ht|
-00000060  74 70 73 3A 2F 2F 77 77 77 2E 74 6F 72 70 72 6F  |tps://www.torpro|
-00000070  6A 65 63 74 2E 6F 72 67 2F 70 72 6F 6A 65 63 74  |ject.org/project|
-00000080  73 2F 74 6F 72 62 72 6F 77 73 65 72 2E 68 74 6D  |s/torbrowser.htm|
-00000090  6C 2E 65 6E 08 0B 5B 00 00 00 00 00 00 01 01 00  |l.en..[.........|
-000000A0  00 00 00 00 00 00 03 00 00 00 00 00 00 00 00 00  |................|
-000000B0  00 00 00 00 00 00 94                             |.......|
-000000b7
-com.apple.quarantine: 0081;58519ffa;Google Chrome.app;1F032CAB-F5A1-4D92-84EB-CBECA971B7BC
-```
-
-可以使用 `-d` 指令标志移除原数据属性:
-
-```
-$ xattr -d com.apple.metadata:kMDItemWhereFroms ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
-
-$ xattr -d com.apple.quarantine ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
-
-$ xattr -l ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
-[No output after removal.]
-```
-
-## 密码
-
-你可以使用 OpenSSL 生成强密码：
-
-    $ openssl rand -base64 30
-    LK9xkjUEAemc1gV2Ux5xqku+PDmMmCbSTmwfiMRI
-
-或者 GPG：
-
-    $ gpg --gen-random -a 0 30
-    4/bGZL+yUEe8fOqQhF5V01HpGwFSpUPwFcU3aOWQ
-
-或 `/dev/urandom` 输出：
-
-    $ dd if=/dev/urandom bs=1 count=30 2>/dev/null | base64
-    CbRGKASFI4eTa96NMrgyamj8dLZdFYBaqtWUSxKe
-
-还可以控制字符集：
-
-    $ LANG=C tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 40 | head -n 1
-    jm0iKn7ngQST8I0mMMCbbi6SKPcoUWwCb5lWEjxK
-
-    $ LANG=C tr -dc 'DrDuh0-9' < /dev/urandom | fold -w 40 | head -n 1
-    686672u2Dh7r754209uD312hhh23uD7u41h3875D
-
-你也可以用 **Keychain Access（钥匙串访问）**生成一个令人难忘的密码，或者用 [anders/pwgen](https://github.com/anders/pwgen) 这样的命令行生成。
-
-钥匙串使用 [PBKDF2 派生密钥](https://en.wikipedia.org/wiki/PBKDF2)加密，是个**非常安全**存储凭据的地方。看看 [Breaking into the OS X keychain](http://juusosalonen.com/post/30923743427/breaking-into-the-os-x-keychain)。还要注意钥匙串[不加密](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/118)的密码对应密码输入的名称。
-
-或者，可以自己用 GnuPG (基于 [drduh/pwd.sh](https://github.com/drduh/pwd.sh) 密码管理脚本的一个插件)管理一个加密的密码文件。
-
-除密码外，确保像 GitHub、 Google 账号、银行账户这些网上的账户，开启[两步验证](https://en.wikipedia.org/wiki/Two-factor_authentication)。
-
-看看 [Yubikey](https://www.yubico.com/products/yubikey-hardware/yubikey-neo/) 的两因素和私钥(如：ssh、gpg)硬件令牌。 阅读 [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide) 和 [trmm.net/Yubikey](https://trmm.net/Yubikey)。两个 Yubikey 的插槽之一可以通过编程来生成一个长的静态密码（例如可以与短的，记住的密码结合使用）。
-
-除了登录和其他 PAM 模块，也能用 Yubikey 来使你的登录和 sudo 更安全，这里有份来自[Yubico](https://www.yubico.com/wp-content/uploads/2016/02/Yubico_YubiKeyMacOSXLogin_en.pdf)的 pdf 文档。Yubikey 有点贵，这有个更便宜的替代品，但是没有它好，[U2F Zero](https://www.u2fzero.com/)。这有份文档来[启动它](https://microamps.gibsjose.com/u2f-authentication-on-os-x/)。
-
-## 备份
-
-备份到外部介质或在线服务之前，总是先对本地文件进行加密。
-
-一种方法是使用 GPG 对称加密，你选择一个密码。
-
-加密一个文件夹:
-
-    $ tar zcvf - ~/Downloads | gpg -c > ~/Desktop/backup-$(date +%F-%H%M).tar.gz.gpg
-
-解密文档:
-
-    $ gpg -o ~/Desktop/decrypted-backup.tar.gz -d ~/Desktop/backup-2015-01-01-0000.tar.gz.gpg && \
-      tar zxvf ~/Desktop/decrypted-backup.tar.gz
-
-你也可以用 **Disk Utility** 或 `hdiutil` 创建加密卷：
-
-    $ hdiutil create ~/Desktop/encrypted.dmg -encryption -size 1g -volname "Name" -fs JHFS+
-
-也可以考虑使用下面的应用和服务：[SpiderOak](https://spideroak.com/)、[Arq](https://www.arqbackup.com/)、[Espionage](https://www.espionageapp.com/) 和 [restic](https://restic.github.io/)。
-
-## Wi-Fi
-
-macOS 会记住它连接过的接入点。比如所有无线设备，每次搜寻网络的时候，Mac 将会显示所有它记住的接入点名称（如 *MyHomeNetwork*） ，比如每次从休眠状态唤醒设备的时候。
-
-这就有泄漏隐私的风险，所以当不再需要的时候最好从列表中移除这些连接过的网络， 在 **System Preferences** > **Network** > **Advanced** 。
-
-看看 [Signals from the Crowd: Uncovering Social Relationships through Smartphone Probes](http://conferences.sigcomm.org/imc/2013/papers/imc148-barberaSP106.pdf) (pdf) 和 [Wi-Fi told me everything about you](http://confiance-numerique.clermont-universite.fr/Slides/M-Cunche-2014.pdf) (pdf)。
-
-保存的 Wi-Fi 信息 (SSID、最后一次连接等)可以在 `/Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist` 中找到。
-
-你可能希望在连接到新的和不可信的无线网络之前[伪造网卡 MAC 地址](https://en.wikipedia.org/wiki/MAC_spoofing)，以减少被动特征探测：
-
-    $ sudo ifconfig en0 ether $(openssl rand -hex 6 | sed 's%\(..\)%\1:%g; s%.$%%')
-
-**注意**每次启动，MAC 地址将重置为硬件默认地址。
-
-了解下 [feross/SpoofMAC](https://github.com/feross/SpoofMAC).
-
-最后，WEP 保护在无线网络是[不安全](http://www.howtogeek.com/167783/htg-explains-the-difference-between-wep-wpa-and-wpa2-wireless-encryption-and-why-it-matters/)的，你应该尽量选择连接 **WPA2** 保护网络，可以减少被窃听的风险。
-
-## SSH
-
-对于向外的 ssh 连接，使用硬件或密码保护的秘钥，[设置](http://nerderati.com/2011/03/17/simplify-your-life-with-an-ssh-config-file/)远程 hosts 并考虑对它们进行[哈希](http://nms.csail.mit.edu/projects/ssh/)，以增强安全性。
-
-将这几个[配置项](https://www.freebsd.org/cgi/man.cgi?query=ssh_config&sektion=5)加到 `~/.ssh/config`:
-
-    Host *
-      PasswordAuthentication no
-      ChallengeResponseAuthentication no
-      HashKnownHosts yes
-
-**注意** [macOS Sierra 默认永久记住 SSH 秘钥密码](https://openradar.appspot.com/28394826)。添加配置 `UseKeyChain no` 来关闭这项功能。
-
-你也可以用 ssh 创建一个[加密隧道](http://blog.trackets.com/2014/05/17/ssh-tunnel-local-and-remote-port-forwarding-explained-with-examples.html)来发送数据，这有点类似于 VPN。
-
-例如，在一个远程主机上使用 Privoxy：
-
-    $ ssh -C -L 5555:127.0.0.1:8118 you@remote-host.tld
-
-    $ sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 5555
-
-    $ sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 5555
-
-或者使用 ssh 连接作为 [SOCKS 代理](https://www.mikeash.com/ssh_socks.html)：
-
-    $ ssh -NCD 3000 you@remote-host.tld
-
-默认情况下， macOS **没有** sshd ，也不允许**远程登陆**。
-
-启用 sshd 且允许进入的 ssh 连接：
-
-    $ sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist
-
-或者设置 **System Preferences** > **Sharing** 菜单。
-
-如果你准备使用 sshd，至少禁用密码身份验证并考虑进一步[强化](https://stribika.github.io/2015/01/04/secure-secure-shell.html)配置。
-
-找到 `/etc/sshd_config`，添加：
-
-```
-PasswordAuthentication no
-ChallengeResponseAuthentication no
-UsePAM no
-```
-
-确认 sshd 是否启用:
-
-    $ sudo lsof -Pni TCP:22
-
-## 物理访问
-
-时刻保证 Mac 物理安全。不要将 Mac 留在无人照看的酒店之类的地方。
-
-有一种攻击就是通过物理访问，通过注入引导 ROM 来安装键盘记录器，偷走你的密码。看看这个案例 [Thunderstrike](https://trmm.net/Thunderstrike)。
-
-有个工具 [usbkill](https://github.com/hephaest0s/usbkill) 可以帮助你，这是**"一个反监视断路开关，一旦发现 USB 端口发生改变就会关闭你的计算机"**。
-
-考虑购买屏幕[隐私过滤器](https://www.amazon.com/s/ref=nb_sb_noss_2?url=node%3D15782001&field-keywords=macbook)防止别人偷瞄。
-
-
-## 系统监控
-
-#### OpenBSM 监测
-
-macOS 具有强大的 OpenBSM 审计功能。你可以使用它来监视进程执行、网络活动等等。
-
-跟踪监测日志，使用 `praudit` 工具：
-
-```
-$ sudo praudit -l /dev/auditpipe
-header,201,11,execve(2),0,Thu Sep  1 12:00:00 2015, + 195 msec,exec arg,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,attribute,100755,root,wheel,16777220,986535,0,subject,drduh,root,wheel,root,wheel,412,100005,50511731,0.0.0.0,return,success,0,trailer,201,
-header,88,11,connect(2),0,Thu Sep  1 12:00:00 2015, + 238 msec,argument,1,0x5,fd,socket-inet,2,443,173.194.74.104,subject,drduh,root,wheel,root,wheel,326,100005,50331650,0.0.0.0,return,failure : Operation now in progress,4354967105,trailer,88
-header,111,11,OpenSSH login,0,Thu Sep  1 12:00:00 2015, + 16 msec,subject_ex,drduh,drduh,staff,drduh,staff,404,404,49271,::1,text,successful login drduh,return,success,0,trailer,111,
-```
-
-看看 `audit`、`praudit`、`audit_control` 的操作手册，其它文件在 `/etc/security`目录下。
-
-**注意**虽然 `audit 手册` 上说 `-s` 标签会立即同步到配置中，实际上需要重启才能生效。
-
-更多信息请看 [ilostmynotes.blogspot.com](http://ilostmynotes.blogspot.com/2013/10/openbsm-auditd-on-os-x-these-are-logs.html) 和 [derflounder.wordpress.com](https://derflounder.wordpress.com/2012/01/30/openbsm-auditing-on-mac-os-x/) 上的文章。
-
-#### DTrace
-
-`iosnoop` 监控磁盘 I/O
-
-`opensnoop` 监控文件打开
-
-`execsnoop` 监控进程执行
-
-`errinfo` 监控失败的系统调用
-
-`dtruss` 监控所有系统调用
-
-运行命令 `man -k dtrace` 去了解更多信息。
-
-**注意**[系统完整性保护](https://github.com/drduh/OS-X-Security-and-Privacy-Guide#system-integrity-protection)和 DTrace [冲突](http://internals.exposed/blog/dtrace-vs-sip.html)，所以这些工具可能用不上了。
-
-#### 运行
-
-`ps -ef` 列出所有正在运行的进程。
-
-你也可以通过**活动监视器**来查看进程。
-
-`launchctl list` 和 `sudo launchctl list` 分别列出用户运行和加载的程序、系统启动守护程序和代理。
-
-#### 网络
-
-列出公开网络文件：
-
-    $ sudo lsof -Pni
-
-列出各种网络相关的数据结构的内容：
-
-    $ sudo netstat -atln
-
-你也可以通过命令行使用 [Wireshark](https://www.wireshark.org/)。
-
-监控 DNS 查询和响应：
-
-```
-$ tshark -Y "dns.flags.response == 1" -Tfields \
-  -e frame.time_delta \
-  -e dns.qry.name \
-  -e dns.a \
-  -Eseparator=,
-```
-
-监控 HTTP 请求和响应：
-
-```
-$ tshark -Y "http.request or http.response" -Tfields \
-  -e ip.dst \
-  -e http.request.full_uri \
-  -e http.request.method \
-  -e http.response.code \
-  -e http.response.phrase \
-  -Eseparator=/s
-```
-
-监控 x509 证书：
-
-```
-$ tshark -Y "ssl.handshake.certificate" -Tfields \
-  -e ip.src \
-  -e x509sat.uTF8String \
-  -e x509sat.printableString \
-  -e x509sat.universalString \
-  -e x509sat.IA5String \
-  -e x509sat.teletexString \
-  -Eseparator=/s -Equote=d
-```
-
-也可以考虑简单的网络监控程序 [BonzaiThePenguin/Loading](https://github.com/BonzaiThePenguin/Loading)。
-
-## 二进制白名单
-
-[google/santa](https://github.com/google/santa/) 是一款为 Google 公司 Macintosh 团队开发的一款安全软件，而且是开源的。
-
-> Santa 是 macOS 上一个二进制白名单/黑名单系统。它由多个部分组成，一个是监控执行程序的内核扩展，基于 SQLite 数据库内容进行执行决策的用户级守护进程，决定拦截的情况下通知用户的一个 GUI 代理，以及用于管理系统和数据库同步服务的命令行实用程序。
-
-Santa 使用[内核授权 API](https://developer.apple.com/library/content/technotes/tn2127/_index.html) 来监视和允许/禁止在内核中执行二进制文件。二进制文件可以是经过唯一哈希或开发者证书签名的白/黑名单。Santa 可以用来只允许执行可信代码，或者阻止黑名单中已知恶意软件在 Mac 上运行，和 Windows 软件 Bit9 类似。
-
-**注意** Santa 目前还没有管理规则的用户图形界面。下面的教程是为高级用户准备的！
-
-安装 Santa，先访问[发布](https://github.com/google/santa/releases)页面，下载最新的磁盘镜像，挂载然后安装相关软件包：
-
-```
-$ hdiutil mount ~/Downloads/santa-0.9.14.dmg
-
-$ sudo installer -pkg /Volumes/santa-0.9.14/santa-0.9.14.pkg -tgt /
-```
-
-Santa 默认安装为 "Monitor" 模式 (不拦截，只记录)，有两个规则：一条是为了 Apple 二进制，另一条是为了 Santa 软件本身。
-
-验证 Santa 是否在运行，内核模块是否加载：
-
-```
-$ santactl status
->>> Daemon Info
-  Mode                   | Monitor
-  File Logging           | No
-  Watchdog CPU Events    | 0  (Peak: 0.00%)
-  Watchdog RAM Events    | 0  (Peak: 0.00MB)
->>> Kernel Info
-  Kernel cache count     | 0
->>> Database Info
-  Binary Rules           | 0
-  Certificate Rules      | 2
-  Events Pending Upload  | 0
-
-$ ps -ef | grep "[s]anta"
-    0   786     1   0 10:01AM ??         0:00.39 /Library/Extensions/santa-driver.kext/Contents/MacOS/santad --syslog
-
-$ kextstat | grep santa
-  119    0 0xffffff7f822ff000 0x6000     0x6000     com.google.santa-driver (0.9.14) 693D8E4D-3161-30E0-B83D-66A273CAE026 <5 4 3 1>
-```
-
-创建一个黑名单规则来阻止 iTunes 运行：
-
-    $ sudo santactl rule --blacklist --path /Applications/iTunes.app/
-    Added rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3.
-
-试试打开 iTunes ，它会被阻止运行。
-
-    $ open /Applications/iTunes.app/
-    LSOpenURLsWithRole() failed with error -10810 for the file /Applications/iTunes.app.
-
-<img width="450" alt="Santa block dialog when attempting to run a blacklisted program" src="https://cloud.githubusercontent.com/assets/12475110/21062284/14ddde88-be1e-11e6-8e9b-32f8a44c0cf6.png">
-
-移除规则：
-
-    $ sudo santactl rule --remove --path /Applications/iTunes.app/
-    Removed rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3.
-
-打开 iTunes：
-
-    $ open /Applications/iTunes.app/
-    [iTunes will open successfully]
-
-创建一个新的 C 语言小程序：
-
-```
-$ cat <<EOF > foo.c
-> #include <stdio.h>
-> main() { printf("Hello World\n”); }
-> EOF
-```
-
-用 GCC 编译该程序（需要安装 Xcode 或者命令行工具）：
-
-```
-$ gcc -o foo foo.c
-
-$ file foo
-foo: Mach-O 64-bit executable x86_64
-
-$ codesign -d foo
-foo: code object is not signed at all
-```
-
-运行它：
-
-```
-$ ./foo
-Hello World
-```
-
-将 Santa 切换为 “Lockdown” 模式，这种情况下只允许白名单内二进制程序运行：
-
-    $ sudo defaults write /var/db/santa/config.plist ClientMode -int 2
-
-试试运行未签名的二进制：
-
-```
-$ ./foo
-bash: ./foo: Operation not permitted
-
-Santa
-
-The following application has been blocked from executing
-because its trustworthiness cannot be determined.
-
-Path:       /Users/demouser/foo
-Identifier: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-Parent:     bash (701)
-```
-想要在白名单中添加一个指定的二进制，确定其 SHA-256 值：
-
-```
-$ santactl fileinfo /Users/demouser/foo
-Path                 : /Users/demouser/foo
-SHA-256              : 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-SHA-1                : 4506f3a8c0a5abe4cacb98e6267549a4d8734d82
-Type                 : Executable (x86-64)
-Code-signed          : No
-Rule                 : Blacklisted (Unknown)
-```
-
-增加一条白名单规则：
-
-    $ sudo santactl rule --whitelist --sha256 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-    Added rule for SHA-256: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed.
-
-运行它：
-
-```
-$ ./foo
-Hello World
-```
-
-小程序没有被阻止，它成功的运行了。
-
-应用程序也可以通过开发者签名来加到白名单中（这样每次更新应用程序的时候，新版本的二进制文件就不用手动加到白名单中了）。例如，下载运行 Google Chrome ，  在 "Lockdown" 模式下 Santa 会阻止它运行：
-
-```
-$ curl -sO https://dl.google.com/chrome/mac/stable/GGRO/googlechrome.dmg
-
-$ hdiutil mount googlechrome.dmg
-
-$ cp -r /Volumes/Google\ Chrome/Google\ Chrome.app /Applications/
-
-$ open /Applications/Google\ Chrome.app/
-LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Google Chrome.app.
-```
-
-通过它自己的开发者签名将应用加到白名单中（Signing Chain 中第一项）：
-
-```
-$ santactl fileinfo /Applications/Google\ Chrome.app/
-Path                 : /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
-SHA-256              : 0eb08224d427fb1d87d2276d911bbb6c4326ec9f74448a4d9a3cfce0c3413810
-SHA-1                : 9213cbc7dfaaf7580f3936a915faa56d40479f6a
-Bundle Name          : Google Chrome
-Bundle Version       : 2883.87
-Bundle Version Str   : 55.0.2883.87
-Type                 : Executable (x86-64)
-Code-signed          : Yes
-Rule                 : Blacklisted (Unknown)
-Signing Chain:
-     1. SHA-256             : 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153
-        SHA-1               : 85cee8254216185620ddc8851c7a9fc4dfe120ef
-        Common Name         : Developer ID Application: Google Inc.
-        Organization        : Google Inc.
-        Organizational Unit : EQHXZ8M8AV
-        Valid From          : 2012/04/26 07:10:10 -0700
-        Valid Until         : 2017/04/27 07:10:10 -0700
-
-     2. SHA-256             : 7afc9d01a62f03a2de9637936d4afe68090d2de18d03f29c88cfb0b1ba63587f
-        SHA-1               : 3b166c3b7dc4b751c9fe2afab9135641e388e186
-        Common Name         : Developer ID Certification Authority
-        Organization        : Apple Inc.
-        Organizational Unit : Apple Certification Authority
-        Valid From          : 2012/02/01 14:12:15 -0800
-        Valid Until         : 2027/02/01 14:12:15 -0800
-
-     3. SHA-256             : b0b1730ecbc7ff4505142c49f1295e6eda6bcaed7e2c68c5be91b5a11001f024
-        SHA-1               : 611e5b662c593a08ff58d14ae22452d198df6c60
-        Common Name         : Apple Root CA
-        Organization        : Apple Inc.
-        Organizational Unit : Apple Certification Authority
-        Valid From          : 2006/04/25 14:40:36 -0700
-        Valid Until         : 2035/02/09 13:40:36 -0800
-```
-
-这个例子中， `15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153` 是 Google’s Apple 开发者证书的 SHA-256 (team ID EQHXZ8M8AV)。 将它加到白名单中：
-
-```
-$ sudo santactl rule --whitelist --certificate --sha256 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153
-Added rule for SHA-256: 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153.
-```
-
-Google Chrome 现在应该可以启动了，以后的更新也不会被阻止，除非签名证书修改了或过期了。
-
-关闭 “Lockdown” 模式：
-
-    $ sudo defaults delete /var/db/santa/config.plist ClientMode
-
-在 `/var/log/santa.log` 可以查看监控器**允许**和**拒绝**执行的决策记录。
-
-[Zentral](https://github.com/zentralopensource/zentral)里有针对 Santa 的一个日志和配置框架，Zentral 是一个开源的事件监控框架和针对osquery 和 Santa 的 TLS 服务器。
-
-Zentral 会在监控和锁定模式支持 Santa。客户端需要建立一个 TLS 连接来同步 Santa 规则。所有来自终端的 Santa 事件会汇总并记录在 Zentral 里。Santa 事件能从 Zentral 框架内部触发行为和通知。
-
-**注意** Python、Bash 和其它解释性语言是在白名单中的（因为它们是由苹果开发者证书签名的），所以 Santa 不会阻止这些脚本的运行。因此，要注意到 Santa 可能无法有效的拦截非二进制程序运行（这不算漏洞，因为它本身就这么设计的）。
-
-## 其它
-
-如果你想的话，禁用[诊断与用量](https://github.com/fix-macosx/fix-macosx/wiki/Diagnostics-&-Usage-Data).
-
-如果你想播放**音乐**或看**视频**，使用 [VLC 播放器](https://www.videolan.org/vlc/index.html)，这是免费且开源的。
-
-如果你想用 **torrents**， 使用免费、开源的 [Transmission](http://www.transmissionbt.com/download/)（注意：所有软件都一样，即使是开源项目，[恶意软件还是可能找到破解的方式](http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/)）。你可能希望使用一个块列表来避免和那些已知的坏主机配对，了解下 [Transmission 上最好的块列表](https://giuliomac.wordpress.com/2014/02/19/best-blocklist-for-transmission/) 和 [johntyree/3331662](https://gist.github.com/johntyree/3331662)。
-
-用 [duti](http://duti.org/) 管理默认文件处理，可以通过 `brew install duti` 来安装。管理扩展的原因之一是为了防止远程文件系统在 Finder 中自动挂载。 ([保护自己免受 Sparkle 后门影响](https://www.taoeffect.com/blog/2016/02/apologies-sky-kinda-falling-protecting-yourself-from-sparklegate/))。这里有几个推荐的管理指令：
-
-```
-$ duti -s com.apple.Safari afp
-
-$ duti -s com.apple.Safari ftp
-
-$ duti -s com.apple.Safari nfs
-
-$ duti -s com.apple.Safari smb
-```
-
-使用**控制台**应用程序来监控系统日志，也可以用 `syslog -w` 或 `log stream` 命令。
-
-在 macOS Sierra (10.12) 之前的系统，在 `/etc/sudoers`启用 [tty_tickets flag](https://derflounder.wordpress.com/2016/09/21/tty_tickets-option-now-on-by-default-for-macos-sierras-sudo-tool/) 来阻止 sudo 会话在其它终端生效。使用命令 `sudo visudo` 然后添加一行 `Defaults    tty_tickets` 就可以了。
-
-设置进入休眠状态时马上启动屏幕保护程序：
-
-    $ defaults write com.apple.screensaver askForPassword -int 1
-
-    $ defaults write com.apple.screensaver askForPasswordDelay -int 0
-
-在 Finder 中显示隐藏文件和文件夹：
-
-    $ defaults write com.apple.finder AppleShowAllFiles -bool true
-
-    $ chflags nohidden ~/Library
-
-显示所有文件扩展名（这样 "Evil.jpg.app" 就无法轻易伪装了）。
-
-    $ defaults write NSGlobalDomain AppleShowAllExtensions -bool true
-
-不要默认将文档保存到 iCloud：
-
-    $ defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
-
-在终端启用[安全键盘输入](https://security.stackexchange.com/questions/47749/how-secure-is-secure-keyboard-entry-in-mac-os-xs-terminal)（除非你用 [YubiKey](https://mig5.net/content/secure-keyboard-entry-os-x-blocks-interaction-yubikeys) 或者像 [TextExpander](https://smilesoftware.com/textexpander/secureinput) 这样的程序）。
-
-禁用崩溃报告（就是那个在程序崩溃后，会出现提示将问题报告给苹果的提示框）：
-
-    $ defaults write com.apple.CrashReporter DialogType none
-
-禁用 Bonjour [多播广告](https://www.trustwave.com/Resources/SpiderLabs-Blog/mDNS---Telling-the-world-about-you-(and-your-device)/):
-
-    $ sudo defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool YES
-
-如果用不上的话，[禁用 Handoff](https://apple.stackexchange.com/questions/151481/why-is-my-macbook-visibile-on-bluetooth-after-yosemite-install) 和蓝牙功能。
-
-考虑 [sandboxing](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/sandbox-exec.1.html) 你的应用程序。 了解下 [fG! Sandbox Guide](https://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v0.1.pdf) (pdf) 和 [s7ephen/OSX-Sandbox--Seatbelt--Profiles](https://github.com/s7ephen/OSX-Sandbox--Seatbelt--Profiles)。
-
-你知道苹果公司自 [2006](http://osxbook.com/book/bonus/chapter10/tpm/) 后就不再出售带 TPM 的电脑了吗？
-
-## 相关软件
-
-[Santa](https://github.com/google/santa/) - macOS 上一个带二进制白名单/黑名单监控系统的软件。
-
-[kristovatlas/osx-config-check](https://github.com/kristovatlas/osx-config-check) - 检查你的 OSX 设备各种硬件配置设置。
-
-[Lockdown](https://objective-see.com/products/lockdown.html) - 审查和修正安全配置。
-
-[Dylib Hijack Scanner](https://objective-see.com/products/dhs.html) - 扫描那些容易被劫持或已经被黑的应用。
-
-[Little Flocker](https://www.littleflocker.com/) - "Little Snitch for files"， 防止应用程序访问文件。
-
-[facebook/osquery](https://github.com/facebook/osquery) - 可以检索系统底层信息。用户可以编写 SQL 来查询系统信息。
-
-[google/grr](https://github.com/google/grr) - 事件响应框架侧重于远程现场取证。
-
-[yelp/osxcollector](https://github.com/yelp/osxcollector) - 证据收集 & OS X 分析工具包。
-
-[jipegit/OSXAuditor](https://github.com/jipegit/OSXAuditor) - 分析运行系统时的部件，比如隔离的文件， Safari、 Chrome 和 Firefox 历史记录， 下载，HTML5 数据库和本地存储、社交媒体、电子邮件帐户、和 Wi-Fi 接入点的名称。
-
-[libyal/libfvde](https://github.com/libyal/libfvde) - 访问 FileVault Drive Encryption (FVDE) (或 FileVault2) 加密卷的库。
-
-[CISOfy/lynis](https://github.com/CISOfy/lynis) - 跨平台安全审计工具，并协助合规性测试和系统强化。
-
-[Zentral](https://github.com/zentralopensource/zentral)- 一个针对 santa 和 osquery 的日志和配置框架。在盘点、事件
-日志文件，结合时点的提醒上运行排查和探测。一个完整的框架和 Django web 服务器搭建在 elastic stack（通常叫 ELK stack）基础上。
-
-## 其它资源
-
-**排名不分先后**
-
-[MacOS Hardening Guide - Appendix of \*OS Internals: Volume III - Security & Insecurity Internals](http://newosxbook.com/files/moxii3/AppendixA.pdf) (pdf)
-
-[Mac Developer Library: Secure Coding Guide](https://developer.apple.com/library/mac/documentation/Security/Conceptual/SecureCodingGuide/Introduction.html)
-
-[OS X Core Technologies Overview White Paper](https://www.apple.com/osx/all-features/pdf/osx_elcapitan_core_technologies_overview.pdf) (pdf)
-
-[Reverse Engineering Mac OS X blog](https://reverse.put.as/)
-
-[Reverse Engineering Resources](http://samdmarshall.com/re.html)
-
-[Patrick Wardle's Objective-See blog](https://objective-see.com/blog.html)
-
-[Managing Macs at Google Scale (LISA '13)](https://www.usenix.org/conference/lisa13/managing-macs-google-scale)
-
-[OS X Hardening: Securing a Large Global Mac Fleet (LISA '13)](https://www.usenix.org/conference/lisa13/os-x-hardening-securing-large-global-mac-fleet)
-
-[DoD Security Technical Implementation Guides for Mac OS](http://iase.disa.mil/stigs/os/mac/Pages/mac-os.aspx)
-
-[The EFI boot process](http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/efi-boot-process.html)
-
-[The Intel Mac boot process](http://refit.sourceforge.net/info/boot_process.html)
-
-[Userland Persistence on Mac OS X](https://archive.org/details/joshpitts_shmoocon2015)
-
-[Developing Mac OSX kernel rootkits](http://phrack.org/issues/66/16.html#article)
-
-[IOKit kernel code execution exploit](https://code.google.com/p/google-security-research/issues/detail?id=135)
-
-[Hidden backdoor API to root privileges in Apple OS X](https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/)
-
-[IPv6 Hardening Guide for OS X](http://www.insinuator.net/2015/02/ipv6-hardening-guide-for-os-x/)
-
-[Harden the World: Mac OSX 10.11 El Capitan](http://docs.hardentheworld.org/OS/OSX_10.11_El_Capitan/)
-
-[Hacker News discussion](https://news.ycombinator.com/item?id=10148077)
-
-[Hacker News discussion 2](https://news.ycombinator.com/item?id=13023823)
-
-[Apple Open Source](https://opensource.apple.com/)
-
-[OS X 10.10 Yosemite: The Ars Technica Review](http://arstechnica.com/apple/2014/10/os-x-10-10/)
-
-[CIS Apple OSX 10.10 Benchmark](https://benchmarks.cisecurity.org/tools2/osx/CIS_Apple_OSX_10.10_Benchmark_v1.1.0.pdf) (pdf)
-
-[How to Switch to the Mac](https://taoofmac.com/space/HOWTO/Switch)
-
-[Security Configuration For Mac OS X Version 10.6 Snow Leopard](http://www.apple.com/support/security/guides/docs/SnowLeopard_Security_Config_v10.6.pdf) (pdf)
-
-[EFF Surveillance Self-Defense Guide](https://ssd.eff.org/)
-
-[MacAdmins on Slack](https://macadmins.herokuapp.com/)
-
-[iCloud security and privacy overview](http://support.apple.com/kb/HT4865)
-
-[Demystifying the DMG File Format](http://newosxbook.com/DMG.html)
-
-[There's a lot of vulnerable OS X applications out there (Sparkle Framework RCE)](https://vulnsec.com/2016/osx-apps-vulnerabilities/)
-
-[iSeeYou: Disabling the MacBook Webcam Indicator LED](https://jscholarship.library.jhu.edu/handle/1774.2/36569)
-
-[Mac OS X Forensics - Technical Report](https://www.ma.rhul.ac.uk/static/techrep/2015/RHUL-MA-2015-8.pdf) (pdf)
-
-[Mac Forensics: Mac OS X and the HFS+ File System](https://cet4861.pbworks.com/w/file/fetch/71245694/mac.forensics.craiger-burke.IFIP.06.pdf) (pdf)
-
-[Extracting FileVault 2 Keys with Volatility](https://tribalchicken.com.au/security/extracting-filevault-2-keys-with-volatility/)
-
-[Auditing and Exploiting Apple IPC](https://googleprojectzero.blogspot.com/2015/09/revisiting-apple-ipc-1-distributed_28.html)
-
-[Mac OS X and iOS Internals: To the Apple's Core by Jonathan Levin](https://www.amazon.com/Mac-OS-iOS-Internals-Apples/dp/1118057651)
-
-[Demystifying the i-Device NVMe NAND (New storage used by Apple)](http://ramtin-amin.fr/#nvmepcie)
diff --git a/README.md b/README.md
old mode 100755
new mode 100644
index fa40433b..754334f5
--- a/README.md
+++ b/README.md
@@ -1,507 +1,313 @@
-This is a collection of thoughts on securing a modern Apple Mac computer using macOS (formerly *OS X*) 10.12 "Sierra", as well as steps to improving online privacy.
+This guide is a collection of techniques for improving the security and privacy of [Apple silicon](https://support.apple.com/116943) Mac computers running a [currently supported](https://support.apple.com/HT201222) version of macOS. **Using Macs with Intel CPUs leaves you open to [security vulnerabilities](https://github.com/axi0mX/ipwndfu?tab%253Dreadme-ov-file#checkm8) on the hardware level that Apple can't patch**. Apple silicon Macs are the minimum recommendation but as a general rule, newer chips are always more secure.
 
-This guide is targeted to “power users” who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac.
+This guide is targeted to power users who wish to adopt enterprise-standard security, but is also suitable for novice users with an interest in improving their privacy and security on a Mac.
 
-A system is only as secure as its administrator is capable of making it. There is no one single technology, software, nor technique to guarantee perfect computer security; a modern operating system and computer is very complex, and requires numerous incremental changes to meaningfully improve one's security and privacy posture.
+If you're securing computers for an organization, use the [official NIST guidelines for macOS](https://github.com/usnistgov/macos_security).
 
-I am **not** responsible if you break a Mac by following any of these steps.
+A system is only as secure as its administrator is capable of making it. There is no one single technology, software, nor technique to guarantee perfect computer security; a modern operating system and computer is very complex, and requires numerous incremental changes to meaningfully improve one's security and privacy posture.
 
-If you wish to make a correction or improvement, please send a pull request or [open an issue](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues).
+This guide is provided on an 'as is' basis without any warranties of any kind. Only **you** are responsible if you break anything or get in any sort of trouble by following this guide.
 
-This guide is also available in [简体中文](https://github.com/xitu/macOS-Security-and-Privacy-Guide/blob/master/README-cn.md).
+To suggest an improvement, send a pull request or [open an issue](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues).
 
 - [Basics](#basics)
-- [Firmware](#firmware)
-- [Preparing and Installing macOS](#preparing-and-installing-macos)
-    - [Virtualization](#virtualization)
+- [Threat modeling](#threat-modeling)
+   * [Identify assets](#identify-assets)
+   * [Identify adversaries](#identify-adversaries)
+   * [Identify capabilities](#identify-capabilities)
+   * [Identify mitigations](#identify-mitigations)
+- [Hardware](#hardware)
+- [Installing macOS](#installing-macos)
+   * [System activation](#system-activation)
+   * [Apple Account](#apple-account)
+   * [App Store](#app-store)
+   * [Virtualization](#virtualization)
 - [First boot](#first-boot)
-- [Admin and standard user accounts](#admin-and-standard-user-accounts)
-- [Full disk encryption](#full-disk-encryption)
+- [Admin and user accounts](#admin-and-user-accounts)
+   * [Caveats](#caveats)
+   * [Setup](#setup)
+- [Firmware](#firmware)
+- [FileVault](#filevault)
+- [Lockdown Mode](#lockdown-mode)
 - [Firewall](#firewall)
-    - [Application layer firewall](#application-layer-firewall)
-    - [Third party firewalls](#third-party-firewalls)
-    - [Kernel level packet filtering](#kernel-level-packet-filtering)
+   * [Application layer firewall](#application-layer-firewall)
+   * [Third party firewalls](#third-party-firewalls)
+   * [Kernel level packet filtering](#kernel-level-packet-filtering)
 - [Services](#services)
-- [Spotlight Suggestions](#spotlight-suggestions)
+- [Siri Suggestions and Spotlight](#siri-suggestions-and-spotlight)
 - [Homebrew](#homebrew)
 - [DNS](#dns)
-    - [Hosts file](#hosts-file)
-    - [Dnsmasq](#dnsmasq)
-      - [Test DNSSEC validation](#test-dnssec-validation)
-    - [DNSCrypt](#dnscrypt)
-- [Captive portal](#captive-portal)
+   * [DNS profiles](#dns-profiles)
+   * [Hosts file](#hosts-file)
+   * [DNSCrypt](#dnscrypt)
+   * [Dnsmasq](#dnsmasq)
 - [Certificate authorities](#certificate-authorities)
-- [OpenSSL](#openssl)
-- [Curl](#curl)
-- [Web](#web)
-    - [Privoxy](#privoxy)
-    - [Browser](#browser)
-    - [Plugins](#plugins)
-- [PGP/GPG](#pgpgpg)
-- [OTR](#otr)
+- [Privoxy](#privoxy)
+- [Browser](#browser)
+   * [Firefox](#firefox)
+   * [Chrome](#chrome)
+   * [Safari](#safari)
+   * [Other browsers](#other-browsers)
+   * [Web browser privacy](#web-browser-privacy)
 - [Tor](#tor)
 - [VPN](#vpn)
+- [PGP/GPG](#pgpgpg)
+- [Messengers](#messengers)
+   * [XMPP](#xmpp)
+   * [Signal](#signal)
+   * [iMessage](#imessage)
 - [Viruses and malware](#viruses-and-malware)
+   * [Downloading Software](#downloading-software)
+   * [App Sandbox](#app-sandbox)
+   * [Hardened Runtime](#hardened-runtime)
+   * [Antivirus](#antivirus)
+   * [Gatekeeper](#gatekeeper)
 - [System Integrity Protection](#system-integrity-protection)
-- [Gatekeeper and XProtect](#gatekeeper-and-xprotect)
+- [Metadata and artifacts](#metadata-and-artifacts)
 - [Passwords](#passwords)
 - [Backup](#backup)
 - [Wi-Fi](#wi-fi)
 - [SSH](#ssh)
 - [Physical access](#physical-access)
 - [System monitoring](#system-monitoring)
-    - [OpenBSM audit](#openbsm-audit)
-    - [DTrace](#dtrace)
-    - [Execution](#execution)
-    - [Network](#network)
-- [Binary Whitelisting](#binary-whitelisting)
+   * [OpenBSM audit](#openbsm-audit)
+   * [DTrace](#dtrace)
+   * [Execution](#execution)
+   * [Network](#network)
 - [Miscellaneous](#miscellaneous)
 - [Related software](#related-software)
 - [Additional resources](#additional-resources)
 
-## Basics
-
-The standard best security practices apply:
-
-* Create a threat model
-	* What are you trying to protect and from whom? Is your adversary a [three letter agency](https://theintercept.com/document/2015/03/10/strawhorse-attacking-macos-ios-software-development-kit/) (if so, you may want to consider using [OpenBSD](http://www.openbsd.org/) instead), a nosy eavesdropper on the network, or determined [apt](https://en.wikipedia.org/wiki/Advanced_persistent_threat) orchestrating a campaign against you?
-	* Study and [recognize threats](https://www.usenix.org/system/files/1401_08-12_mickens.pdf) and how to reduce attack surface against them.
-
-* Keep the system up to date
-	* Patch, patch, patch your system and software.
-	* macOS system updates can be completed using the App Store application, or the `softwareupdate` command-line utility - neither requires registering an Apple account.
-	* Subscribe to announcement mailing lists (e.g., [Apple security-announce](https://lists.apple.com/mailman/listinfo/security-announce)) for programs you use often.
-
-* Encrypt sensitive data
-	* In addition to full disk encryption, create one or many encrypted containers to store passwords, keys, personal documents, and other data at rest.
-	* This will mitigate damage in case of compromise and data exfiltration.
-
-* Frequent backups
-	* Create [regular backups](https://www.amazon.com/o/ASIN/0596102461/backupcentral) of your data and be ready to reimage in case of compromise.
-	* Always encrypt before copying backups to external media or the "cloud".
-	* Verify backups work by testing them regularly, for example by accessing certain files or performing a hash based comparison.
-
-* Click carefully
-	* Ultimately, the security of a system can be reduced to its administrator.
-	* Care should be taken when installing new software. Always prefer [free](https://www.gnu.org/philosophy/free-sw.en.html) and open source software ([which macOS is not](https://superuser.com/questions/19492/is-mac-os-x-open-source)).
-
-## Firmware
-
-Setting a firmware password prevents your Mac from starting up from any device other than your startup disk. It may also be set to be required on each boot.
-
-This feature [can be helpful if your laptop is lost or stolen](https://www.ftc.gov/news-events/blogs/techftc/2015/08/virtues-strong-enduser-device-controls), protects against Direct Memory Access (DMA) attacks which can read your FileVault passwords and inject kernel modules such as [pcileech](https://github.com/ufrisk/pcileech), as the only way to reset the firmware password is through an Apple Store, or by using an [SPI programmer](https://reverse.put.as/2016/06/25/apple-efi-firmware-passwords-and-the-scbo-myth/), such as [Bus Pirate](http://ho.ax/posts/2012/06/unbricking-a-macbook/) or other flash IC programmer.
-
-1. Start up pressing `Command` `R` keys to boot to [Recovery Mode](https://support.apple.com/en-au/HT201314) mode.
-
-3. When the Recovery window appears, choose **Firmware Password Utility** from the Utilities menu.
-
-4. In the Firmware Utility window that appears, select **Turn On Firmware Password**.
-
-5. Enter a new password, then enter the same password in the **Verify** field.
-
-6. Select **Set Password**.
-
-7. Select **Quit Firmware Utility** to close the Firmware Password Utility.
-
-8. Select the Apple menu and choose Restart or Shutdown.
-
-The firmware password will activate at next boot. To validate the password, hold `Alt` during boot - you should be prompted to enter the password.
-
-The firmware password can also be managed with the `firmwarepasswd` utility while booted into the OS. For example, to prompt for the firmware password when attempting to boot from a different volume:
-
-    $ sudo firmwarepasswd -setpasswd -setmode command
-
-Enter a password and reboot.
-
-<img width="750" alt="Using a Dediprog SF600 to dump and flash a 2013 MacBook SPI Flash chip to remove a firmware password, sans Apple" src="https://cloud.githubusercontent.com/assets/12475110/17075918/0f851c0c-50e7-11e6-904d-0b56cf0080c1.png">
-
-*Using a [Dediprog SF600](http://www.dediprog.com/pd/spi-flash-solution/sf600) to dump and flash a 2013 MacBook SPI Flash chip to remove a firmware password, sans Apple*
-
-See [HT204455](https://support.apple.com/en-au/HT204455), [LongSoft/UEFITool](https://github.com/LongSoft/UEFITool) and [chipsec/chipsec](https://github.com/chipsec/chipsec) for more information.
-
-## Preparing and Installing macOS
+# Basics
 
-There are several ways to install a fresh copy of macOS.
+General security best practices apply:
 
-The simplest way is to boot into [Recovery Mode](https://support.apple.com/en-us/HT201314) by holding `Command` `R` keys at boot. A system image can be downloaded and applied directly from Apple. However, this way exposes the serial number and other identifying information over the network in plaintext.
+- Create a [threat model](#threat-modeling)
+  * What are you trying to protect and from whom? Is the adversary a three letter agency, a nosy eavesdropper on the network, or a determined [APT](https://en.wikipedia.org/wiki/Advanced_persistent_threat) orchestrating a campaign against you?
+  * Recognize threats and how to reduce attack surface against them.
 
-<img width="500" alt="PII is transmitted to Apple in plaintext when using macOS Recovery" src="https://cloud.githubusercontent.com/assets/12475110/20312189/8987c958-ab20-11e6-90fa-7fd7c8c1169e.png">
+- Keep the system and software up to date
+  * Patch the operating system and all installed software regularly.
+  * macOS system updates can be completed in the [settings](https://support.apple.com/guide/mac-help/keep-your-mac-up-to-date-mchlpx1065) and set to automatically install. You can also use the `softwareupdate` command-line utility - neither requires registering an Apple account.
+  * Subscribe to announcement mailing lists like [Apple security-announce](https://lists.apple.com/mailman/listinfo/security-announce).
 
-*Packet capture of an unencrypted HTTP conversation during macOS recovery*
+- Encrypt sensitive data
+  * In addition to [FileVault](https://support.apple.com/guide/mac-help/protect-data-on-your-mac-with-filevault-mh11785) volume encryption, consider using the [built-in password manager](https://support.apple.com/105115) to protect passwords and other sensitive data.
 
-Another way is to download **macOS Sierra** from the [App Store](https://itunes.apple.com/us/app/macos-sierra/id1127487414) or some other place and create a custom, installable system image.
+- Assure data availability
+  * Create [regular backups](https://support.apple.com/104984) of critical data and be ready to [restore from a backup](https://support.apple.com/102551) in case of compromise.
+  * [Encrypt locally](https://support.apple.com/guide/mac-help/keep-your-time-machine-backup-disk-secure-mh21241) before copying backups to unencrypted external media or the "cloud"; alternatively, enable [end-to-end encryption](https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f).
+  * Verify backups by accessing them regularly.
 
-The macOS Sierra installer application is [code signed](https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-SW6), which should be verified to make sure you received a legitimate copy, using the `codesign` command:
+- Click carefully
+  * Ultimately, the security of a system depends on the capabilities of its administrator.
+  * Care should be taken when installing new software; only install from official sources that the developers indicate on their official website/github/etc.
 
-```
-$ codesign -dvv /Applications/Install\ macOS\ Sierra.app
-Executable=/Applications/Install macOS Sierra.app/Contents/MacOS/InstallAssistant
-Identifier=com.apple.InstallAssistant.Sierra
-Format=app bundle with Mach-O thin (x86_64)
-CodeDirectory v=20200 size=297 flags=0x200(kill) hashes=5+5 location=embedded
-Signature size=4167
-Authority=Apple Mac OS Application Signing
-Authority=Apple Worldwide Developer Relations Certification Authority
-Authority=Apple Root CA
-Info.plist entries=30
-TeamIdentifier=K36BKF7T3D
-Sealed Resources version=2 rules=7 files=137
-Internal requirements count=1 size=124
-```
-
-macOS installers can be made with the `createinstallmedia` utility included in `Install macOS Sierra.app/Contents/Resources/`. See [Create a bootable installer for macOS](https://support.apple.com/en-us/HT201372), or run the utility without arguments to see how it works.
-
-**Note** Apple's installer [does not appear to work](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/120) across OS versions. If you want to build a 10.12 image, for example, the following steps must be run on a 10.12 machine!
-
-To create a **bootable USB macOS installer**, mount a USB drive, and erase and partition it, then use the `createinstallmedia` utility:
-
-```
-$ diskutil list
-[Find disk matching correct size, usually "disk2"]
-
-$ diskutil unmountDisk /dev/disk2
-
-$ diskutil partitionDisk /dev/disk2 1 JHFS+ Installer 100%
-
-$ cd /Applications/Install\ macOS\ Sierra.app
-
-$ sudo ./Contents/Resources/createinstallmedia --volume /Volumes/Installer --applicationpath /Applications/Install\ macOS\ Sierra.app --nointeraction
-Erasing Disk: 0%... 10%... 20%... 30%... 100%...
-Copying installer files to disk...
-Copy complete.
-Making disk bootable...
-Copying boot files...
-Copy complete.
-Done.
-```
-
-To create a custom, installable image which can be [restored](https://en.wikipedia.org/wiki/Apple_Software_Restore) to a Mac, you will need to find the file `InstallESD.dmg`, which is also inside `Install macOS Sierra.app`.
+# Threat modeling
 
-With Finder, right click on the app, select **Show Package Contents** and navigate to **Contents** > **SharedSupport** to find the file `InstallESD.dmg`.
+The first and most important step for security and privacy is to create a [threat model](https://owasp.org/www-community/Threat_Modeling). You need to understand your adversaries in order to defend against them. Each person will have their own needs so everyone's threat model will be different. Threat models tend to evolve over time as our situation changes, so be sure to periodically reassess your threat model.
 
-You can [verify](https://support.apple.com/en-us/HT201259) the following cryptographic hashes to ensure you have the same copy with `openssl sha1 InstallESD.dmg` or `shasum -a 1 InstallESD.dmg` or `shasum -a 256 InstallESD.dmg` (in Finder, you can drag the file into a Terminal window to provide the full path).
+## Identify assets
 
-To determine which macOS versions and builds originally shipped with or are available for your Mac, see [HT204319](https://support.apple.com/en-us/HT204319).
+This is probably a lot of things: phone, laptop, passwords stored on various devices, internet browsing history, etc. Make a list starting with the most important assets to protect. You can put them in categories based on how important they are: public, sensitive, or secret.
 
-See [InstallESD_Hashes.csv](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/blob/master/InstallESD_Hashes.csv) in this repository for a list of current and previous file hashes. You can also Google the cryptographic hashes to ensure the file is genuine and has not been tampered with.
+## Identify adversaries
 
-To create the image, use [MagerValp/AutoDMG](https://github.com/MagerValp/AutoDMG), or to create it manually, mount and install the operating system to a temporary image:
+Define whom you are defending against. Start by defining the motivation they might have to attack assets. [Financial gain](https://www.verizon.com/business/resources/reports/dbir/) is a big motivator for many attackers, for example.
 
-    $ hdiutil attach -mountpoint /tmp/install_esd ./InstallESD.dmg
+## Identify capabilities
 
-    $ hdiutil create -size 32g -type SPARSE -fs HFS+J -volname "macOS" -uid 0 -gid 80 -mode 1775 /tmp/output.sparseimage
+In order to counter adversaries, you'll need to understand what they're capable of and what they're not capable of. Rank adversaries from totally unsophisticated to very advanced. For example, a common thief is not very sophisticated; they will likely be stopped by basic things like simply having a password and drive encryption on devices. A very advanced adversary like a state actor might require fully turning off devices when not in use to clear the keys from RAM and a long diceware password.
 
-    $ hdiutil attach -mountpoint /tmp/os -owners on /tmp/output.sparseimage
+## Identify mitigations
 
-    $ sudo installer -pkg /tmp/install_esd/Packages/OSInstall.mpkg -tgt /tmp/os -verbose
+Now is when you decide the best way to counter each threat. You might avoid writing passwords down on paper so your roommate can't find them or you might encrypt the drive on your computer so a thief can't get data from it. It's important to balance security and usability; every mitigation should counter some capability of your adversaries, otherwise you might be making your life inconvenient for little to no gain. If you can't think of any more capabilities your adversaries might have and you've implemented mitigations for them all, your work is done.
 
-This part will take a while, so be patient. You can `tail -F /var/log/install.log` in another Terminal window to check progress.
+Here's an example of the type of table you should make for each asset you want to protect:
 
-**(Optional)** Install additional software, such as [Wireshark](https://www.wireshark.org/download.html):
+Adversary | Motivation | Capabilities | Mitigation
+-|-|-|-
+Roommate | See private chats or browsing history | Close proximity; can see screen or watch type in password | Use biometrics, use privacy screen, keep phone locked when not using it
+Thief | Unlock phone and steal personal info and drain bank accounts, sell phone for money | Shoulder surf to see password, steal device when not looking while it's logged in | Keep phone in sight or on person at all times, keep locked when not in use, use biometrics to avoid typing password in public, use Find My or similar service to track/remotely disable stolen device
+Criminal | Financial | Social engineering, readily-available malware, password reuse, exploiting vulnerabilities | Use sandboxing, enable security features in OS, keep OS and all software updated and turn on automatic updates
+Corporation | User data marketing | Telemetry and behavioral data collection | Block network connections, reset unique identifiers, avoid adding payment data
+Nation State/APT | Targeted surveillance | Passive surveillance of internet infrastructure, advanced computers for cracking encryption/analysis of packets | Use open source e2ee, use strong diceware passwords for devices, use hardware with secure element for secure encryption, shut down devices when not using them, software tripwire/honeypot/[canary tokens](https://canarytokens.org/)
 
-    $ hdiutil attach Wireshark\ 2.2.0\ Intel\ 64.dmg
+Read more about threat modeling [here](https://www.netmeister.org/blog/threat-model-101.html).
 
-    $ sudo installer -pkg /Volumes/Wireshark/Wireshark\ 2.2.0\ Intel\ 64.pkg -tgt /tmp/os
+# Hardware
 
-    $ hdiutil unmount /Volumes/Wireshark
+macOS is most secure running on [Apple hardware](https://support.apple.com/guide/security/hardware-security-overview-secf020d1074/1/web/1) with Apple silicon. The newer the Mac, the better. Avoid hackintoshes and Macs that don't support the latest macOS, as Apple doesn't [patch all vulnerabilities](https://support.apple.com/guide/deployment/about-software-updates-depc4c80847a) in versions that aren't the most recent one.
 
-See [MagerValp/AutoDMG/wiki/Packages-Suitable-for-Deployment](https://github.com/MagerValp/AutoDMG/wiki/Packages-Suitable-for-Deployment) for caveats and [chilcote/outset](https://github.com/chilcote/outset) to instead processes packages and scripts at first boot.
+When you purchase your Mac, you might want to avoid it being linked back to you. Depending on your threat model, you should pay for it in cash in person rather than ordering online or purchasing with a credit/debit card, that way no identifying information can be linked back to your purchase.
 
-When you're done, detach, convert and verify the image:
+If you want to use a wireless keyboard, mouse, headphones or other accessory, the most secure option is Apple ones since they will automatically be updated by your system. They also support the latest [Bluetooth features](https://support.apple.com/guide/security/bluetooth-security-sec82597d97e/web) like BLE Privacy which randomizes your Bluetooth hardware address to prevent tracking. With third party accessories, this isn't a guarantee.
 
-    $ hdiutil detach /tmp/os
+# Installing macOS
 
-    $ hdiutil detach /tmp/install_esd
+There are several ways to [install macOS](https://support.apple.com/102662). Choose your preferred method from the available options.
 
-    $ hdiutil convert -format UDZO /tmp/output.sparseimage -o ~/sierra.dmg
+ **You should install the latest version of macOS that is compatible with your Mac**. More recent versions have security patches and other improvements that older versions lack.
 
-    $ asr imagescan --source ~/sierra.dmg
+## System activation
 
-Now `sierra.dmg` is ready to be applied to one or multiple Macs. One could futher customize the image to include premade users, applications, preferences, etc.
+As part of Apple's [theft prevention system](https://support.apple.com/102541), Apple silicon Macs will need to activate with Apple's servers every time you reinstall macOS to check against the database of stolen or activation-locked Macs.
 
-This image can be installed using another Mac in [Target Disk Mode](https://support.apple.com/en-us/HT201462) or from a bootable USB installer.
+You can read about exactly how this process works [here](https://support.apple.com/guide/security/localpolicy-signing-key-creation-management-sec1f90fbad1).
 
-To use **Target Disk Mode**, boot up the Mac you wish to image while holding the `T` key and connect it to another Mac using a Firewire, Thunderbolt or USB-C cable.
+## Apple Account
 
-If you don't have another Mac, boot to a USB installer, with `sierra.dmg` and other required files copied to it, by holding the *Option* key at boot.
+Creating an Apple Account is not required to use macOS. Making an Apple Account requires a phone number and it will by default sync a [lot of data](https://www.apple.com/legal/privacy/data/en/apple-id/) to iCloud, Apple's cloud storage service. You can [disable](https://support.apple.com/102651) the syncing later if you want or enable [end-to-end encryption](https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f/web) for your iCloud data.
 
-Run `diskutil list` to identify the connected Mac's disk, usually `/dev/disk2`
+You can [control the data](https://support.apple.com/102283) associated with your Apple Account or completely delete it.
 
-**(Optional)** [Securely erase](https://www.backblaze.com/blog/securely-erase-mac-ssd/) the disk with a single pass (if previously FileVault-encrypted, the disk must first be unlocked and mounted as `/dev/disk3s2`):
+An Apple Account is required in order to access the App Store and use most Apple services like iCloud, Apple Music, etc.
 
-    $ sudo diskutil secureErase freespace 1 /dev/disk3s2
+## App Store
 
-Partition the disk to Journaled HFS+:
+The Mac App Store is a [curated](https://developer.apple.com/app-store/review/guidelines) repository of software that is required to utilize the [App Sandbox](https://developer.apple.com/documentation/security/app_sandbox/protecting_user_data_with_app_sandbox) and [Hardened Runtime](https://developer.apple.com/documentation/security/hardened_runtime), as well as offering automatic updates that integrate with your system.
 
-    $ sudo diskutil unmountDisk /dev/disk2
+The App Store offers the greatest security guarantees for software on macOS, but it requires you to log in with an Apple Account and Apple will be able to link your Apple Account to your downloaded applications.
 
-    $ sudo diskutil partitionDisk /dev/disk2 1 JHFS+ macOS 100%
+## Virtualization
 
-Restore the image to the new volume:
+You can easily run macOS natively in a virtual machine using [UTM](https://mac.getutm.app). It's free from their site but if you buy it from the App Store, you'll get automatic updates.
 
-    $ sudo asr restore --source ~/sierra.dmg --target /Volumes/macOS --erase --buffersize 4m
+Follow their [documentation](https://docs.getutm.app/guest-support/macos) to install a macOS VM with just a few clicks.
 
-You can also use the **Disk Utility** application to erase the connected Mac's disk, then restore `sierra.dmg` to the newly created partition.
+Another option is [VMware Fusion](https://www.vmware.com/products/fusion.html). You can read their [documentation](https://docs.vmware.com/en/VMware-Fusion/13/com.vmware.fusion.using.doc/GUID-474FC78E-4E77-42B7-A1C6-12C2F378C5B9.html) to see how to install a macOS VM.
 
-If you've followed these steps correctly, the target Mac should now have a new install of macOS Sierra.
-
-If you want to transfer any files, copy them to a shared folder like `/Users/Shared` on the mounted disk image, e.g. `cp Xcode_8.0.dmg /Volumes/macOS/Users/Shared`
-
-<img width="1280" alt="Finished restore install from USB recovery boot" src="https://cloud.githubusercontent.com/assets/12475110/14804078/f27293c8-0b2d-11e6-8e1f-0fb0ac2f1a4d.png">
-
-*Finished restore install from USB recovery boot*
-
-We're not done yet! Unless you have built the image with [AutoDMG](https://github.com/MagerValp/AutoDMG), or installed macOS to a second partition on your Mac, you will need to create a recovery partition (in order to use full disk encryption). You can do so using [MagerValp/Create-Recovery-Partition-Installer](https://github.com/MagerValp/Create-Recovery-Partition-Installer) or using the following manual steps:
-
-Download the file [RecoveryHDUpdate.dmg](https://support.apple.com/downloads/DL1464/en_US/RecoveryHDUpdate.dmg).
-
-```
-RecoveryHDUpdate.dmg
-SHA-256: f6a4f8ac25eaa6163aa33ac46d40f223f40e58ec0b6b9bf6ad96bdbfc771e12c
-SHA-1:   1ac3b7059ae0fcb2877d22375121d4e6920ae5ba
-```
-
-Attach and expand the installer, then run it:
-
-```
-$ hdiutil attach RecoveryHDUpdate.dmg
-
-$ pkgutil --expand /Volumes/Mac\ OS\ X\ Lion\ Recovery\ HD\ Update/RecoveryHDUpdate.pkg /tmp/recovery
-
-$ hdiutil attach /tmp/recovery/RecoveryHDUpdate.pkg/RecoveryHDMeta.dmg
-
-$ /tmp/recovery/RecoveryHDUpdate.pkg/Scripts/Tools/dmtest ensureRecoveryPartition /Volumes/macOS/ /Volumes/Recovery\ HD\ Update/BaseSystem.dmg 0 0 /Volumes/Recovery\ HD\ Update/BaseSystem.chunklist
-```
+# First boot
 
-Replace `/Volumes/macOS` with the path to the target disk mode-booted Mac as necessary.
-
-This step will take several minutes. Run `diskutil list` again to make sure **Recovery HD** now exists on `/dev/disk2` or equivalent identifier.
+When macOS first starts, you'll be greeted by **Setup Assistant**.
 
-Once you're done, eject the disk with `hdiutil unmount /Volumes/macOS` and power down the target disk mode-booted Mac.
+When creating the first account, use a [strong password](https://www.eff.org/dice) without a hint.
 
-### Virtualization
+If you enter your real name at the account setup process, be aware that your computer's name and local hostname will comprise that name (e.g., *John Appleseed's MacBook*) and thus will appear on local networks and in various preference files.
 
-To install macOS as a virtual machine (vm) using [VMware Fusion](https://www.vmware.com/products/fusion.html), follow the instructions above to create an image. You will **not** need to download and create a recovery partition manually.
+Both should be verified and updated as needed in **System Settings > About** or with the following commands after installation:
 
+```console
+sudo scutil --set ComputerName MacBook
+sudo scutil --set LocalHostName MacBook
 ```
-VMware-Fusion-8.5.6-5234762.dmg
-SHA-256: 57a879095c9fcce0066bea0d3c203571689fb53205915fda156c0d742f7c7ad2
-SHA-1:   b7315d00a7c92dbad280d0f01f42dd8b56d96040
-```
-
-For the Installation Method, select *Install OS X from the recovery partition*. Customize any memory or CPU requirements and complete setup. The guest vm should boot into [Recovery Mode](https://support.apple.com/en-us/HT201314) by default.
 
-In Recovery Mode, select a language, then Utilities > Terminal from the menubar.
+# Admin and user accounts
 
-In the guest vm, type `ifconfig | grep inet` - you should see a private address like `172.16.34.129`
+The first user account is always an admin account. Admin accounts are members of the admin group and have access to `sudo`, which allows them to usurp other accounts, in particular root, and gives them effective control over the system. Any program that the admin executes can potentially obtain the same access, making this a security risk.
 
-On the host Mac, type `ifconfig | grep inet` - you should see a private gateway address like `172.16.34.1`
+Utilities like `sudo` have [weaknesses that can be exploited](https://bogner.sh/2014/03/another-mac-os-x-sudo-password-bypass/) by concurrently running programs.
 
-From the host Mac, serve the installable image to the guest vm by editing `/etc/apache2/httpd.conf` and adding the following line to the top (using the gateway address assigned to the host Mac and port 80):
+It is considered a best practice by [Apple](https://help.apple.com/machelp/mac/10.12/index.html#/mh11389) to use a separate standard account for day-to-day work and use the admin account for installations and system configuration.
 
-    Listen 172.16.34.1:80
+It is not strictly required to ever log into the admin account via the macOS login screen. When a Terminal command requires administrator privileges, the system will prompt for authentication and Terminal then continues using those privileges. To that end, Apple provides some [recommendations](https://support.apple.com/HT203998) for hiding the admin account and its home directory. This can be an elegant solution to avoid having a visible 'ghost' account.
 
-On the host Mac, link the image to the default Apache Web server directory:
+## Caveats
 
-	$ sudo ln ~/sierra.dmg /Library/WebServer/Documents
+* Only administrators can install applications in `/Applications` (local directory). Finder and Installer will prompt a standard user with an authentication dialog. Many applications can be installed in `~/Applications` instead (the directory can be created). As a rule of thumb: applications that do not require admin access – or do not complain about not being installed in `/Applications` – should be installed in the user directory, the rest in the local directory. Mac App Store applications are still installed in `/Applications` and require no additional authentication.
+* `sudo` is not available in shells of the standard user, which requires using `su` or `login` to enter a shell of the admin account. This can make some maneuvers trickier and requires some basic experience with command-line interfaces.
+* System Preferences and several system utilities (e.g. Wi-Fi Diagnostics) will require root privileges for full functionality. Many panels in System Preferences are locked and need to be unlocked separately by clicking on the lock icon. Some applications will simply prompt for authentication upon opening, others must be opened by an admin account directly to get access to all functions (e.g. Console).
+* There are third-party applications that will not work correctly because they assume that the user account is an admin. These programs may have to be executed by logging into the admin account, or by using the `open` utility.
+* See additional discussion in [issue 167](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/167).
 
-From the host Mac, start Apache in the foreground:
+## Setup
 
-	$ sudo httpd -X
+Accounts can be created and managed in System Preferences. On settled systems, it is generally easier to create a second admin account and then demote the first account. This avoids data migration. Newly installed systems can also just add a standard account.
 
-From the guest VM, install the disk image to the volume over the local network using `asr`:
+Demoting an account can be done either from the the new admin account in System Preferences – the other account must be logged out – or by executing these commands (it may not be necessary to execute both, see [issue 179](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/179)):
 
+```console
+sudo dscl . -delete /Groups/admin GroupMembership <username>
+sudo dscl . -delete /Groups/admin GroupMembers <GeneratedUID>
 ```
--bash-3.2# asr restore --source http://172.16.34.1/sierra.dmg --target /Volumes/Macintosh\ HD/ --erase --buffersize 4m
-	Validating target...done
-	Validating source...done
-	Erase contents of /dev/disk0s2 (/Volumes/Macintosh HD)? [ny]: y
-	Retrieving scan information...done
-	Validating sizes...done
-	Restoring  ....10....20....30....40....50....60....70....80....90....100
-	Verifying  ....10....20....30....40....50....60....70....80....90....100
-	Remounting target volume...done
-```
-
-When it's finished, stop the Apache Web server on the host Mac by pressing `Control` `C` at the `sudo httpd -X` window and remove the image copy with `sudo rm /Library/WebServer/Documents/sierra.dmg`
-
-In the guest vm, select *Startup Disk* from the top-left corner Apple menu, select the hard drive and restart. You may wish to disable the Network Adapter in VMware for the initial guest vm boot.
-
-Take and Restore from saved guest vm snapshots before and after attempting risky browsing, for example, or use a guest vm to install and operate questionable software.
-
-## First boot
-
-**Note** Before setting up macOS, consider disconnecting networking and configuring a firewall(s) first. However, [late 2016 MacBooks](https://www.ifixit.com/Device/MacBook_Pro_15%22_Late_2016_Touch_Bar) with Touch Bar hardware [require online OS activation](https://onemoreadmin.wordpress.com/2016/11/27/the-untouchables-apples-new-os-activation-for-touch-bar-macbook-pros/).
-
-On first boot, hold `Command` `Option` `P` `R` keys to [clear NVRAM](https://support.apple.com/en-us/HT204063).
-
-When macOS first starts, you'll be greeted by **Setup Assistant**.
-
-When creating your account, use a [strong password](http://www.explainxkcd.com/wiki/index.php/936:_Password_Strength) without a hint.
-
-If you enter your real name at the account setup process, be aware that your [computer's name and local hostname](https://support.apple.com/kb/PH18720) will comprise that name (e.g., *John Appleseed's MacBook*) and thus will appear on local networks and in various preference files. You can change them both in **System Preferences > Sharing** or with the following commands:
 
-	$ sudo scutil --set ComputerName your_computer_name
-
-	$ sudo scutil --set LocalHostName your_hostname
-
-## Admin and standard user accounts
-
-The first user account is always an admin account. Admin accounts are members of the admin group and have access to `sudo`, which allows them to usurp other accounts, in particular root, and gives them effective control over the system. Any program that the admin executes can potentially obtain the same access, making this a security risk. Utilities like `sudo` have [weaknesses that can be exploited](https://bogner.sh/2014/03/another-mac-os-x-sudo-password-bypass/) by concurrently running programs and many panes in System Preferences are [unlocked by default](http://csrc.nist.gov/publications/drafts/800-179/sp800_179_draft.pdf) [p. 61–62] for admin accounts. It is considered a best practice by [Apple](https://help.apple.com/machelp/mac/10.12/index.html#/mh11389) and [others](http://csrc.nist.gov/publications/drafts/800-179/sp800_179_draft.pdf) [p. 41–42] to use a separate standard account for day-to-day work and use the admin account for installations and system configuration.
-
-It is not strictly required to ever log into the admin account via the macOS login screen. The system will prompt for authentication when required and Terminal can do the rest. To that end, Apple provides some [recommendations](https://support.apple.com/HT203998) for hiding the admin account and its home directory. This can be an elegant solution to avoid having a visible 'ghost' account. The admin account can also be [removed from FileVault](http://apple.stackexchange.com/a/94373).
-
-#### Caveats
-
-1. Only administrators can install applications in `/Applications` (local directory). Finder and Installer will prompt a standard user with an authentication dialog. Many applications can be installed in `~/Applications` instead (the directory can be created manually). As a rule of thumb: applications that do not require admin access – or do not complain about not being installed in `/Applications` – should be installed in the user directory, the rest in the local directory. Mac App Store applications are still installed in `/Applications` and require no additional authentication.
-
-2. `sudo` is not available in shells of the standard user, which requires using `su` or `login` to enter a shell of the admin account. This can make some maneuvers trickier and requires some basic experience with command-line interfaces.
-
-3. System Preferences and several system utilities (e.g. Wi-Fi Diagnostics) will require root privileges for full functionality. Many panels in System Preferences are locked and need to be unlocked separately by clicking on the lock icon. Some applications will simply prompt for authentication upon opening, others must be opened by an admin account directly to get access to all functions (e.g. Console).
-
-4. There are third-party applications that will not work correctly because they assume that the user account is an admin. These programs may have to be executed by logging into the admin account, or by using the `open` utility.
-
-#### Setup
-
-Accounts can be created and managed in System Preferences. On settled systems, it is generally easier to create a second admin account and then demote the first account. This avoids data migration. Newly installed systems can also just add a standard account. Demoting an account can be done either from the the new admin account in System Preferences – the other account must be logged out – or by executing these commands (it may not be necessary to execute both, see [issue #179](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/179)):
+To find the **GeneratedUID** of an account:
 
-```
-$ sudo dscl . -delete /Groups/admin GroupMembership <username>
-
-$ sudo dscl . -delete /Groups/admin GroupMembers <GeneratedUID>
-```
-
-You can find the “GeneratedUID” of your account with:
-
-```
-$ dscl . -read /Users/<username> GeneratedUID
+```console
+dscl . -read /Users/<username> GeneratedUID
 ```
 
 See also [this post](https://superuser.com/a/395738) for more information about how macOS determines group membership.
 
-## Full disk encryption
-
-[FileVault](https://en.wikipedia.org/wiki/FileVault) provides full disk (technically, full _volume_) encryption on macOS.
-
-FileVault encryption protects data at rest and hardens (but [not always prevents](http://blog.frizk.net/2016/12/filevault-password-retrieval.html)) someone with physical access from stealing data or tampering with your Mac.
-
-With much of the cryptographic operations happening [efficiently in hardware](https://software.intel.com/en-us/articles/intel-advanced-encryption-standard-aes-instructions-set/), the performance penalty for FileVault is not noticeable.
-
-The security of FileVault greatly depends on the pseudo random number generator (PRNG).
-
-> The random device implements the Yarrow pseudo random number generator algorithm and maintains its entropy pool.  Additional entropy is fed to the generator regularly by the SecurityServer daemon from random jitter measurements of the kernel.
-
-> SecurityServer is also responsible for periodically saving some entropy to disk and reloading it during startup to provide entropy in early system operation.
-
-See `man 4 random` for more information.
-
-The PRNG can be manually seeded with entropy by writing to /dev/random **before** enabling FileVault. This can be done by simply using the Mac for a little while before activating FileVault.
-
-To manually seed entropy *before* enabling FileVault:
-
-	$ cat > /dev/random
-	[Type random letters for a long while, then press Control-D]
-
-Enable FileVault with `sudo fdesetup enable` or through **System Preferences** > **Security & Privacy** and reboot.
-
-If you can remember your password, there's no reason to save the **recovery key**. However, your encrypted data will be lost forever if you can't remember the password or recovery key.
-
-If you want to know more about how FileVault works, see the paper [Infiltrate the Vault: Security Analysis and Decryption of Lion Full Disk Encryption](https://eprint.iacr.org/2012/374.pdf) (pdf) and related [presentation](http://www.cl.cam.ac.uk/~osc22/docs/slides_fv2_ifip_2013.pdf) (pdf). Also see [IEEE Std 1619-2007 “The XTS-AES Tweakable Block Cipher”](http://libeccio.di.unisa.it/Crypto14/Lab/p1619.pdf) (pdf).
+# Firmware
 
-You may wish to enforce **hibernation** and evict FileVault keys from memory instead of traditional sleep to memory:
+You should check that firmware security settings are set to [Full Security](https://support.apple.com/guide/mac-help/mchl768f7291/mac) to prevent tampering with your OS. This is the default setting.
 
-    $ sudo pmset -a destroyfvkeyonstandby 1
-    $ sudo pmset -a hibernatemode 25
+# FileVault
 
-> All computers have firmware of some type—EFI, BIOS—to help in the discovery of hardware components and ultimately to properly bootstrap the computer using the desired OS instance. In the case of Apple hardware and the use of EFI, Apple stores relevant information within EFI to aid in the functionality of macOS. For example, the FileVault key is stored in EFI to transparently come out of standby mode.
+All Mac models with Apple silicon are encrypted by default. Enabling [FileVault](https://support.apple.com/guide/mac-help/mh11785/mac) makes it so that you need to enter a password in order to access the data on your drive. The EFF has a guide on generating [strong but memorable passwords](https://www.eff.org/dice).
 
-> Organizations especially sensitive to a high-attack environment, or potentially exposed to full device access when the device is in standby mode, should mitigate this risk by destroying the FileVault key in firmware. Doing so doesn’t destroy the use of FileVault, but simply requires the user to enter the password in order for the system to come out of standby mode.
+Your FileVault password also acts as a [firmware password](https://support.apple.com/en-us/102384) that will prevent people that don't know it from booting from anything other than the designated startup disk, accessing [Recovery](https://support.apple.com/guide/mac-help/macos-recovery-a-mac-apple-silicon-mchl82829c17/15.0/mac/15.0#mchl5abfbb29), and [reviving](https://support.apple.com/en-us/108900) it with DFU mode.
 
-If you choose to evict FileVault keys in standby mode, you should also modify your standby and power nap settings. Otherwise, your machine may wake while in standby mode and then power off due to the absence of the FileVault key. See [issue #124](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/124) for more information. These settings can be changed with:
+FileVault will ask you to set a recovery key in case you forget your password. Keep this key stored somewhere safe. You'll have the option use your iCloud account to unlock your disk; however, anyone with access to your iCloud account will be able to unlock it as well.
 
-    $ sudo pmset -a powernap 0
-    $ sudo pmset -a standby 0
-    $ sudo pmset -a standbydelay 0
-    $ sudo pmset -a autopoweroff 0
+# Lockdown Mode
 
-For more information, see [Best Practices for
-Deploying FileVault 2](http://training.apple.com/pdf/WP_FileVault2.pdf) (pdf) and paper [Lest We Remember: Cold Boot Attacks on Encryption Keys](https://www.usenix.org/legacy/event/sec08/tech/full_papers/halderman/halderman.pdf) (pdf)
+macOS offers [Lockdown Mode](https://support.apple.com/105120), a security feature that disables several features across the OS, significantly reducing attack surface for attackers while keeping the OS usable. You can read about exactly what is disabled and decide for yourself if it is acceptable to you.
 
-## Firewall
+When Lockdown Mode is on, you can disable it per site in Safari on trusted sites.
 
-Before connecting to the Internet, it's a good idea to first configure a firewall.
+# Firewall
 
-There are several types of firewall available for macOS.
+There are several types of firewalls available for macOS.
 
-#### Application layer firewall
+## Application layer firewall
 
-Built-in, basic firewall which blocks **incoming** connections only.
+Built-in, basic firewall which blocks **incoming** connections only. This firewall does not have the ability to monitor, nor block **outgoing** connections.
 
-Note, this firewall does not have the ability to monitor, nor block **outgoing** connections.
+It can be controlled by the **Firewall** tab of **Network** in **System Settings**, or with the following commands.
 
-It can be controlled by the **Firewall** tab of **Security & Privacy** in **System Preferences**, or with the following commands.
+Enable the firewall and stealth mode:
 
-Enable the firewall:
+```console
+sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
 
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
-
-Enable logging:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on
-
-You may also wish to enable stealth mode:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on
-
-> Computer hackers scan networks so they can attempt to identify computers to attack. You can prevent your computer from responding to some of these scans by using **stealth mode**. When stealth mode is enabled, your computer does not respond to ICMP ping requests, and does not answer to connection attempts from a closed TCP or UDP port. This makes it more difficult for attackers to find your computer.
-
-Finally, you may wish to prevent *built-in software* as well as *code-signed, downloaded software from being whitelisted automatically*:
-
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off
+sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on
+```
 
-    $ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsignedapp off
+Computer hackers scan networks so they can attempt to identify computers to attack. You can prevent your computer from responding to some of these scans by using **stealth mode**. When stealth mode is enabled, your computer does not respond to ICMP ping requests, and does not answer to connection attempts from a closed TCP or UDP port. This makes it more difficult for attackers to find your computer.
 
-> Applications that are signed by a valid certificate authority are automatically added to the list of allowed apps, rather than prompting the user to authorize them. Apps included in macOS are signed by Apple and are allowed to receive incoming connections when this setting is enabled. For example, since iTunes is already signed by Apple, it is automatically allowed to receive incoming connections through the firewall.
+To prevent *built-in software* as well as *code-signed, downloaded software from being whitelisted automatically*:
 
-> If you run an unsigned app that is not listed in the firewall list, a dialog appears with options to Allow or Deny connections for the app. If you choose "Allow", macOS signs the application and automatically adds it to the firewall list. If you choose "Deny", macOS adds it to the list but denies incoming connections intended for this app.
+```console
+sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsigned off
 
-After interacting with `socketfilterfw`, you may want to restart (or terminate) the process:
+sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setallowsignedapp off
+```
 
-    $ sudo pkill -HUP socketfilterfw
+Applications that are signed by a valid certificate authority are automatically added to the list of allowed apps, rather than prompting the user to authorize them. Apps included in macOS are signed by Apple and are allowed to receive incoming connections when this setting is enabled. For example, since iTunes is already signed by Apple, it is automatically allowed to receive incoming connections through the firewall.
 
-#### Third party firewalls
+If you run an unsigned app that is not listed in the firewall list, a dialog appears with options to Allow or Deny connections for the app. If you choose "Allow", macOS signs the application and automatically adds it to the firewall list. If you choose "Deny", macOS adds it to the list but denies incoming connections intended for this app.
 
-Programs such as [Little Snitch](https://www.obdev.at/products/littlesnitch/index.html), [Hands Off](https://www.oneperiodic.com/products/handsoff/), [Radio Silence](http://radiosilenceapp.com/) and [Security Growler](https://pirate.github.io/security-growler/) provide a good balance of usability and security.
+After interacting with `socketfilterfw`, restart the process by sending a line hangup signal:
 
-<img width="349" alt="Example of Little Snitch monitored session" src="https://cloud.githubusercontent.com/assets/12475110/10596588/c0eed3c0-76b3-11e5-95b8-9ce7d51b3d82.png">
+```console
+sudo pkill -HUP socketfilterfw
+```
 
-*Example of Little Snitch-monitored session*
+## Third party firewalls
 
-```
-LittleSnitch-3.7.4.dmg
-SHA-256: b0ce3519d72affbc7910c24c264efa94aa91c9ad9b1a905c52baa9769156ea22
-SHA-1:   868ad75623c60cb9ad428c7c1d3e5ae449a9033e
-```
+Programs such as [Little Snitch](https://www.obdev.at/products/littlesnitch/index.html), [Radio Silence](https://radiosilenceapp.com/), and [LuLu](https://objective-see.com/products/lulu.html) provide a good balance of usability and security.
 
-These programs are capable of monitoring and blocking **incoming** and **outgoing** network connections. However, they may require the use of a closed source [kernel extension](https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/KernelProgramming/Extend/Extend.html).
+These programs are capable of monitoring and blocking **incoming** and **outgoing** network connections. However, they may require the use of a closed source [system extension](https://support.apple.com/HT210999).
 
-If the number of choices of allowing/blocking network connections is overwhelming, use **Silent Mode** with connections allowed, then periodically check your settings to gain understanding of what various applications are doing.
+If the number of choices of allowing/blocking network connections is overwhelming, use **Silent Mode** with connections allowed, then periodically check the configuration to gain understanding of applications and what they are doing.
 
 It is worth noting that these firewalls can be bypassed by programs running as **root** or through [OS vulnerabilities](https://www.blackhat.com/docs/us-15/materials/us-15-Wardle-Writing-Bad-A-Malware-For-OS-X.pdf) (pdf), but they are still worth having - just don't expect absolute protection. However, some malware actually [deletes itself](https://www.cnet.com/how-to/how-to-remove-the-flashback-malware-from-os-x/) and doesn't execute if Little Snitch, or other security software, is installed.
 
-For more on how Little Snitch works, see the [Network Kernel Extensions Programming Guide](https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/NKEConceptual/socket_nke/socket_nke.html#//apple_ref/doc/uid/TP40001858-CH228-SW1) and [Shut up snitch! – reverse engineering and exploiting a critical Little Snitch vulnerability](https://reverse.put.as/2016/07/22/shut-up-snitch-reverse-engineering-and-exploiting-a-critical-little-snitch-vulnerability/).
-
-#### Kernel level packet filtering
+## Kernel level packet filtering
 
 A highly customizable, powerful, but also most complicated firewall exists in the kernel. It can be controlled with `pfctl` and various configuration files.
 
-pf can also be controlled with a GUI application such as [IceFloor](http://www.hanynet.com/icefloor/) or [Murus](http://www.murusfirewall.com/).
+pf can also be controlled with a GUI application such as [Murus](https://www.murusfirewall.com/).
 
 There are many books and articles on the subject of pf firewall. Here's is just one example of blocking traffic by IP address.
 
 Add the following into a file called `pf.rules`:
 
 ```
+wifi = "en0"
+ether = "en7"
 set block-policy drop
 set fingerprints "/etc/pf.os"
 set ruleset-optimization basic
@@ -510,430 +316,336 @@ scrub in all no-df
 table <blocklist> persist
 block in log
 block in log quick from no-route to any
-pass out proto tcp from any to any keep state
-pass out proto udp from any to any keep state
-block log on en0 from {<blocklist>} to any
+block log on $wifi from { <blocklist> } to any
+block log on $wifi from any to { <blocklist> }
+antispoof quick for { $wifi $ether }
+pass out proto tcp from { $wifi $ether } to any keep state
+pass out proto udp from { $wifi $ether } to any keep state
+pass out proto icmp from $wifi to any keep state
 ```
 
-Use the following commands:
+Then use the following commands to manipulate the firewall:
 
-* `sudo pfctl -e -f pf.rules` to enable the firewall
+* `sudo pfctl -e -f pf.rules` to enable the firewall and load the configuration
 * `sudo pfctl -d` to disable the firewall
-* `sudo pfctl -t blocklist -T add 1.2.3.4` to add hosts to a blocklist
+* `sudo pfctl -t blocklist -T add 1.2.3.4` to add an IP address to the blocklist
 * `sudo pfctl -t blocklist -T show` to view the blocklist
 * `sudo ifconfig pflog0 create` to create an interface for logging
-* `sudo tcpdump -ni pflog0` to dump the packets
+* `sudo tcpdump -ni pflog0` to view filtered packets
 
-Unless you're already familiar with packet filtering, spending too much time configuring pf is not recommended. It is also probably unnecessary if your Mac is behind a [NAT](https://www.grc.com/nat/nat.htm) on a secured home network, for example.
+Unless you're already familiar with packet filtering, spending too much time configuring pf is not recommended. It is also probably unnecessary if the system is behind a [NAT](https://www.grc.com/nat/nat.htm) on a private home network.
 
-For an example of using pf to audit "phone home" behavior of user and system-level processes, see [fix-macosx/net-monitor](https://github.com/fix-macosx/net-monitor).
+It is possible to use the pf firewall to block network access to entire ranges of network addresses, for example to a whole organization:
 
-## Services
+Query [Merit RADb](https://www.radb.net/) for the list of networks in use by an autonomous system, like [Facebook](https://ipinfo.io/AS32934):
 
-Before you connect to the Internet, you may wish to disable some system services, which use up resources or phone home to Apple.
+```console
+whois -h whois.radb.net '!gAS32934'
+```
 
-See [fix-macosx/yosemite-phone-home](https://github.com/fix-macosx/yosemite-phone-home), [l1k/osxparanoia](https://github.com/l1k/osxparanoia) and [karek314/macOS-home-call-drop](https://github.com/karek314/macOS-home-call-drop) for further recommendations.
+Copy and paste the list of networks returned into the blocklist command:
 
-Services on macOS are managed by **launchd**. See [launchd.info](http://launchd.info/), as well as [Apple's Daemons and Services Programming Guide](https://developer.apple.com/library/mac/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/CreatingLaunchdJobs.html) and [Technical Note TN2083](https://developer.apple.com/library/mac/technotes/tn2083/_index.html)
+```console
+sudo pfctl -t blocklist -T add 31.13.24.0/21 31.13.64.0/24 157.240.0.0/16
+```
 
-You can also run [KnockKnock](https://github.com/synack/knockknock) that shows more information about startup items.
+Confirm the addresses were added:
 
-* Use `launchctl list` to view running user agents
-* Use `sudo launchctl list` to view running system daemons
-* Specify the service name to examine it, e.g. `launchctl list com.apple.Maps.mapspushd`
-* Use `defaults read` to examine job plists in `/System/Library/LaunchDaemons` and `/System/Library/LaunchAgents`
-* Use `man`, `strings` and Google to learn about what the agent/daemon runs
+```console
+$ sudo pfctl -t blocklist -T show
+No ALTQ support in kernel
+ALTQ related functions disabled
+   31.13.24.0/21
+   31.13.64.0/24
+   157.240.0.0/16
+```
 
-For example, to learn what a system launch daemon or agent does, start with:
+Confirm network traffic is blocked to those addresses (DNS requests will still work):
 
-    $ defaults read /System/Library/LaunchDaemons/com.apple.apsd.plist
+```console
+$ dig a +short facebook.com
+157.240.2.35
 
-Look at the `Program` or `ProgramArguments` section to see which binary is run, in this case `apsd`. To find more information about that, look at the man page with `man apsd`
+$ curl --connect-timeout 5 -I http://facebook.com/
+*   Trying 157.240.2.35...
+* TCP_NODELAY set
+* Connection timed out after 5002 milliseconds
+* Closing connection 0
+curl: (28) Connection timed out after 5002 milliseconds
 
-For example, if you're not interested in Apple Push Notifications, disable the service:
+$ sudo tcpdump -tqni pflog0 'host 157.240.2.35'
+IP 192.168.1.1.62771 > 157.240.2.35.80: tcp 0
+IP 192.168.1.1.62771 > 157.240.2.35.80: tcp 0
+IP 192.168.1.1.62771 > 157.240.2.35.80: tcp 0
+IP 192.168.1.1.62771 > 157.240.2.35.80: tcp 0
+IP 192.168.1.1.162771 > 157.240.2.35.80: tcp 0
+```
 
-    $ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.apsd.plist
+Outgoing TCP SYN packets are blocked, so a TCP connection is not established and thus a Web site is effectively blocked at the IP layer.
 
-**Note** Unloading services may break usability of some applications. Read the manual pages and use Google to make sure you understand what you're doing first.
+See [drduh/config/scripts/pf-blocklist.sh](https://github.com/drduh/config/blob/main/scripts/pf-blocklist.sh) for more inspiration.
 
-Be careful about disabling any system daemons you don't understand, as it may render your system unbootable. If you break your Mac, use [single user mode](https://support.apple.com/en-us/HT201573) to fix it.
+# Services
 
-Use [Console](https://en.wikipedia.org/wiki/Console_(OS_X)) and [Activity Monitor](https://support.apple.com/en-us/HT201464) applications if you notice your Mac heating up, feeling sluggish, or generally misbehaving, as it may have resulted from your tinkering.
+Services on macOS are managed by **launchd**. See [launchd.info](https://launchd.info).
 
-To view currently disabled services:
+You can manage and see more information about software that runs at login in [System Settings](https://support.apple.com/guide/mac-help/change-login-items-settings-mtusr003). You can see installed System, Quick Look, Finder, and other extensions in [System Settings](https://support.apple.com/guide/mac-help/change-extensions-settings-mchl8baf92fe) as well.
 
-    $ find /var/db/com.apple.xpc.launchd/ -type f -print -exec defaults read {} \; 2>/dev/null
+* Use `launchctl list` to view running user agents
+* Use `sudo launchctl list` to view running system daemons
+* Specify the service name to examine it, e.g. `launchctl list com.apple.Maps.mapspushd`
+* Use `defaults read` to examine job plists in `/System/Library/LaunchDaemons` and `/System/Library/LaunchAgents`
+* Use `man` and `strings` to find out more about what an agent/daemon does
 
-Annotated lists of launch daemons and agents, the respective program executed, and the programs' hash sums are included in this repository.
+For example, to learn what a system launch daemon or agent does, start with:
 
-**(Optional)** Run the `read_launch_plists.py` script and `diff` output to check for any discrepancies on your system, e.g.:
+```console
+defaults read /System/Library/LaunchDaemons/com.apple.apsd.plist
+```
 
-    $ diff <(python read_launch_plists.py) <(cat 16A323_launchd.csv)
+Look at the `Program` or `ProgramArguments` section to see which binary is run, in this case `apsd`. To find more information about that, look at the man page with `man apsd`
 
-See also [cirrusj.github.io/Yosemite-Stop-Launch](http://cirrusj.github.io/Yosemite-Stop-Launch/) for descriptions of services and [Provisioning OS X and Disabling Unnecessary Services](https://vilimpoc.org/blog/2014/01/15/provisioning-os-x-and-disabling-unnecessary-services/) for another explanation.
+> [!IMPORTANT]
+> System services are protected by SIP; don't disable SIP just to tinker with system services as SIP is an integral part of macOS security. Disabling system services may cause system instability.
 
-## Spotlight Suggestions
+To view the status of services:
 
-Disable **Spotlight Suggestions** in both the Spotlight preferences and Safari's Search preferences to avoid your search queries being sent to Apple.
+```console
+find /var/db/com.apple.xpc.launchd/ -type f -print -exec defaults read {} \; 2>/dev/null
+```
 
-Also disable **Bing Web Searches** in the Spotlight preferences to avoid your search queries being sent to Microsoft.
+Annotated lists of launch daemons and agents, the respective program executed, and the programs' hash sums are included in this repository.
 
-See [fix-macosx.com](https://fix-macosx.com/) for detailed instructions.
+Read more about launchd and where login items can be found on [Apple's website](https://support.apple.com/guide/terminal/script-management-with-launchd-apdc6c1077b-5d5d-4d35-9c19-60f2397b2369).
 
-> If you've upgraded to OS X 10.10 "Yosemite" and you're using the default settings, each time you start typing in Spotlight (to open an application or search for a file on your computer), your local search terms and location are sent to Apple and third parties (including Microsoft).
+# Siri Suggestions and Spotlight
 
- **Note** This Web site and instructions may no longer work on macOS Sierra - see [issue 164](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/164).
+Apple is moving to on-device processing for a lot of Siri functions, but some info is still sent to Apple when you use Siri Suggestions or Spotlight. You can read Apple's [Privacy Policy](https://www.apple.com/legal/privacy/data/en/siri-suggestions-search/) to see exactly what is sent and how to disable it.
 
-To download, view and apply their suggested fixes:
+# Homebrew
 
-```
-$ curl -O https://fix-macosx.com/fix-macosx.py
+If a program isn't available through the App Store, consider using [Homebrew](https://brew.sh/).
 
-$ less fix-macosx.py
+> [!WARNING]
+> Homebrew requests "App Management" (or "Full Disk Access") permission to the terminal.
+> This is a bad idea, as it would make you vulnerable to these attacks again: any non-sandboxed application can execute code with the TCC permissions of the terminal by adding a malicious command to zshrc, for example.
+> Granting "App Management" or "Full Disk Access" entitlements should be considered the same as disabling TCC entirely.
 
-$ /usr/bin/python fix-macosx.py
-All done. Make sure to log out (and back in) for the changes to take effect.
-```
+Remember to periodically run `brew upgrade` on trusted and secure networks to download and install software updates. To get information on a package before installation, run `brew info <package>` and check its formula online. You may also wish to enable [additional security options](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/138), such as `HOMEBREW_NO_INSECURE_REDIRECT=1`
 
-Speaking of Microsoft, you may want to see <https://fix10.isleaked.com/> just for fun.
+According to [Homebrew's Anonymous Analytics](https://docs.brew.sh/Analytics), Homebrew gathers anonymous analytics and reports these to a self-hosted InfluxDB instance.
 
-## Homebrew
+To opt out of Homebrew's analytics, set `export HOMEBREW_NO_ANALYTICS=1` in the environment or shell rc file, or use `brew analytics off`
 
-Consider using [Homebrew](http://brew.sh/) to make software installations easier and to update userland tools (see [Apple’s great GPL purge](http://meta.ath0.com/2012/02/05/apples-great-gpl-purge/)).
 
-**Note** If you have not already installed Xcode or Command Line Tools, use `xcode-select --install` to download and install them from Apple.
+# DNS
 
-To [install Homebrew](https://github.com/Homebrew/brew/blob/master/docs/Installation.md#installation):
+## DNS profiles
 
-    $ mkdir homebrew && curl -L https://github.com/Homebrew/brew/tarball/master | tar xz --strip 1 -C homebrew
+macOS 11 introduced "DNS configuration profiles" to configure encrypted DNS, filter domains and use DNSSEC.
 
-Edit `PATH` in your shell or shell rc file to use `~/homebrew/bin` and `~/homebrew/sbin`. For example, `echo 'PATH=$PATH:~/homebrew/sbin:~/homebrew/bin' >> .zshrc`, then change your login shell to Z shell with `chsh -s /bin/zsh`, open a new Terminal window and run `brew update`.
+DNS profiles [can be created](https://dns.notjakob.com/) or obtained from providers such as [Quad9](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)/#download-profile), [AdGuard](https://adguard-dns.io/en/public-dns.html) and [NextDNS](https://nextdns.io/).
 
-Homebrew uses SSL/TLS to talk with GitHub and verifies checksums of downloaded packages, so it's [fairly secure](https://github.com/Homebrew/homebrew/issues/18036).
+## Hosts file
 
-Remember to periodically run `brew update` and `brew upgrade` on trusted and secure networks to download and install software updates. To get information on a package before installation, run `brew info <package>` and check its recipe online.
+Use the [hosts file](https://en.wikipedia.org/wiki/Hosts_(file)) to block known malware, advertising or otherwise unwanted domains.
 
-According to [Homebrew's Anonymous Aggregate User Behaviour Analytics](https://github.com/Homebrew/brew/blob/master/docs/Analytics.md), Homebrew gathers anonymous aggregate user behaviour analytics and reporting these to Google Analytics.
+Edit the hosts file as root, for example with `sudo vi /etc/hosts`
 
-To opt out of Homebrew's analytics, you can set `export HOMEBREW_NO_ANALYTICS=1` in your environment or shell rc file, or use `brew analytics off`.
+To block a domain by `A` record, append any one of the following lines to `/etc/hosts`:
 
-You may also wish to enable [additional security options](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/138), such as `HOMEBREW_NO_INSECURE_REDIRECT=1` and `HOMEBREW_CASK_OPTS=--require-sha`.
+```
+0 example.com
+0.0.0.0 example.com
+127.0.0.1 example.com
+```
 
-## DNS
+> [!NOTE]
+> IPv6 uses the `AAAA` DNS record type, rather than `A` record type, so you may also want to block those connections by *also* including `::1 example.com` entries, like shown [here](https://someonewhocares.org/hosts/ipv6/).
 
-#### Hosts file
+There are many lists of domains available online which you can paste in, just make sure each line starts with `0`, `0.0.0.0`, `127.0.0.1`, and the line `127.0.0.1 localhost` is included.
 
-Use the [hosts file](https://en.wikipedia.org/wiki/Hosts_(file)) to block known malware, advertising or otherwise unwanted domains.
+Here are some popular and useful hosts lists:
 
-Edit the hosts file as root, for example with `sudo vi /etc/hosts`. The hosts file can also be managed with the GUI app [2ndalpha/gasmask](https://github.com/2ndalpha/gasmask).
+* [Sinfonietta/hostfiles](https://github.com/Sinfonietta/hostfiles)
+* [StevenBlack/hosts](https://github.com/StevenBlack/hosts)
+* [someonewhocares.org](https://someonewhocares.org/hosts/zero/hosts)
 
-To block a domain, append `0 example.com` or `0.0.0.0 example.com` or `127.0.0.1 example.com` to `/etc/hosts`
+Append a list of hosts with `tee`:
 
-There are many lists of domains available online which you can paste in, just make sure each line starts with `0`, `0.0.0.0`, `127.0.0.1`, and the line `127.0.0.1 localhost` is included.
+```console
+curl https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts | sudo tee -a /etc/hosts
+```
 
-For hosts lists, see [someonewhocares.org](http://someonewhocares.org/hosts/zero/hosts), [l1k/osxparanoia/blob/master/hosts](https://github.com/l1k/osxparanoia/blob/master/hosts), [StevenBlack/hosts](https://github.com/StevenBlack/hosts) and [gorhill/uMatrix/hosts-files.json](https://github.com/gorhill/uMatrix/blob/master/assets/umatrix/hosts-files.json).
+If you're using a firewall like [Little Snitch](#third-party-firewalls), you could add the [StevenBlack/hosts](https://github.com/StevenBlack/hosts) [blocklist](https://help.obdev.at/littlesnitch6/lsc-blocklists). Make sure to use this URL: [https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts](https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts)
 
-To append a raw list:
+## DNSCrypt
 
-```
-$ curl "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" | sudo tee -a /etc/hosts
+To encrypt DNS traffic, consider using [DNSCrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy). Used in combination with dnsmasq and DNSSEC, the integrity of DNS traffic can be significantly improved.
 
-$ wc -l /etc/hosts
-31998
+Install DNSCrypt from Homebrew and follow the instructions to configure and start `dnscrypt-proxy`:
 
-$ egrep -ve "^#|^255.255.255|^0.0.0.0|^127.0.0.0|^0 " /etc/hosts
-::1 localhost
-fe80::1%lo0 localhost
-[should not return any other IP addresses]
+```console
+brew install dnscrypt-proxy
 ```
 
-See `man hosts` and [FreeBSD Configuration Files](https://www.freebsd.org/doc/handbook/configtuning-configfiles.html) for more information.
-
-#### Dnsmasq
+If using in combination with Dnsmasq, find the file `homebrew.mxcl.dnscrypt-proxy.plist` by running
 
-Among other features, [dnsmasq](http://www.thekelleys.org.uk/dnsmasq/doc.html) is able to cache replies, prevent upstreaming queries for unqualified names, and block entire TLDs.
+```console
+brew info dnscrypt-proxy
+```
 
-Use in combination with DNSCrypt to additionally encrypt outgoing DNS traffic.
+which will show a location like `/usr/local/etc/dnscrypt-proxy.toml`
 
-If you don't wish to use DNSCrypt, you should at least use DNS [not provided](http://bcn.boulder.co.us/~neal/ietf/verisign-abuse.html) [by your ISP](http://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/). Two popular alternatives are [Google DNS](https://developers.google.com/speed/public-dns/) and [OpenDNS](https://www.opendns.com/home-internet-security/).
+Open it in a text editor, find the line starting with `listen_addresses =` and edit that line to use DNScrypt on a port other than 53, like 5355:
 
-**(Optional)** [DNSSEC](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, authenticated denial of existence, and data integrity. All answers from DNSSEC protected zones are digitally signed. The signed records are authenticated via a chain of trust, starting with a set of verified public keys for the DNS root-zone. The current root-zone trust anchors may be downloaded [from IANA website](https://www.iana.org/dnssec/files). There are a number of resources on DNSSEC, but probably the best one is [dnssec.net website](http://www.dnssec.net).
+```
+listen_addresses = ['127.0.0.1:5355', '[::1]:5355']
+```
 
-Install Dnsmasq (DNSSEC is optional):
+Start DNSCrypt:
 
-    $ brew install dnsmasq --with-dnssec
+```console
+sudo brew services restart dnscrypt-proxy
+```
 
-    $ cp /usr/local/opt/dnsmasq/dnsmasq.conf.example /usr/local/etc/dnsmasq.conf
+Confirm DNSCrypt is running:
 
-Edit the configuration:
+```console
+$ sudo lsof +c 15 -Pni UDP:5355
+COMMAND          PID   USER   FD   TYPE             DEVICE SIZE/OFF NODE NAME
+dnscrypt-proxy 15244 nobody    7u  IPv4 0x1337f85ff9f8beef      0t0  UDP 127.0.0.1:5355
+dnscrypt-proxy 15244 nobody   10u  IPv6 0x1337f85ff9f8beef      0t0  UDP [::1]:5355
+dnscrypt-proxy 15244 nobody   12u  IPv4 0x1337f85ff9f8beef      0t0  UDP 127.0.0.1:5355
+dnscrypt-proxy 15244 nobody   14u  IPv6 0x1337f85ff9f8beef      0t0  UDP [::1]:5355
+```
 
-    $ vim /usr/local/etc/dnsmasq.conf
+> By default, dnscrypt-proxy runs on localhost (127.0.0.1), port 53, balancing traffic across a set of resolvers. If you would like to change these settings, you will have to edit the configuration file: $HOMEBREW_PREFIX/etc/dnscrypt-proxy.toml
 
-Examine all the options. Here are a few recommended settings to enable:
+> [!NOTE]
+> Applications may resolve DNS using their own provided servers. If dnscrypt-proxy is used, it is possible to disable all other, non-dnscrypt DNS traffic with the following pf rules:
 
+```shell
+block drop quick on !lo0 proto udp from any to any port = 53
+block drop quick on !lo0 proto tcp from any to any port = 53
 ```
-# Forward queries to DNSCrypt on localhost port 5355
-server=127.0.0.1#5355
 
-# Uncomment to forward queries to Google Public DNS
-#server=8.8.8.8
+See also [What is a DNS leak](https://dnsleaktest.com/what-is-a-dns-leak.html) and [ipv6-test.com](http://ipv6-test.com/)
 
-# Never forward plain names
-domain-needed
+## Dnsmasq
 
-# Examples of blocking TLDs or subdomains
-address=/.onion/0.0.0.0
-address=/.local/0.0.0.0
-address=/.mycoolnetwork/0.0.0.0
-address=/.facebook.com/0.0.0.0
+Among other features, [dnsmasq](https://www.thekelleys.org.uk/dnsmasq/doc.html) is able to cache replies, prevent upstream queries for unqualified names, and block entire top-level domains.
 
-# Never forward addresses in the non-routed address spaces
-bogus-priv
+Use in combination with DNSCrypt to additionally encrypt DNS traffic.
 
-# Reject private addresses from upstream nameservers
-stop-dns-rebind
+If you don't wish to use DNSCrypt, you should at least use DNS [not provided](https://bcn.boulder.co.us/~neal/ietf/verisign-abuse.html) [by your ISP](https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/). Two popular alternatives are [Google DNS](https://developers.google.com/speed/public-dns/) and [OpenDNS](https://www.opendns.com/home-internet-security/).
 
-# Query servers in order
-strict-order
+**Optional** [DNSSEC](https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions) is a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, authenticated denial of existence, and data integrity. All answers from DNSSEC protected zones are digitally signed. The signed records are authenticated via a chain of trust, starting with a set of verified public keys for the DNS root-zone. The current root-zone trust anchors may be downloaded [from IANA website](https://www.iana.org/dnssec/files). There are a number of resources on DNSSEC, but probably the best one is [dnssec.net website](https://www.dnssec.net).
 
-# Set the size of the cache
-# The default is to keep 150 hostnames
-cache-size=8192
+Install Dnsmasq:
 
-# Optional logging directives
-log-async
-log-dhcp
-log-facility=/var/log/dnsmasq.log
+```console
+brew install dnsmasq --with-dnssec
+```
 
-# Uncomment to log all queries
-#log-queries
+Download and edit [drduh/config/dnsmasq.conf](https://github.com/drduh/config/blob/main/dnsmasq.conf) or the default configuration file.
 
-# Uncomment to enable DNSSEC
-#dnssec
-#trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
-#dnssec-check-unsigned
-```
+See [drduh/config/domains](https://github.com/drduh/config/tree/main/domains) for appendable examples on blocking services by domains.
 
 Install and start the program (sudo is required to bind to [privileged port](https://unix.stackexchange.com/questions/16564/why-are-the-first-1024-ports-restricted-to-the-root-user-only) 53):
 
-    $ sudo brew services start dnsmasq
+```console
+sudo brew services start dnsmasq
+```
 
-To set Dnsmasq as your local DNS server, open **System Preferences** > **Network** and select the active interface, then the **DNS** tab, select **+** and add `127.0.0.1`, or use:
+To set dnsmasq as the local DNS server, open **System Preferences** > **Network** and select the active interface, then the **DNS** tab, select **+** and add `127.0.0.1`, or use:
 
-    $ sudo networksetup -setdnsservers "Wi-Fi" 127.0.0.1
+```console
+sudo networksetup -setdnsservers "Wi-Fi" 127.0.0.1
+```
 
-Make sure Dnsmasq is correctly configured:
+Confirm Dnsmasq is configured:
 
-```
-$ scutil --dns
+```console
+$ scutil --dns | head
 DNS configuration
 
 resolver #1
   search domain[0] : whatever
   nameserver[0] : 127.0.0.1
   flags    : Request A records, Request AAAA records
-  reach    : Reachable, Local Address, Directly Reachable Address
+  reach    : 0x00030002 (Reachable,Local Address,Directly Reachable Address)
 
 $ networksetup -getdnsservers "Wi-Fi"
 127.0.0.1
 ```
 
-**Note** Some VPN software overrides DNS settings on connect. See [issue #24](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/24) for more information.
-
-##### Test DNSSEC validation
-
-Test DNSSEC validation succeeds for signed zones:
-
-    $ dig +dnssec icann.org
-
-Reply should have `NOERROR` status and contain `ad` flag. For instance,
+> [!NOTE]
+> Some VPN applications override DNS settings on connect. See [issue 24](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/24) and [drduh/config/scripts/macos-dns.sh](https://github.com/drduh/config/blob/main/scripts/macos-dns.sh).
 
-    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47039
-    ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
-
-Test DNSSEC validation fails for zones that are signed improperly:
-
-    $ dig www.dnssec-failed.org
-
-Reply should have `SERVFAIL` status. For instance,
-
-    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15190
-    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
-
-#### dnscrypt
-
-Use [dnscrypt](https://dnscrypt.org/) to encrypt DNS traffic to the provider of choice.
-
-If you prefer a GUI application, see [alterstep/dnscrypt-osxclient](https://github.com/alterstep/dnscrypt-osxclient).
-
-Install DNSCrypt from Homebrew:
-
-    $ brew install dnscrypt-proxy
-
-If using in combination with Dnsmasq, find the file `homebrew.mxcl.dnscrypt-proxy.plist`
+**Optional** Test DNSSEC validation for signed zones - the reply should have `NOERROR` status and contain `ad` flag:
 
+```console
+$ dig +dnssec icann.org | head
+;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47039
+;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
 ```
-$ find ~/homebrew -name homebrew.mxcl.dnscrypt-proxy.plist
-/Users/drduh/homebrew/Cellar/dnscrypt-proxy/1.7.0/homebrew.mxcl.dnscrypt-proxy.plist
-```
-
-Edit it to have the line:
-
-    <string>--local-address=127.0.0.1:5355</string>
-
-Below the line:
-
-    <string>/usr/local/opt/dnscrypt-proxy/sbin/dnscrypt-proxy</string>
 
-<img width="1015" alt="dnscrypt" src="https://cloud.githubusercontent.com/assets/12475110/19222914/8e6f853e-8e31-11e6-8dd6-27c33cbfaea5.png">
+Test DNSSEC validation fails for zones that are signed improperly - the reply should have `SERVFAIL` status:
 
-*Append a local-address line to use DNScrypt on a port other than 53, like 5355*
-
-This can also be done using Homebrew, by installing `gnu-sed` and using the `gsed` command:
-
-    $ sudo gsed -i "/sbin\\/dnscrypt-proxy<\\/string>/a<string>--local-address=127.0.0.1:5355<\\/string>\n" $(find ~/homebrew -name homebrew.mxcl.dnscrypt-proxy.plist)
-
-By default, the `resolvers-list` will point to the dnscrypt version specific resolvers file. When dnscrypt is updated, this version may no longer exist, and if it does, may point to an outdated file. This can be fixed by changing the resolvers file in `homebrew.mxcl.dnscrypt-proxy.plist` (found earlier using find) to the symlinked version in `/usr/local/share`:
-
-    <string>--resolvers-list=/usr/local/share/dnscrypt-proxy/dnscrypt-resolvers.csv</string>
-    
-Below the line:
-
-    <string>/usr/local/opt/dnscrypt-proxy/sbin/dnscrypt-proxy</string>
-
-Start DNSCrypt:
-
-    $ sudo brew services start dnscrypt-proxy
-
-Make sure DNSCrypt is running:
-
-```
-$ sudo lsof -Pni UDP:5355
-COMMAND   PID   USER   FD   TYPE             DEVICE SIZE/OFF NODE NAME
-dnscrypt-  83 nobody    7u  IPv4 0x1773f85ff9f8bbef      0t0  UDP 127.0.0.1:5355
-
-$ ps A | grep '[d]nscrypt'
-   83   ??  Ss     0:00.27 /Users/drduh/homebrew/opt/dnscrypt-proxy/sbin/dnscrypt-proxy --local-address=127.0.0.1:5355 --ephemeral-keys --resolvers-list=/Users/drduh/homebrew/opt/dnscrypt-proxy/share/dnscrypt-proxy/dnscrypt-resolvers.csv --resolver-name=dnscrypt.eu-dk --user=nobody
-```
-
-> By default, dnscrypt-proxy runs on localhost (127.0.0.1), port 53,
-and under the "nobody" user using the dnscrypt.eu-dk DNSCrypt-enabled
-resolver. If you would like to change these settings, you will have to edit the plist file (e.g., --resolver-address, --provider-name, --provider-key, etc.)
-
-This can be accomplished by editing `homebrew.mxcl.dnscrypt-proxy.plist`
-
-You can run your own [dnscrypt server](https://github.com/Cofyc/dnscrypt-wrapper) (see also [drduh/Debian-Privacy-Server-Guide#dnscrypt](https://github.com/drduh/Debian-Privacy-Server-Guide#dnscrypt)) from a trusted location or use one of many [public servers](https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv) instead.
-
-Confirm outgoing DNS traffic is encrypted:
-
-```
-$ sudo tcpdump -qtni en0
-IP 10.8.8.8.59636 > 77.66.84.233.443: UDP, length 512
-IP 77.66.84.233.443 > 10.8.8.8.59636: UDP, length 368
-
-$ dig +short -x 77.66.84.233
-resolver2.dnscrypt.eu
+```console
+$ dig www.dnssec-failed.org | head
+;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15190
+;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
 ```
 
-See also [What is a DNS leak](https://dnsleaktest.com/what-is-a-dns-leak.html), the [mDNSResponder manual page](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/mDNSResponder.8.html) and [ipv6-test.com](http://ipv6-test.com/).
-
-## Captive portal
-
-When macOS connects to new networks, it **probes** the network and launches a Captive Portal assistant utility if connectivity can't be determined.
-
-An attacker could trigger the utility and direct a Mac to a site with malware without user interaction, so it's best to disable this feature and log in to captive portals using your regular Web browser, provided you have first disable any custom dns and/or proxy settings.
+# Certificate authorities
 
-    $ sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.captive.control Active -bool false
+macOS comes with [over 100](https://support.apple.com/103723) root authority certificates installed from corporations like Apple, Verisign, Thawte, Digicert and government agencies from China, Japan, Netherlands, U.S., and more! These Certificate Authorities (CAs) are capable of issuing TLS certificates for any domain, code signing certificates, etc. Apple [blocks these certificates](https://support.apple.com/103247#blocked) when a CA proves to be untrustworthy. They also have [strict requirements](https://www.apple.com/certificateauthority/ca_program.html) that trusted CAs have to meet.
 
-See also [Apple OS X Lion Security: Captive Portal Hijacking Attack](https://www.securestate.com/blog/2011/10/07/apple-os-x-lion-captive-portal-hijacking-attack), [Apple's secret "wispr" request](http://blog.erratasec.com/2010/09/apples-secret-wispr-request.html), [How to disable the captive portal window in Mac OS Lion](https://web.archive.org/web/20130407200745/http://www.divertednetworks.net/apple-captiveportal.html), and [An undocumented change to Captive Network Assistant settings in OS X 10.10 Yosemite](https://grpugh.wordpress.com/2014/10/29/an-undocumented-change-to-captive-network-assistant-settings-in-os-x-10-10-yosemite/).
+For more information, see the [CA/Browser Forum's website](https://cabforum.org/resources/browser-os-info/).
 
-## Certificate authorities
+Inspect system root certificates in **Keychain Access**, under the **System Roots** tab or by using the `security` command line tool and `/System/Library/Keychains/SystemRootCertificates.keychain` file.
 
-macOS comes with [over 200](https://support.apple.com/en-us/HT202858) root authority certificates installed from for-profit corporations like Apple, Verisign, Thawte, Digicert and government agencies from China, Japan, Netherlands, U.S., and more! These Certificate Authorities (CAs) are capable of issuing SSL/TLS certificates for any domain, code signing certificates, etc.
+You can manually disable certificate authorities through Keychain Access by marking them as **Never Trust** and closing the window:
 
-For more information, see [Certification Authority Trust Tracker](https://github.com/kirei/catt), [Analysis of the HTTPS certificate ecosystem](http://conferences.sigcomm.org/imc/2013/papers/imc257-durumericAemb.pdf) (pdf), and [You Won’t Be Needing These Any More: On Removing Unused Certificates From Trust Stores](http://www.ifca.ai/fc14/papers/fc14_submission_100.pdf) (pdf).
+<img src="https://cloud.githubusercontent.com/assets/12475110/19222972/6b7aabac-8e32-11e6-8efe-5d3219575a98.png" width="450" alt="A certificate authority certificate">
 
-You can inspect system root certificates in **Keychain Access**, under the **System Roots** tab or by using the `security` command line tool and `/System/Library/Keychains/SystemRootCertificates.keychain` file.
+The risk of a [man in the middle](https://wikipedia.org/wiki/Man-in-the-middle_attack) attack, in which a coerced or compromised certificate authority trusted by a system root store issues a fake/rogue TLS certificate, is relatively low, but [possible](https://wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulent_certificates).
 
-You can disable certificate authorities through Keychain Access by marking them as **Never Trust** and closing the window:
+# Privoxy
 
-<img width="450" alt="A certificate authority certificate" src="https://cloud.githubusercontent.com/assets/12475110/19222972/6b7aabac-8e32-11e6-8efe-5d3219575a98.png">
+Consider using [Privoxy](https://www.privoxy.org/) as a local proxy to filter Web traffic.
 
-The risk of a [man in the middle](https://en.wikipedia.org/wiki/Man-in-the-middle_attack) attack in which a coerced or compromised certificate authority trusted by your system issues a fake/rogue SSL certificate is quite low, but still [possible](https://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudulent_certificates).
+Install and start privoxy using Homebrew:
 
-## OpenSSL
-
-The version of OpenSSL in Sierra is `0.9.8zh` which is [not current](https://apple.stackexchange.com/questions/200582/why-is-apple-using-an-older-version-of-openssl). It doesn't support TLS 1.1 or newer, elliptic curve ciphers, and [more](https://stackoverflow.com/questions/27502215/difference-between-openssl-09-8z-and-1-0-1).
-
-Apple declares OpenSSL **deprecated** in their [Cryptographic Services Guide](https://developer.apple.com/library/mac/documentation/Security/Conceptual/cryptoservices/GeneralPurposeCrypto/GeneralPurposeCrypto.html) document. Their version also has patches which may [surprise you](https://hynek.me/articles/apple-openssl-verification-surprises/).
-
-If you're going to use OpenSSL on your Mac, download and install a recent version of OpenSSL with `brew install openssl`. Note, linking brew to be used in favor of `/usr/bin/openssl` may interfere with built-in software. See [issue #39](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/39).
-
-Compare the TLS protocol and cipher between the homebrew version and the system version of OpenSSL:
+```console
+brew install privoxy
 
+brew services start privoxy
 ```
-$ ~/homebrew/bin/openssl version; echo | ~/homebrew/bin/openssl s_client -connect github.com:443 2>&1 | grep -A2 SSL-Session
-OpenSSL 1.0.2j  26 Sep 2016
-SSL-Session:
-    Protocol  : TLSv1.2
-    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
-
-$ /usr/bin/openssl version; echo | /usr/bin/openssl s_client -connect github.com:443 2>&1 | grep -A2 SSL-Session
-OpenSSL 0.9.8zh 14 Jan 2016
-SSL-Session:
-    Protocol  : TLSv1
-    Cipher    : AES128-SHA
-```
-
-See also [Comparison of TLS implementations](https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations), [How's My SSL](https://www.howsmyssl.com/), [Qualys SSL Labs Tools](https://www.ssllabs.com/projects/) and for detailed explanations and with latest vulnerabilities tests [ssl-checker.online-domain-tools.com](http://ssl-checker.online-domain-tools.com).
 
-## Curl
+Alternatively, a signed installation package for Privoxy is available from [their website](https://www.privoxy.org/sf-download-mirror/Macintosh%20%28OS%20X%29/) or [Sourceforge](https://sourceforge.net/projects/ijbswa/files/Macintosh%20%28OS%20X%29/). The signed package is [more secure](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/65) than the Homebrew version and receives support from the Privoxy project.
 
-The version of Curl which comes with macOS uses [Secure Transport](https://developer.apple.com/library/mac/documentation/Security/Reference/secureTransportRef/) for SSL/TLS validation.
+By default, Privoxy listens on local TCP port 8118.
 
-If you prefer to use OpenSSL, install with `brew install curl --with-openssl` and ensure it's the default with `brew link --force curl`
+Set the system **HTTP** proxy for the active network interface `127.0.0.1` and `8118`:
 
-Here are several recommended [options](http://curl.haxx.se/docs/manpage.html) to add to `~/.curlrc` (see `man curl` for more):
-
-```
-user-agent = "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
-referer = ";auto"
-connect-timeout = 10
-progress-bar
-max-time = 90
-verbose
-show-error
-remote-time
-ipv4
+```console
+sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 8118
 ```
 
-## Web
-
-### Privoxy
-
-Consider using [Privoxy](http://www.privoxy.org/) as a local proxy to filter Web browsing traffic.
-
-A signed installation package for privoxy can be downloaded from [silvester.org.uk](http://silvester.org.uk/privoxy/OSX/) or [Sourceforge](http://sourceforge.net/projects/ijbswa/files/Macintosh%20%28OS%20X%29/). The signed package is [more secure](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/65) than the Homebrew version, and attracts full support from the Privoxy project.
-
-Alternatively, install and start privoxy using Homebrew:
-
-    $ brew install privoxy
-
-    $ brew services start privoxy
+Set the system **HTTPS** proxy:
 
-By default, privoxy listens on local TCP port 8118.
-
-Set the system **http** proxy for your active network interface `127.0.0.1` and `8118` (This can be done through **System Preferences > Network > Advanced > Proxies**):
-
-    $ sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 8118
-
-**(Optional)** Set the system **https** proxy, which still allows for domain name filtering, with:
+```console
+sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 8118
+```
 
-    $ sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 8118
+This can also be done through **System Preferences > Network > Advanced > Proxies**
 
 Confirm the proxy is set:
 
-```
+```console
 $ scutil --proxy
 <dictionary> {
   ExceptionsList : <array> {
@@ -947,265 +659,250 @@ $ scutil --proxy
 }
 ```
 
-Visit <http://p.p/> in a browser, or with Curl:
+Although most Web traffic today is encrypted, Privoxy is still useful for filtering by domain name patterns, and for upgrading insecure HTTP requests.
 
-```
-$ ALL_PROXY=127.0.0.1:8118 curl -I http://p.p/
-HTTP/1.1 200 OK
-Content-Length: 2401
-Content-Type: text/html
-Cache-Control: no-cache
-```
+For example, the following rules block all traffic, except to `.net` and `github.com` and all `apple` domains:
 
-Privoxy already comes with many good rules, however you can also write your own.
+```console
+{ +block{all} }
+.
 
-Edit `~/homebrew/etc/privoxy/user.action` to filter elements by domain or with regular expressions.
+{ -block }
+.apple.
+.github.com
+.net
+```
 
-Here are some examples:
+Or to just block Facebook domains, for example:
 
+```console
+{ +block{facebook} }
+.facebook*.
+.fb.
+.fbcdn*.
+.fbinfra.
+.fbsbx.
+.fbsv.
+.fburl.
+.tfbnw.
+.thefacebook.
+fb*.akamaihd.net
 ```
-{ +block{social networking} }
-www.facebook.com/(extern|plugins)/(login_status|like(box)?|activity|fan)\.php
-.facebook.com
 
-{ +block{unwanted images} +handle-as-image }
-.com/ads/
-/.*1x1.gif
-/.*fb-icon.[jpg|gif|png]
-/assets/social-.*
-/cleardot.gif
-/img/social.*
-ads.*.co.*/
-ads.*.com/
+Wildcards are also supported.
 
-{ +redirect{s@http://@https://@} }
-.google.com
-.wikipedia.org
-code.jquery.com
-imgur.com
-```
+See [drduh/config/privoxy/config](https://github.com/drduh/config/blob/main/privoxy/config) and [drduh/config/privoxy/user.action](https://github.com/drduh/config/blob/main/privoxy/user.action) for additional Privoxy examples. Privoxy does **not** need to be restarted after editing `user.action` filter rules.
 
-Verify Privoxy is blocking and redirecting:
+To verify traffic is blocked or redirected, use curl or the Privoxy interface available at <http://p.p> in the browser:
+
+```console
+ALL_PROXY=127.0.0.1:8118 curl example.com -IL | head
 
-```
-$ ALL_PROXY=127.0.0.1:8118 curl ads.foo.com/ -IL
 HTTP/1.1 403 Request blocked by Privoxy
-Content-Type: image/gif
-Content-Length: 64
+Content-Length: 9001
+Content-Type: text/html
 Cache-Control: no-cache
+Pragma: no-cache
 
-$ ALL_PROXY=127.0.0.1:8118 curl imgur.com/ -IL
+ALL_PROXY=127.0.0.1:8118 curl github.com -IL | head
 HTTP/1.1 302 Local Redirect from Privoxy
-Location: https://imgur.com/
+Location: https://github.com/
 Content-Length: 0
-Date: Sun, 09 Oct 2016 18:48:19 GMT
-
-HTTP/1.1 200 OK
-Content-Type: text/html; charset=utf-8
-```
-
-You can replace ad images with pictures of kittens, for example, by starting the a local Web server and [redirecting blocked requests](https://www.privoxy.org/user-manual/actions-file.html#SET-IMAGE-BLOCKER) to localhost.
-
-### Browser
-
-The Web browser poses the largest security and privacy risk, as its fundamental job is to download and execute untrusted code from the Internet.
-
-Use [Google Chrome](https://www.google.com/chrome/browser/desktop/) for most of your browsing. It offers [separate profiles](https://www.chromium.org/user-experience/multi-profiles), [good sandboxing](https://www.chromium.org/developers/design-documents/sandbox), [frequent updates](http://googlechromereleases.blogspot.com/) (including Flash, although you should disable it - see below), and carries [impressive credentials](https://www.chromium.org/Home/chromium-security/brag-sheet).
-
-Chrome also comes with a great [PDF viewer](http://0xdabbad00.com/2013/01/13/most-secure-pdf-viewer-chrome-pdf-viewer/).
 
-If you don't want to use Chrome, [Firefox](https://www.mozilla.org/en-US/firefox/new/) is an excellent browser as well. Or simply use both. See discussion in issues [#2](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/2), [#90](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/90).
+HTTP/1.1 200 Connection established
 
-If using Firefox, see [TheCreeper/PrivacyFox](https://github.com/TheCreeper/PrivacyFox) for recommended privacy preferences. Also be sure to check out [NoScript](https://noscript.net/) for Mozilla-based browsers, which allows whitelist-based, pre-emptive script blocking.
-
-Create at least three profiles, one for browsing **trusted** Web sites (email, banking), another for **mostly trusted** Web sites (link aggregators, news sites), and a third for a completely **cookie-less** and **script-less** experience.
+HTTP/2 200
+server: GitHub.com
+```
 
-* One profile **without cookies or Javascript** enabled (e.g., turned off in `chrome://settings/content`) which should be the preferred profile to visiting untrusted Web sites. However, many pages will not load at all without Javascript enabled.
+> [!NOTE]
+> Proxy settings are not universal; applications and services may bypass system proxy settings. Ensure the application to proxy is correctly configured and verify connections don't leak. Additionally, *pf* can be configured to transparently proxy traffic on certain ports.
 
-* One profile with [uMatrix](https://github.com/gorhill/uMatrix) or [uBlock Origin](https://github.com/gorhill/uBlock) (or both). Use this profile for visiting **mostly trusted** Web sites. Take time to learn how these firewall extensions work. Other frequently recommended extensions are [Privacy Badger](https://www.eff.org/privacybadger), [HTTPSEverywhere](https://www.eff.org/https-everywhere) and [CertPatrol](http://patrol.psyced.org/) (Firefox only).
+# Browser
 
-* One or more profile(s) for secure and trusted browsing needs, such as banking and email only.
+The Web browser likely poses the largest security and privacy risk, as its fundamental job is to download and execute untrusted code from the Internet.
 
-The idea is to separate and compartmentalize data, so that an exploit or privacy violation in one "session" does not necessarily affect data in another.
+An important property of modern browsers is the Same Origin Policy ([SOP](https://en.wikipedia.org/wiki/Same-origin_policy)) which prevents a malicious script on one page from obtaining access to sensitive data on another web page through the Document Object Model (DOM). If SOP is compromised, the security of the entire browser is compromised.
 
-In each profile, visit `chrome://plugins/` and disable **Adobe Flash Player**. If you must use Flash, visit `chrome://settings/contents` to enable **Let me choose when to run plugin content**, under the Plugins section (also known as *click-to-play*).
+Many browser exploits are based on social engineering as a means of gaining persistence. Always be mindful of opening untrusted sites and especially careful when downloading new software.
 
-Take some time to read through [Chromium Security](https://www.chromium.org/Home/chromium-security) and [Chromium Privacy](https://www.chromium.org/Home/chromium-privacy).
+Another important consideration about browser security is extensions. This is an issue affecting Firefox and [Chrome](https://courses.csail.mit.edu/6.857/2016/files/24.pdf) alike. The use of browser extensions should be limited to only critically necessary ones published by trustworthy developers.
 
-For example you may wish to disable [DNS prefetching](https://www.chromium.org/developers/design-documents/dns-prefetching) (see also [DNS Prefetching and Its Privacy Implications](https://www.usenix.org/legacy/event/leet10/tech/full_papers/Krishnan.pdf) (pdf)).
+[Mozilla Firefox](https://www.mozilla.org/firefox/new), [Google Chrome](https://www.google.com/chrome), [Safari](https://www.apple.com/safari), and [Tor Browser](https://www.torproject.org/download) are all recommended browsers for their own unique and individual purposes.
 
-Also be aware of [WebRTC](https://en.wikipedia.org/wiki/WebRTC#Concerns), which may reveal your local or public (if connected to VPN) IP address(es). This can be disabled with extensions such as [uBlock Origin](https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-leaking-local-IP-address) and [rentamob/WebRTC-Leak-Prevent](https://github.com/rentamob/WebRTC-Leak-Prevent).
+## Firefox
 
-Many Chromium-derived browsers are not recommended. They are usually [closed source](http://yro.slashdot.org/comments.pl?sid=4176879&cid=44774943), [poorly maintained](https://plus.google.com/+JustinSchuh/posts/69qw9wZVH8z), [have bugs](https://code.google.com/p/google-security-research/issues/detail?id=679), and make dubious claims to protect privacy. See [The Private Life of Chromium Browsers](http://thesimplecomputer.info/the-private-life-of-chromium-browsers).
+[Mozilla Firefox](https://www.mozilla.org/firefox/new) is a popular open source browser. Firefox replaced major parts of its infrastructure and code base under the projects [Quantum](https://wiki.mozilla.org/Quantum) and [Photon](https://wiki.mozilla.org/Firefox/Photon/Updates). Part of the Quantum project is to replace C++ code with [Rust](https://www.rust-lang.org). Rust is a systems programming language with a focus on security and thread safety. It is expected that Rust adoption will greatly improve the overall security posture of Firefox.
 
-Safari is not recommended. The code is a mess and [security](https://nakedsecurity.sophos.com/2014/02/24/anatomy-of-a-goto-fail-apples-ssl-bug-explained-plus-an-unofficial-patch/) [vulnerabilities](https://vimeo.com/144872861) are frequent, and slower to patch (see [discussion on Hacker News](https://news.ycombinator.com/item?id=10150038)). Security does [not appear](https://discussions.apple.com/thread/5128209) to be a priority for Safari. If you do use it, at least [disable](https://thoughtsviewsopinions.wordpress.com/2013/04/26/how-to-stop-downloaded-files-opening-automatically/) the **Open "safe" files after downloading** option in Preferences, and be aware of other [privacy nuances](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/93).
+Firefox offers a similar security model to Chrome: it has a [bug bounty program](https://www.mozilla.org/security/bug-bounty), although it is not as lucrative. Firefox follows a four-week release cycle.
 
-Other miscellaneous browsers, such as [Brave](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/94), are not evaluated in this guide, so are neither recommended nor actively discouraged from use.
+Firefox supports user-supplied configuration files. See [drduh/config/firefox.user.js](https://github.com/drduh/config/blob/main/firefox.user.js) and [arkenfox/user.js](https://github.com/arkenfox/user.js) for recommended preferences and hardening measures. Also see [NoScript](https://noscript.net), an extension which allows selective script blocking.
 
-For more information about security conscious browsing, see [HowTo: Privacy & Security Conscious Browsing](https://gist.github.com/atcuno/3425484ac5cce5298932), [browserleaks.com](https://www.browserleaks.com/) and [EFF Panopticlick](https://panopticlick.eff.org/).
+Firefox [focuses on user privacy](https://www.mozilla.org/firefox/privacy). It supports [tracking protection](https://developer.mozilla.org/docs/Web/Privacy/Firefox_tracking_protection) in Private Browsing mode. The tracking protection can be enabled for the default account, although it may break the browsing experience on some websites. Firefox in Strict tracking protection mode will [randomize your fingerprint](https://support.mozilla.org/kb/firefox-protection-against-fingerprinting) to foil basic tracking scripts. Firefox offers separate user [profiles](https://support.mozilla.org/kb/profile-manager-create-remove-switch-firefox-profiles). You can separate your browsing inside a profile with [Multi-Account Containers](https://support.mozilla.org/kb/containers).
 
-### Plugins
+Firefox only supports Web Extensions through the [Web Extension Api](https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions), which is very similar to Chrome. Submission of Web Extensions in Firefox is free. Web Extensions in Firefox most of the time are open source, although certain Web Extensions are proprietary.
 
-**Adobe Flash**, **Oracle Java**, **Adobe Reader**, **Microsoft Silverlight** (Netflix now works with [HTML5](https://help.netflix.com/en/node/23742)) and other plugins are [security risks](https://news.ycombinator.com/item?id=9901480) and should not be installed.
+## Chrome
 
-If they are necessary, only use them in a disposable virtual machine and subscribe to security announcements to make sure you're always patched.
+[Google Chrome](https://www.google.com/chrome) is based on the open source [Chromium project](https://www.chromium.org) with certain [proprietary components](https://fossbytes.com/difference-google-chrome-vs-chromium-browser):
 
-See [Hacking Team Flash Zero-Day](http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-flash-zero-day-integrated-into-exploit-kits/), [Java Trojan BackDoor.Flashback](https://en.wikipedia.org/wiki/Trojan_BackDoor.Flashback), [Acrobat Reader: Security Vulnerabilities](http://www.cvedetails.com/vulnerability-list/vendor_id-53/product_id-497/Adobe-Acrobat-Reader.html), and [Angling for Silverlight Exploits](https://blogs.cisco.com/security/angling-for-silverlight-exploits), for example.
+* Automatic updates with GoogleSoftwareUpdateDaemon
+* Usage tracking and crash reporting, which can be disabled through Chrome's settings
+* Media Codec support for proprietary codecs
+* Chrome Web Store
+* PDF viewer
+* Non-optional tracking. Google Chrome installer includes a randomly generated token. The token is sent to Google after the installation completes in order to measure the success rate. The RLZ identifier stores information – in the form of encoded strings – like the source of chrome download and installation week. It doesn’t include any personal information and it’s used to measure the effectiveness of a promotional campaign. **Chrome downloaded from Google’s website doesn’t have the RLZ identifier**. The source code to decode the strings is made open by Google.
 
-## PGP/GPG
+Chrome offers account sync between multiple devices. Part of the sync data includes credentials to Web sites. The data is encrypted with the account password.
 
-PGP is a standard for encrypting email end to end. That means only the chosen recipients can decrypt a message, unlike regular email which is read and forever archived by providers.
+Chrome's Web Store for extensions requires a [5 USD lifetime fee](https://developer.chrome.com/docs/webstore/register) in order to submit extensions. The low cost allows the development of many quality Open Source Web Extensions that do not aim to monetize through usage.
 
-**GPG**, or **GNU Privacy Guard**, is a GPL licensed program compliant with the standard.
+Chrome has the largest share of global usage and is the preferred target platform for the majority of developers. Major technologies are based on Chrome's Open Source components, such as [node.js](https://nodejs.org) which uses [Chrome's V8](https://developers.google.com/v8) Engine and the [Electron](https://electron.atom.io) framework, which is based on Chromium and node.js. Chrome's vast user base makes it the most attractive target for threat actors and security researchers. Despite constant attacks, Chrome has retained an impressive security track record over the years. This is not a small feat.
 
-**GPG** is used to verify signatures of software you download and install, as well as [symmetrically](https://en.wikipedia.org/wiki/Symmetric-key_algorithm) or [asymmetrically](https://en.wikipedia.org/wiki/Public-key_cryptography) encrypt files and text.
+Chrome offers [separate profiles](https://www.chromium.org/user-experience/multi-profiles), [robust sandboxing](https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md), [frequent updates](https://chromereleases.googleblog.com), and carries [impressive credentials](https://www.chromium.org/Home/chromium-security/brag-sheet). In addition, Google offers a very lucrative [bounty program](https://bughunters.google.com/about/rules/5745167867576320/chrome-vulnerability-reward-program-rules) for reporting vulnerabilities, along with its own [Project Zero](https://googleprojectzero.blogspot.com/) team. This means that a large number of highly talented and motivated people are constantly auditing and securing Chrome code.
 
-Install from Homebrew with `brew install gnupg2`.
+Create separate Chrome profiles to reduce XSS risk and compartmentalize cookies/identities. In each profile, either disable Javascript in Chrome settings and configure allowed origins. You should also disable the V8 Optimizer for sites where you do use Javascript to further reduce attack surface. Go to **Settings** -> **Privacy and security** -> **Security** -> **Manage v8 security** -> **Don't allow sites to use the V8 optimizer**
 
-If you prefer a graphical application, download and install [GPG Suite](https://gpgtools.org/).
+Read more about the benefits of disabling this [here](https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode).
 
-Here are several [recommended options](https://github.com/drduh/config/blob/master/gpg.conf) to add to `~/.gnupg/gpg.conf`:
+You can block trackers with [uBlock Origin Lite](https://chromewebstore.google.com/detail/ublock-origin-lite/ddkjiahejlhfcafbddmgiahcphecmpfh).
 
-```
-auto-key-locate keyserver
-keyserver hkps://hkps.pool.sks-keyservers.net
-keyserver-options no-honor-keyserver-url
-keyserver-options ca-cert-file=/etc/sks-keyservers.netCA.pem
-keyserver-options no-honor-keyserver-url
-keyserver-options debug
-keyserver-options verbose
-personal-cipher-preferences AES256 AES192 AES CAST5
-personal-digest-preferences SHA512 SHA384 SHA256 SHA224
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
-cert-digest-algo SHA512
-s2k-digest-algo SHA512
-s2k-cipher-algo AES256
-charset utf-8
-fixed-list-mode
-no-comments
-no-emit-version
-keyid-format 0xlong
-list-options show-uid-validity
-verify-options show-uid-validity
-with-fingerprint
-```
+Change the default search engine from Google to reduce additional tracking.
 
-Install the keyservers [CA certificate](https://sks-keyservers.net/verify_tls.php):
+Disable [DNS prefetching](https://www.chromium.org/developers/design-documents/dns-prefetching) (see also [DNS Prefetching and Its Privacy Implications](https://www.usenix.org/legacy/event/leet10/tech/full_papers/Krishnan.pdf) (pdf)). Note that Chrome [may attempt](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/350) to resolve DNS using Google's `8.8.8.8` and `8.8.4.4` public nameservers.
 
-    $ curl -O https://sks-keyservers.net/sks-keyservers.netCA.pem
+Read [Chromium Security](https://www.chromium.org/Home/chromium-security) and [Chromium Privacy](https://www.chromium.org/Home/chromium-privacy) for more information. Read [Google's privacy policy](https://policies.google.com/privacy) to understand how personal information is collected and used.
 
-    $ sudo mv sks-keyservers.netCA.pem /etc
+## Safari
 
-These settings will configure GnuPG to use SSL when fetching new keys and prefer strong cryptographic primitives.
+[Safari](https://www.apple.com/safari) is the default browser on macOS. It is also the most optimized browser for reducing battery use. Safari, like Chrome, has both Open Source and proprietary components. Safari is based on the open source Web Engine [WebKit](https://webkit.org), which is ubiquitous among the macOS ecosystem. WebKit is used by Apple apps such as Mail, iTunes, iBooks, and the App Store. Chrome's [Blink](https://www.chromium.org/blink) engine is a fork of WebKit and both engines share a number of similarities.
 
-See also [ioerror/duraconf/configs/gnupg/gpg.conf](https://github.com/ioerror/duraconf/blob/master/configs/gnupg/gpg.conf). You should also take some time to read [OpenPGP Best Practices](https://help.riseup.net/en/security/message-security/openpgp/best-practices).
+Safari supports certain unique features that benefit user security and privacy. [Content blockers](https://webkit.org/blog/3476/content-blockers-first-look) enables the creation of content blocking rules without using Javascript. This rule based approach greatly improves memory use, security, and privacy. Safari 11 introduced [Intelligent Tracking Prevention](https://webkit.org/blog/7675/intelligent-tracking-prevention), which removes tracking data stored in Safari after a period of non-interaction by the user from the tracker's website. Safari can randomize the browser fingerprint to reduce tracking. Safari doesn't support certain features like WebUSB or the Battery API intentionally for security and privacy reasons. Private tabs in Safari have isolated cookies and cache that is destroyed when you close the tab. Safari also support Profiles which are equivalent to Firefox's Multi-Account Containers for separating cookies and browsing. Safari can be made significantly more secure with [lockdown mode](#lockdown-mode), which can be disabled per-site. Read more about [tracking prevention](https://webkit.org/tracking-prevention) in Safari.
 
-If you don't already have a keypair, create one using `gpg --gen-key`. Also see [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide).
+Safari offers an invite-only [bounty program](https://developer.apple.com/bug-reporting) for bug reporting to a select number of security researchers. The bounty program was announced during Apple's [presentation](https://www.blackhat.com/docs/us-16/materials/us-16-Krstic.pdf) at [BlackHat](https://www.blackhat.com/us-16/briefings.html#behind-the-scenes-of-ios-security) 2016.
 
-Read [online](https://alexcabal.com/creating-the-perfect-gpg-keypair/) [guides](https://security.stackexchange.com/questions/31594/what-is-a-good-general-purpose-gnupg-key-setup) and practice encrypting and decrypting email to yourself and your friends. Get them interested in this stuff!
+Web Extensions in Safari have an additional option to use native code in the Safari's sandbox environment, in addition to Web Extension APIs. Web Extensions in Safari are also distributed through Apple's App store. App store submission comes with the added benefit of Web Extension code being audited by Apple. On the other hand App store submission comes at a steep cost. Yearly [developer subscription](https://developer.apple.com/support/compare-memberships) fee costs 100 USD (in contrast to Chrome's 5 USD fee and Firefox's free submission). The high cost is prohibitive for the majority of Open Source developers. As a result, Safari has very few extensions to choose from. However, you should keep the high cost in mind when installing extensions. It is expected that most Web Extensions will have some way of monetizing usage in order to cover developer costs. Be wary of Web Extensions whose source code is not open.
 
-## OTR
+Safari syncs user preferences and passwords with [iCloud Keychain](https://support.apple.com/HT202303). In order to be viewed in plain text, a user must input the account password of the current device. This means that users can sync data across devices with added security.
 
-OTR stands for **off-the-record** and is a cryptographic protocol for encrypting and authenticating conversations over instant messaging.
+Safari follows a slower release cycle than Chrome and Firefox (3-4 minor releases, 1 major release, per year). Newer features are slower to be adopted to the stable channel. Security updates in Safari are handled independent of the stable release schedule and are installed through the App Store.
 
-You can use OTR on top of any existing [XMPP](https://xmpp.org/about) chat service, even Google Hangouts (which only encrypts conversations between users and the server using TLS).
+See also [el1t/uBlock-Safari](https://github.com/el1t/uBlock-Safari/wiki/Disable-hyperlink-auditing-beacon) to disable hyperlink auditing beacons.
 
-The first time you start a conversation with someone new, you'll be asked to verify their public key fingerprint. Make sure to do this in person or by some other secure means (e.g. GPG encrypted mail).
+## Other browsers
 
-A popular macOS GUI client for XMPP and other chat protocols is [Adium](https://adium.im/)
+Many Chromium-derived browsers are not recommended. They are usually [closed source](https://yro.slashdot.org/comments.pl?sid=4176879&cid=44774943), [poorly maintained](https://plus.google.com/+JustinSchuh/posts/69qw9wZVH8z), and make dubious claims to protect privacy.
 
-Consider downloading the [beta version](https://beta.adium.im/) which uses OAuth2, making logging in to Google accounts [more](https://adium.im/blog/2015/04/) [secure](https://trac.adium.im/ticket/16161).
+Other miscellaneous browsers, such as [Brave](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/94), are not evaluated in this guide, so are neither recommended nor actively discouraged from use.
 
-```
-Adium_1.5.11b3.dmg
-SHA-256: 999e1931a52dc327b3a6e8492ffa9df724a837c88ad9637a501be2e3b6710078
-SHA-1:   ca804389412f9aeb7971ade6812f33ac739140e6
-```
+## Web browser privacy
 
-Remember to [disable logging](https://trac.adium.im/ticket/15722) for OTR chats with Adium.
+Web browsers reveal information in several ways, for example through the [Navigator](https://developer.mozilla.org/en-US/docs/Web/API/Navigator) interface, which may include information such as the browser version, operating system, site permissions, and the device's battery level. Many websites also use [canvas fingerprinting](https://en.wikipedia.org/wiki/Canvas_fingerprinting) to uniquely identify users across sessions.
 
-A good console-based XMPP client is [profanity](http://www.profanity.im/), which can be installed with `brew install profanity`
+For more information about security conscious browsing and what data is sent by the browser, see [HowTo: Privacy & Security Conscious Browsing](https://gist.github.com/atcuno/3425484ac5cce5298932), [browserleaks.com](https://browserleaks.com/), [Am I Unique?](https://amiunique.org/fingerprint) and [EFF Cover Your Tracks](https://coveryourtracks.eff.org/) resources.
 
-For improved anonymity, check out [Tor Messenger](https://blog.torproject.org/blog/tor-messenger-beta-chat-over-tor-easily), although it is still in beta, as well as [Ricochet](https://ricochet.im/) (which has recently received a thorough [security audit](https://ricochet.im/files/ricochet-ncc-audit-2016-01.pdf) (pdf)), which both use the Tor network rather than relying on messaging servers.
+To hinder third party trackers, it is recommended to **disable third-party cookies** altogether. Safari, Firefox, and Chrome all block third party cookies by default. A third party cookie is a cookie associated with a file requested by a different domain than the one the user is currently viewing. Most of the time third-party cookies are used to create browsing profiles by tracking a user's movement on the web. Disabling third-party cookies prevents HTTP responses and scripts from other domains from setting cookies. Moreover, cookies are removed from requests to domains that are not the document origin domain, so cookies are only sent to the current site that is being viewed.
 
-If you want to know how OTR works, read the paper [Off-the-Record Communication, or, Why Not To Use PGP](https://otr.cypherpunks.ca/otr-wpes.pdf) (pdf)
+Also be aware of [WebRTC](https://en.wikipedia.org/wiki/WebRTC#Concerns), which may reveal local or public (if connected to VPN) IP address(es). In Firefox and Chrome/Chromium this can be disabled with extensions such as [uBlock Origin](https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-leaking-local-IP-address). [Lockdown mode](#lockdown-mode) [disables WebRTC](https://www.sevarg.net/2022/07/20/ios16-lockdown-mode-browser-analysis) in Safari.
 
-## Tor
+# Tor
 
-Tor is an anonymizing proxy which can be used for browsing the Web.
+Tor is an anonymizing network which can be used for browsing the Web with additional privacy. Tor Browser is a modified version of Firefox with a proxy to access the Tor network.
 
-Download Tor Browser from the [offical Tor Project Web site](https://www.torproject.org/projects/torbrowser.html).
+Download Tor Browser from [Tor Project](https://www.torproject.org/download/).
 
-Do **not** attempt to configure other browsers or applications to use Tor as you will likely make a mistake which will compromise your anonymity.
+Do **not** attempt to configure other browsers or applications to use Tor as you may make a mistake which will compromise anonymity.
 
 Download both the `dmg` and `asc` signature files, then verify the disk image has been signed by Tor developers:
 
-```
-$ cd Downloads
+```console
+$ cd ~/Downloads
 
 $ file Tor*
-TorBrowser-6.0.5-osx64_en-US.dmg:     bzip2 compressed data, block size = 900k
-TorBrowser-6.0.5-osx64_en-US.dmg.asc: PGP signature Signature (old)
+TorBrowser-8.0.4-osx64_en-US.dmg:     bzip2 compressed data, block size = 900k
+TorBrowser-8.0.4-osx64_en-US.dmg.asc: PGP signature Signature (old)
 
 $ gpg Tor*asc
-gpg: assuming signed data in `TorBrowser-6.0.5-osx64_en-US.dmg'
-gpg: Signature made Fri Sep 16 07:51:52 2016 EDT using RSA key ID D40814E0
-gpg: Can't check signature: public key not found
+[...]
+gpg: Can't check signature: No public key
 
 $ gpg --recv 0x4E2C6E8793298290
-gpg: requesting key 0x4E2C6E8793298290 from hkp server keys.gnupg.net
 gpg: key 0x4E2C6E8793298290: public key "Tor Browser Developers (signing key) <torbrowser@torproject.org>" imported
 gpg: no ultimately trusted keys found
 gpg: Total number processed: 1
-gpg:               imported: 1  (RSA: 1)
+gpg:               imported: 1
 
-$ gpg Tor*asc
-gpg: assuming signed data in 'TorBrowser-6.0.5-osx64_en-US.dmg'
-gpg: Signature made Fri Sep 16 07:51:52 2016 EDT using RSA key ID D40814E0
+$ gpg --verify Tor*asc
+gpg: assuming signed data in 'TorBrowser-8.0.4-osx64_en-US.dmg'
+gpg: Signature made Mon Dec 10 07:16:22 2018 PST
+gpg:                using RSA key 0xEB774491D9FF06E2
 gpg: Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>" [unknown]
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the owner.
 Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290
-     Subkey fingerprint: BA1E E421 BBB4 5263 180E  1FC7 2E1A C68E D408 14E0
+     Subkey fingerprint: 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2
 ```
 
-Make sure `Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>"` appears in the output. The warning about the key not being certified is benign, as it has not yet been manually assigned trust.
+Make sure `Good signature from "Tor Browser Developers (signing key) <torbrowser@torproject.org>"` appears in the output. The warning about the key not being certified is benign, as it has not yet been assigned trust.
 
-See [How to verify signatures for packages](https://www.torproject.org/docs/verifying-signatures.html) for more information.
+See [How can I verify Tor Browser's signature?](https://support.torproject.org/tbb/how-to-verify-signature/) for more information.
 
 To finish installing Tor Browser, open the disk image and drag the it into the Applications folder, or with:
 
-```
-$ hdiutil mount TorBrowser-6.0.5-osx64_en-US.dmg
+```console
+hdiutil mount TorBrowser-8.0.4-osx64_en-US.dmg
+
+cp -r /Volumes/Tor\ Browser/Tor\ Browser.app/ ~/Applications/
 
-$ cp -rv /Volumes/Tor\ Browser/TorBrowser.app /Applications
 ```
 
-It is also possible to verify the Tor application's code signature was made by with The Tor Project's Apple developer ID **MADPSAYN6T**:
+Verify the Tor application's code signature was made by with The Tor Project's Apple developer ID **MADPSAYN6T**, using the `spctl -a -v` and/or `pkgutil --check-signature` commands:
+
+```console
+$ spctl -a -vv ~/Applications/Tor\ Browser.app
+/Users/drduh/Applications/Tor Browser.app: accepted
+source=Developer ID
+origin=Developer ID Application: The Tor Project, Inc (MADPSAYN6T)
 
+$ pkgutil --check-signature ~/Applications/Tor\ Browser.app
+Package "Tor Browser.app":
+   Status: signed by a certificate trusted by Mac OS X
+   Certificate Chain:
+    1. Developer ID Application: The Tor Project, Inc (MADPSAYN6T)
+       SHA1 fingerprint: 95 80 54 F1 54 66 F3 9C C2 D8 27 7A 29 21 D9 61 11 93 B3 E8
+       -----------------------------------------------------------------------------
+    2. Developer ID Certification Authority
+       SHA1 fingerprint: 3B 16 6C 3B 7D C4 B7 51 C9 FE 2A FA B9 13 56 41 E3 88 E1 86
+       -----------------------------------------------------------------------------
+    3. Apple Root CA
+       SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60
 ```
-$ codesign -dvv /Applications/TorBrowser.app
-Executable=/Applications/TorBrowser.app/Contents/MacOS/firefox
-Identifier=org.mozilla.tor browser
+
+You can also use the `codesign` command to examine an application's code signature:
+
+```console
+$ codesign -dvv ~/Applications/Tor\ Browser.app
+Executable=/Users/drduh/Applications/Tor Browser.app/Contents/MacOS/firefox
+Identifier=org.torproject.torbrowser
 Format=app bundle with Mach-O thin (x86_64)
-CodeDirectory v=20200 size=247 flags=0x0(none) hashes=5+3 location=embedded
+CodeDirectory v=20200 size=229 flags=0x0(none) hashes=4+3 location=embedded
 Library validation warning=OS X SDK version before 10.9 does not support Library Validation
 Signature size=4247
 Authority=Developer ID Application: The Tor Project, Inc (MADPSAYN6T)
 Authority=Developer ID Certification Authority
 Authority=Apple Root CA
-Signed Time=Nov 30, 2016, 10:40:34 AM
-Info.plist entries=21
+Signed Time=Dec 10, 2018 at 12:18:45 AM
+Info.plist entries=24
 TeamIdentifier=MADPSAYN6T
-Sealed Resources version=2 rules=12 files=130
-Internal requirements count=1 size=184
+Sealed Resources version=2 rules=12 files=128
+Internal requirements count=1 size=188
 ```
 
-To view certificate details, extract it with `codesign` and decode it with `openssl`:
+To view full certificate details for a signed application, extract them with `codesign` and decode it with `openssl`:
 
-```
-$ codesign -d --extract-certificates /Applications/TorBrowser.app
-Executable=/Applications/TorBrowser.app/Contents/MacOS/firefox
+```console
+$ codesign -d --extract-certificates ~/Applications/Tor\ Browser.app
+Executable=/Users/drduh/Applications/Tor Browser.app/Contents/MacOS/firefox
 
 $ file codesign*
 codesign0: data
@@ -1225,9 +922,9 @@ $ openssl x509 -inform der -in codesign0 -fingerprint -sha256 -noout
 SHA256 Fingerprint=B5:0D:47:F0:3E:CB:42:B6:68:1C:6F:38:06:2B:C2:9F:41:FA:D6:54:F1:29:D3:E4:DD:9C:C7:49:35:FF:F5:D9
 ```
 
-Tor traffic is **encrypted** to the [exit node](https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Exit_node_eavesdropping) (i.e., cannot be read by a passive network eavesdropper), but Tor use **can** be identified - for example, TLS handshake "hostnames" will show up in plaintext:
+Tor traffic is **encrypted** to the [exit node](https://en.wikipedia.org/wiki/Tor_(network)#Exit_node_eavesdropping) (i.e., cannot be read by a passive network eavesdropper), but Tor use **can** be identified - for example, TLS handshake "hostnames" will show up in plaintext:
 
-```
+```console
 $ sudo tcpdump -An "tcp" | grep "www"
 listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
 .............". ...www.odezz26nvv7jeqz1xghzs.com.........
@@ -1235,762 +932,707 @@ listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
 .6....m.....>...:.........|../*	Z....W....X=..6...C../....................................0...0..0.......'....F./0..	*.H........0%1#0!..U....www.b6zazzahl3h3faf4x2.com0...160402000000Z..170317000000Z0'1%0#..U....www.tm3ddrghe22wgqna5u8g.net0..0..
 ```
 
-See [Tor Protocol Specification](https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt) and [Tor/TLSHistory](https://trac.torproject.org/projects/tor/wiki/org/projects/Tor/TLSHistory) for more information.
+See [Tor Protocol Specification](https://spec.torproject.org/tor-spec/) and [Tor/TLSHistory](https://gitlab.torproject.org/legacy/trac/-/wikis/org/projects/Tor/TLSHistory) for more information.
 
-You may wish to additionally obfuscate Tor traffic using a [pluggable transport](https://www.torproject.org/docs/pluggable-transports.html), such as [Yawning/obfs4proxy](https://github.com/Yawning/obfs4) or [SRI-CSL/stegotorus](https://github.com/SRI-CSL/stegotorus).
+You may wish to additionally obfuscate Tor traffic using a [pluggable transport](https://tb-manual.torproject.org/circumvention/).
 
-This can be done by setting up your own [Tor relay](https://www.torproject.org/docs/tor-relay-debian.html) or finding an existing private or public [bridge](https://www.torproject.org/docs/bridges.html.en#RunningABridge) to serve as an obfuscating entry node.
+This can be done by setting up a [Tor relay](https://support.torproject.org/relay-operators/) or finding an existing private or [public bridge](https://bridges.torproject.org/) to serve as an obfuscating entry node.
 
-For extra security, use Tor inside a [VirtualBox](https://www.virtualbox.org/wiki/Downloads) or [VMware](https://www.vmware.com/products/fusion) virtualized [GNU/Linux](http://www.brianlinkletter.com/installing-debian-linux-in-a-virtualbox-virtual-machine/) or [BSD](http://www.openbsd.org/faq/faq4.html) machine.
+For extra security, use Tor inside a [VirtualBox](https://www.virtualbox.org/wiki/Downloads) or [VMware](https://www.vmware.com/products/fusion.html) virtualized [GNU/Linux](https://www.brianlinkletter.com/2012/10/installing-debian-linux-in-a-virtualbox-virtual-machine/) or [OpenBSD](https://www.openbsd.org/faq/faq4.html) instance.
 
-Finally, remember the Tor network provides [anonymity](https://www.privateinternetaccess.com/blog/2013/10/how-does-privacy-differ-from-anonymity-and-why-are-both-important/), which is not necessarily synonymous with privacy. The Tor network does not guarantee protection against a global observer capable of traffic analysis and [correlation](https://blog.torproject.org/category/tags/traffic-correlation). See also [Seeking Anonymity in an Internet Panopticon](http://bford.info/pub/net/panopticon-cacm.pdf) (pdf) and [Traffic Correlation on Tor by Realistic Adversaries](http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf) (pdf).
+Finally, remember the Tor network provides [anonymity](https://www.privateinternetaccess.com/blog/2013/10/how-does-privacy-differ-from-anonymity-and-why-are-both-important/), which is not necessarily synonymous with privacy. The Tor network does not guarantee protection against a global observer capable of traffic analysis and correlation. See also [Seeking Anonymity in an Internet Panopticon](https://bford.info/pub/net/panopticon-cacm.pdf) (pdf) and [Traffic Correlation on Tor by Realistic Adversaries](https://www.ohmygodel.com/publications/usersrouted-ccs13.pdf) (pdf).
 
 Also see [Invisible Internet Project (I2P)](https://geti2p.net/en/about/intro) and its [Tor comparison](https://geti2p.net/en/comparison/tor).
 
-## VPN
-
-If you use your Mac on untrusted networks - airports, cafes, etc. - your network traffic is being monitored and possibly tampered with.
-
-It is a good idea to use a VPN which encrypts **all** outgoing network traffic (i.e., not **split tunnel**) with a provider you trust. For an example of how to set up and host your own VPN, see [drduh/Debian-Privacy-Server-Guide](https://github.com/drduh/Debian-Privacy-Server-Guide).
-
-Don't just blindly sign up for a VPN service without understanding the full implications and how your traffic will be routed. If you don't understand how the VPN works or are not familiar with the software used, you are probably better off without it.
+# VPN
 
-When choosing a VPN service or setting up your own, be sure to research the protocols, key exchange algorithms, authentication mechanisms, and type of encryption being used. Some protocols, such as [PPTP](https://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security), should be avoided in favor of [OpenVPN](https://en.wikipedia.org/wiki/OpenVPN), for example.
+When choosing a VPN service or self-hosting, be sure to research the protocols, key exchange algorithms, authentication mechanisms, and type of encryption being used. Some protocols, such as [PPTP](https://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security), should be avoided in favor of [OpenVPN](https://en.wikipedia.org/wiki/OpenVPN) or Linux-based [Wireguard](https://www.wireguard.com/) [on a Linux VM](https://github.com/mrash/Wireguard-macOS-LinuxVM) or via a set of [cross platform tools](https://www.wireguard.com/xplatform/).
 
 Some clients may send traffic over the next available interface when VPN is interrupted or disconnected. See [scy/8122924](https://gist.github.com/scy/8122924) for an example on how to allow traffic only over VPN.
 
-Another set of scripts to lock down your system so it will only access the internet via a VPN can be found as part of the Voodoo Privacy project - [sarfata/voodooprivacy](https://github.com/sarfata/voodooprivacy) and there is an updated guide to setting up an IPSec VPN on a virtual machine ([hwdsl2/setup-ipsec-vpn](https://github.com/hwdsl2/setup-ipsec-vpn)) or a docker container ([hwdsl2/docker-ipsec-vpn-server](https://github.com/hwdsl2/docker-ipsec-vpn-server)).
-
-## Viruses and malware
-
-There is an [ever-increasing](https://www.documentcloud.org/documents/2459197-bit9-carbon-black-threat-research-report-2015.html) amount of Mac malware in the wild. Macs aren't immune from viruses and malicious software!
-
-Some malware comes bundled with both legitimate software, such as the [Java bundling Ask Toolbar](http://www.zdnet.com/article/oracle-extends-its-adware-bundling-to-include-java-for-macs/), and some with illegitimate software, such as [Mac.BackDoor.iWorm](https://docs.google.com/document/d/1YOfXRUQJgMjJSLBSoLiUaSZfiaS_vU3aG4Bvjmz6Dxs/edit?pli=1) bundled with pirated programs. [Malwarebytes Anti-Malware for Mac](https://www.malwarebytes.com/antimalware/mac/) is an excellent program for ridding oneself of "garden-variety" malware and other "crapware".
-
-See [Methods of malware persistence on Mac OS X](https://www.virusbtn.com/pdf/conference/vb2014/VB2014-Wardle.pdf) (pdf) and [Malware Persistence on OS X Yosemite](https://www.rsaconference.com/events/us15/agenda/sessions/1591/malware-persistence-on-os-x-yosemite) to learn about how garden-variety malware functions.
-
-You could periodically run a tool like [Knock Knock](https://github.com/synack/knockknock) to examine persistent applications (e.g. scripts, binaries). But by then, it is probably too late. Maybe applications such as [Block Block](https://objective-see.com/products/blockblock.html) and [Ostiarius](https://objective-see.com/products/ostiarius.html) will help. See warnings and caveats in [issue #90](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/90) first, however.  Using an application such as [Little Flocker](https://www.littleflocker.com/) can also protect parts of the filesystem from unauthorized writes similar to how Little Snitch protects the network (note, however, the software is still in beta and should be [used with caution](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/pull/128)).
-
-**Anti-virus** programs are a double-edged sword -- not useful for **advanced** users and will likely increase attack surface against sophisticated threats, however possibly useful for catching "garden variety" malware on **novice** users' Macs. There is also the additional processing overhead to consider.
-
-See [Sophail: Applied attacks against  Antivirus](https://lock.cmpxchg8b.com/sophailv2.pdf) (pdf), [Analysis and Exploitation of an ESET Vulnerability](http://googleprojectzero.blogspot.ro/2015/06/analysis-and-exploitation-of-eset.html), [a trivial Avast RCE](https://code.google.com/p/google-security-research/issues/detail?id=546), [Popular Security Software Came Under Relentless NSA and GCHQ Attacks](https://theintercept.com/2015/06/22/nsa-gchq-targeted-kaspersky/), and [AVG: "Web TuneUP" extension multiple critical vulnerabilities](https://code.google.com/p/google-security-research/issues/detail?id=675).
-
-Therefore, the best anti-virus is **Common Sense 2017**. See more discussion in [issue #44](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/44).
-
-Local privilege escalation bugs are plenty on macOS, so always be careful when downloading and running untrusted programs or trusted programs from third party websites or downloaded over HTTP ([example](http://arstechnica.com/security/2015/08/0-day-bug-in-fully-patched-os-x-comes-under-active-exploit-to-hijack-macs/)).
+There is an updated guide to setting up an IPSec VPN on a virtual machine ([hwdsl2/setup-ipsec-vpn](https://github.com/hwdsl2/setup-ipsec-vpn)) or a docker container ([hwdsl2/docker-ipsec-vpn-server](https://github.com/hwdsl2/docker-ipsec-vpn-server)).
 
-Have a look at [The Safe Mac](http://www.thesafemac.com/) for past and current Mac security news.
+It may be worthwhile to consider the geographical location of the VPN provider. See further discussion in [issue 114](https://github.com/drduh/macOS-Security-and-Privacy-Guide/issues/114).
 
-Also check out [Hacking Team](https://www.schneier.com/blog/archives/2015/07/hacking_team_is.html) malware for Mac OS: [root installation for MacOS](https://github.com/hackedteam/vector-macos-root), [Support driver for Mac Agent](https://github.com/hackedteam/driver-macos) and [RCS Agent for Mac](https://github.com/hackedteam/core-macos), which is a good example of advanced malware with capabilities to hide from **userland** (e.g., `ps`, `ls`), for example. For more, see [A Brief Analysis of an RCS Implant Installer](https://objective-see.com/blog/blog_0x0D.html) and [reverse.put.as](https://reverse.put.as/2016/02/29/the-italian-morons-are-back-what-are-they-up-to-this-time/)
+Also see this [technical overview](https://blog.timac.org/2018/0717-macos-vpn-architecture/) of the macOS built-in VPN L2TP/IPSec and IKEv2 client.
 
-## System Integrity Protection
+# PGP/GPG
 
-[System Integrity Protection](https://support.apple.com/en-us/HT204899) (SIP) is a security feature since OS X 10.11 "El Capitan". It is enabled by default, but [can be disabled](https://derflounder.wordpress.com/2015/10/01/system-integrity-protection-adding-another-layer-to-apples-security-model/), which may be necessary to change some system settings, such as deleting root certificate authorities or unloading certain launch daemons. Keep this feature on, as it is by default.
+PGP is a standard for signing and encrypting data (especially email) end-to-end, so only the sender and recipient can access it.
 
-From [What's New in OS X 10.11](https://developer.apple.com/library/prerelease/mac/releasenotes/MacOSX/WhatsNewInOSX/Articles/MacOSX10_11.html):
+GPG, or **GNU Privacy Guard**, is a GPL-licensed open source program compliant with the PGP standard.
 
-> A new security policy that applies to every running process, including privileged code and code that runs out of the sandbox. The policy extends additional protections to components on disk and at run-time, only allowing system binaries to be modified by the system installer and software updates. Code injection and runtime attachments to system binaries are no longer permitted.
+GPG is used to verify signatures of software you download and install, as well as [symmetrically](https://en.wikipedia.org/wiki/Symmetric-key_algorithm) or [asymmetrically](https://en.wikipedia.org/wiki/Public-key_cryptography) encrypt files and text.
 
-Also see [What is the “rootless” feature in El Capitan, really?](https://apple.stackexchange.com/questions/193368/what-is-the-rootless-feature-in-el-capitan-really)
+Install from Homebrew with `brew install gnupg`.
 
-Some MacBook hardware has shipped with [SIP disabled](http://appleinsider.com/articles/16/11/17/system-integrity-protection-disabled-by-default-on-some-touch-bar-macbook-pros). To verify SIP is enabled, use the command `csrutil status`, which should return: `System Integrity Protection status: enabled.` Otherwise, [enable SIP](https://developer.apple.com/library/content/documentation/Security/Conceptual/System_Integrity_Protection_Guide/ConfiguringSystemIntegrityProtection/ConfiguringSystemIntegrityProtection.html) through Recovery Mode.
-
-## Gatekeeper and XProtect
-
-**Gatekeeper** and the **quarantine** system try to prevent unsigned or "bad" programs and files from running and opening.
-
-**XProtect** prevents the execution of known bad files and outdated plugin versions, but does nothing to cleanup or stop existing malware.
-
-Both offer trivial protection against common risks and are fine at default settings.
-
-See also [Mac Malware Guide : How does Mac OS X protect me?](http://www.thesafemac.com/mmg-builtin/) and [Gatekeeper, XProtect and the Quarantine attribute](http://ilostmynotes.blogspot.com/2012/06/gatekeeper-xprotect-and-quarantine.html).
-
-**Note** Quarantine stores information about downloaded files in `~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2`, which may pose a privacy risk. To examine the file, simply use `strings` or the following command:
-
-    $ echo 'SELECT datetime(LSQuarantineTimeStamp + 978307200, "unixepoch") as LSQuarantineTimeStamp, LSQuarantineAgentName, LSQuarantineOriginURLString, LSQuarantineDataURLString from LSQuarantineEvent;' | sqlite3 /Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-See [here](http://www.zoharbabin.com/hey-mac-i-dont-appreciate-you-spying-on-me-hidden-downloads-log-in-os-x/) for more information.
-
-To permanently disable this feature, [clear the file](https://superuser.com/questions/90008/how-to-clear-the-contents-of-a-file-from-the-command-line) and [make it immutable](http://hints.macworld.com/article.php?story=20031017061722471):
-
-    $ :>~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-    $ sudo chflags schg ~/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
-
-Furthermore, macOS attaches metadata ([HFS+ extended attributes](https://en.wikipedia.org/wiki/Extended_file_attributes#OS_X)) to downloaded files, which can be viewed with the `mdls` and `xattr` commands:
-
-```
-$ ls -l@ ~/Downloads/TorBrowser-6.0.8-osx64_en-US.dmg
--rw-r--r--@ 1 drduh  staff  59322237 Dec  1 12:00 TorBrowser-6.0.8-osx64_en-US.dmg
-com.apple.metadata:kMDItemWhereFroms	     186
-com.apple.quarantine	      68
-
-$ mdls ~/Downloads/TorBrowser-6.0.8-osx64_en-US.dmg
-_kMDItemOwnerUserID            = 501
-kMDItemContentCreationDate     = 2016-12-01 12:00:00 +0000
-kMDItemContentModificationDate = 2016-12-01 12:00:00 +0000
-kMDItemContentType             = "com.apple.disk-image-udif"
-kMDItemContentTypeTree         = (
-    "public.archive",
-    "public.item",
-    "public.data",
-    "public.disk-image",
-    "com.apple.disk-image",
-    "com.apple.disk-image-udif"
-)
-kMDItemDateAdded               = 2016-12-01 12:00:00 +0000
-kMDItemDisplayName             = "TorBrowser-6.0.8-osx64_en-US.dmg"
-kMDItemFSContentChangeDate     = 2016-12-01 12:00:00 +0000
-kMDItemFSCreationDate          = 2016-12-01 12:00:00 +0000
-kMDItemFSCreatorCode           = ""
-kMDItemFSFinderFlags           = 0
-kMDItemFSHasCustomIcon         = (null)
-kMDItemFSInvisible             = 0
-kMDItemFSIsExtensionHidden     = 0
-kMDItemFSIsStationery          = (null)
-kMDItemFSLabel                 = 0
-kMDItemFSName                  = "TorBrowser-6.0.8-osx64_en-US.dmg"
-kMDItemFSNodeCount             = (null)
-kMDItemFSOwnerGroupID          = 5000
-kMDItemFSOwnerUserID           = 501
-kMDItemFSSize                  = 60273898
-kMDItemFSTypeCode              = ""
-kMDItemKind                    = "Disk Image"
-kMDItemLogicalSize             = 60273898
-kMDItemPhysicalSize            = 60276736
-kMDItemWhereFroms              = (
-    "https://dist.torproject.org/torbrowser/6.0.8/TorBrowser-6.0.8-osx64_en-US.dmg",
-    "https://www.torproject.org/projects/torbrowser.html.en"
-)
-
-$ xattr -l TorBrowser-6.0.8-osx64_en-US.dmg
-com.apple.metadata:kMDItemWhereFroms:
-00000000  62 70 6C 69 73 74 30 30 A2 01 02 5F 10 4D 68 74  |bplist00..._.Mht|
-00000010  74 70 73 3A 2F 2F 64 69 73 74 2E 74 6F 72 70 72  |tps://dist.torpr|
-00000020  6F 6A 65 63 74 2E 6F 72 67 2F 74 6F 72 62 72 6F  |oject.org/torbro|
-00000030  77 73 65 72 2F 36 2E 30 2E 38 2F 54 6F 72 42 72  |wser/6.0.8/TorBr|
-00000040  6F 77 73 65 72 2D 36 2E 30 2E 38 2D 6F 73 78 36  |owser-6.0.8-osx6|
-00000050  34 5F 65 6E 2D 55 53 2E 64 6D 67 5F 10 36 68 74  |4_en-US.dmg_.6ht|
-00000060  74 70 73 3A 2F 2F 77 77 77 2E 74 6F 72 70 72 6F  |tps://www.torpro|
-00000070  6A 65 63 74 2E 6F 72 67 2F 70 72 6F 6A 65 63 74  |ject.org/project|
-00000080  73 2F 74 6F 72 62 72 6F 77 73 65 72 2E 68 74 6D  |s/torbrowser.htm|
-00000090  6C 2E 65 6E 08 0B 5B 00 00 00 00 00 00 01 01 00  |l.en..[.........|
-000000A0  00 00 00 00 00 00 03 00 00 00 00 00 00 00 00 00  |................|
-000000B0  00 00 00 00 00 00 94                             |.......|
-000000b7
-com.apple.quarantine: 0081;58519ffa;Google Chrome.app;1F032CAB-F5A1-4D92-84EB-CBECA971B7BC
-```
+If you prefer a graphical application, download and install [GPG Suite](https://gpgtools.org/).
 
-Metadata attributes can also be removed with the `-d` flag:
+Download [drduh/config/gpg.conf](https://github.com/drduh/config/blob/main/gpg.conf) to use recommended settings:
 
+```console
+curl -o ~/.gnupg/gpg.conf https://raw.githubusercontent.com/drduh/config/main/gpg.conf
 ```
-$ xattr -d com.apple.metadata:kMDItemWhereFroms ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
-
-$ xattr -d com.apple.quarantine ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
 
-$ xattr -l ~/Downloads/TorBrowser-6.0.5-osx64_en-US.dmg
-[No output after removal.]
-```
+See [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide) to securely generate and store GPG keys.
 
-## Passwords
+Read [online](https://alexcabal.com/creating-the-perfect-gpg-keypair/) [guides](https://security.stackexchange.com/questions/31594/what-is-a-good-general-purpose-gnupg-key-setup) and [practice](https://help.riseup.net/en/security/message-security/openpgp/best-practices) encrypting and decrypting email to yourself and your friends. Get them interested in this stuff!
 
-You can generate strong passwords with OpenSSL:
+# Messengers
 
-    $ openssl rand -base64 30
-    LK9xkjUEAemc1gV2Ux5xqku+PDmMmCbSTmwfiMRI
+## XMPP
 
-Or GPG:
+XMPP is an [open standard](https://xmpp.org/extensions) developed by the [IETF](https://www.ietf.org) that allows for cross-platform federated messaging. There are many options for [clients](https://xmpp.org/getting-started). Consider using one of the browser-based clients to take advantage of the browser's sandbox.
 
-    $ gpg --gen-random -a 0 30
-    4/bGZL+yUEe8fOqQhF5V01HpGwFSpUPwFcU3aOWQ
+Depending on the provider, you might not need anything other than a username and password to set up an account.
 
-Or `/dev/urandom` output:
+XMPP isn't E2EE by default, you'll need to use [OMEMO](https://omemo.top) encryption, so make sure the client supports it.
 
-    $ dd if=/dev/urandom bs=1 count=30 2>/dev/null | base64
-    CbRGKASFI4eTa96NMrgyamj8dLZdFYBaqtWUSxKe
+## Signal
 
-With control over character sets:
+[Signal](https://www.signal.org) is an advanced E2EE messenger whose [double-ratchet](https://signal.org/docs/specifications/doubleratchet/) protocol is used by countless other messengers including WhatsApp, Google Messages, and Facebook Messenger.
 
-    $ LANG=C tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 40 | head -n 1
-    jm0iKn7ngQST8I0mMMCbbi6SKPcoUWwCb5lWEjxK
+Signal requires a phone number to sign up and you'll need to install it on a phone first before you can use it on desktop.
 
-    $ LANG=C tr -dc 'DrDuh0-9' < /dev/urandom | fold -w 40 | head -n 1
-    686672u2Dh7r754209uD312hhh23uD7u41h3875D
+## iMessage
 
-You can also generate passwords, even memorable ones, using **Keychain Access** password assistant, or a command line equivalent like [anders/pwgen](https://github.com/anders/pwgen).
+iMessage is Apple's first party messenger. It requires an [Apple Account](#apple-account) in order to use it.
 
-Keychains are encrypted with a [PBKDF2 derived key](https://en.wikipedia.org/wiki/PBKDF2) and are a _pretty safe_ place to store credentials. See also [Breaking into the OS X keychain](http://juusosalonen.com/post/30923743427/breaking-into-the-os-x-keychain). Also be aware that Keychain [does not encrypt](https://github.com/drduh/OS-X-Security-and-Privacy-Guide/issues/118) the names corresponding to password entries.
+Make sure to enable [Contact Key Verification](https://support.apple.com/118246) and verify with anyone you message to ensure that you're messaging the right person.
 
-Alternatively, you can manage an encrypted passwords file yourself with GnuPG (shameless plug for my [drduh/pwd.sh](https://github.com/drduh/pwd.sh) password manager script).
+You can use iMessage with either a [phone number or an email](https://support.apple.com/108758#help), so pick one that you're comfortable with contacts seeing.
 
-In addition to passwords, ensure eligible online accounts, such as GitHub, Google accounts, banking, have [two factor authentication](https://en.wikipedia.org/wiki/Two-factor_authentication) enabled.
+> [!WARNING]
+> By default, iCloud backup is enabled, which stores copies of message encryption keys on [Apple's servers](https://support.apple.com/102651) without E2EE. Either [disable iCloud backup](https://support.apple.com/guide/icloud/view-and-manage-backups-mm122d3ef202/1.0/icloud/1.0) or enable [Advanced Data Protection](https://support.apple.com/guide/security/advanced-data-protection-for-icloud-sec973254c5f) to prevent this. Remind messaging recipients to do the same.
 
-Look to [Yubikey](https://www.yubico.com/products/yubikey-hardware/yubikey-neo/) for a two factor and private key (e.g., ssh, gpg) hardware token. See [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide) and [trmm.net/Yubikey](https://trmm.net/Yubikey). One of two Yubikey's slots can also be programmed to emit a long, static password (which can be used in combination with a short, memorized password, for example).
+# Viruses and malware
 
-In Addition to Login and other pam modules you can use Yubikey to secure your login and sudo, here is a pdf guide from [Yubico](https://www.yubico.com/wp-content/uploads/2016/02/Yubico_YubiKeyMacOSXLogin_en.pdf). Yubikey are a bit pricey, there is cheaper alternative, but not as capable, [U2F Zero](https://www.u2fzero.com/). Here is a great guide to [set it up](https://microamps.gibsjose.com/u2f-authentication-on-os-x/)
+There is an [ever-increasing](https://www.documentcloud.org/documents/2459197-bit9-carbon-black-threat-research-report-2015.html) amount of Mac malware in the wild. Macs aren't immune from viruses and malicious software!
 
-## Backup
+Some malware comes bundled with both legitimate software, such as the [Java bundling Ask Toolbar](https://www.zdnet.com/article/oracle-extends-its-adware-bundling-to-include-java-for-macs/), and some with illegitimate software, such as [Mac.BackDoor.iWorm](https://docs.google.com/document/d/1YOfXRUQJgMjJSLBSoLiUaSZfiaS_vU3aG4Bvjmz6Dxs/edit?pli=1) bundled with pirated programs.
 
-Always encrypt files locally before backing them up to external media or online services.
+See [Methods of malware persistence on Mac OS X](https://www.virusbtn.com/pdf/conference/vb2014/VB2014-Wardle.pdf) (pdf) and [Malware Persistence on OS X Yosemite](https://www.rsaconference.com/events/us15/agenda/sessions/1591/malware-persistence-on-os-x-yosemite) to learn about how garden-variety malware functions.
 
-One way is to use a symmetric cipher with GPG and a password of your choosing.
+Subscribe to updates at the [Malwarebytes Blog](https://blog.malwarebytes.com/) for current Mac security news.
 
-To encrypt a directory:
+Also check out [Hacking Team](https://www.schneier.com/blog/archives/2015/07/hacking_team_is.html) malware for macOS: [root installation for MacOS](https://github.com/hackedteam/vector-macos-root), [Support driver for Mac Agent](https://github.com/hackedteam/driver-macos) and [RCS Agent for Mac](https://github.com/hackedteam/core-macos), which is a good example of advanced malware with capabilities to hide from userland (e.g., `ps`, `ls`). For more, see [A Brief Analysis of an RCS Implant Installer](https://objective-see.com/blog/blog_0x0D.html) and [reverse.put.as](https://reverse.put.as/2016/02/29/the-italian-morons-are-back-what-are-they-up-to-this-time/)
 
-    $ tar zcvf - ~/Downloads | gpg -c > ~/Desktop/backup-$(date +%F-%H%M).tar.gz.gpg
+## Downloading Software
 
-To decrypt an archive:
+Only running programs from the App Store or that are [Notarized](https://support.apple.com/guide/security/app-code-signing-process-sec3ad8e6e53/web) by Apple will help mitigate malware. Apple performs an automated scan on notarized apps for malware. App Store apps undergo a [review](https://developer.apple.com/app-store/review/guidelines/) process to catch malware.
 
-    $ gpg -o ~/Desktop/decrypted-backup.tar.gz -d ~/Desktop/backup-2015-01-01-0000.tar.gz.gpg && \
-      tar zxvf ~/Desktop/decrypted-backup.tar.gz
+Otherwise, get programs from trusted sources like directly from the developer's website or GitHub. Always make sure that the browser/terminal is using HTTPS when downloading any program.
 
-You may also create encrypted volumes using **Disk Utility** or `hdiutil`:
+You should also avoid programs that ask for lots of permissions and third party closed source programs. Open source code allows anyone to audit and examine the code for security/privacy issues.
 
-    $ hdiutil create ~/Desktop/encrypted.dmg -encryption -size 1g -volname "Name" -fs JHFS+
+## App Sandbox
 
-Also see the following applications and services: [SpiderOak](https://spideroak.com/), [Arq](https://www.arqbackup.com/), [Espionage](https://www.espionageapp.com/), and [restic](https://restic.github.io/).
+Check if a program uses the [App Sandbox](https://developer.apple.com/documentation/security/app_sandbox/protecting_user_data_with_app_sandbox) before running it by running the following command:
 
-## Wi-Fi
+```console
+codesign -dvvv --entitlements - <path to application>
+```
 
-macOS remembers access points it has connected to. Like all wireless devices, the Mac will broadcast all access point names it remembers (e.g., *MyHomeNetwork*) each time it looks for a network, such as when waking from sleep.
+With the App Sandbox enabled:
 
-This is a privacy risk, so remove networks from the list in **System Preferences** > **Network** > **Advanced** when they're no longer needed.
+```console
+[Key] com.apple.security.app-sandbox
+[Value]
+    [Bool] true
+```
 
-Also see [Signals from the Crowd: Uncovering Social Relationships through Smartphone Probes](http://conferences.sigcomm.org/imc/2013/papers/imc148-barberaSP106.pdf) (pdf) and [Wi-Fi told me everything about you](http://confiance-numerique.clermont-universite.fr/Slides/M-Cunche-2014.pdf) (pdf).
+Alternatively, you can check while the app is running by opening Activity Monitor and adding the "Sandbox" column.
 
-Saved Wi-Fi information (SSID, last connection, etc.) can be found in `/Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist`
+All App Store software is required to use the App Sandbox.
 
-You may wish to [spoof the MAC address](https://en.wikipedia.org/wiki/MAC_spoofing) of your network card before connecting to new and untrusted wireless networks to mitigate passive fingerprinting:
+Browsers like Google Chrome use their own [sandbox](https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md) so they don't use the App Sandbox.
 
-    $ sudo ifconfig en0 ether $(openssl rand -hex 6 | sed 's%\(..\)%\1:%g; s%.$%%')
+## Hardened Runtime
 
-**Note** MAC addresses will reset to hardware defaults on each boot.
+Check if a program uses the [Hardened Runtime](https://developer.apple.com/documentation/security/hardened_runtime) before running it using the following command:
 
-Also see [feross/SpoofMAC](https://github.com/feross/SpoofMAC).
+```console
+codesign --display --verbose /path/to/bundle.app
+```
 
-Finally, WEP protection on wireless networks is [not secure](http://www.howtogeek.com/167783/htg-explains-the-difference-between-wep-wpa-and-wpa2-wireless-encryption-and-why-it-matters/) and you should favor connecting to **WPA2** protected networks only to mitigate the risk of passive eavesdroppers.
+If Hardened Runtime is enabled, you will see `flags=0x10000(runtime)`. The "runtime" means Hardened Runtime is enabled. There might be other flags, but the runtime flag is what we're looking for here.
 
-## SSH
+You can enable a column in Activity Monitor called "Restricted" which is a flag that prevents programs from injecting code via macOS's [dynamic linker](https://pewpewthespells.com/blog/blocking_code_injection_on_ios_and_os_x.html). Ideally, this should say "Yes".
 
-For outgoing ssh connections, use hardware- or password-protected keys, [set up](http://nerderati.com/2011/03/17/simplify-your-life-with-an-ssh-config-file/) remote hosts and consider [hashing](http://nms.csail.mit.edu/projects/ssh/) them for added privacy.
+Notarized applications are required to use the Hardened Runtime.
 
-Here are several recommended [options](https://www.freebsd.org/cgi/man.cgi?query=ssh_config&sektion=5) to add to  `~/.ssh/config`:
+## Antivirus
 
-    Host *
-      PasswordAuthentication no
-      ChallengeResponseAuthentication no
-      HashKnownHosts yes
+To scan an application with multiple AV products and examine its behavior, upload it to [VirusTotal](https://www.virustotal.com/#/home/upload) before running it.
 
-**Note** [macOS Sierra permanently remembers SSH key passphrases by default](https://openradar.appspot.com/28394826). Append the option `UseKeyChain no` to turn this feature off.
+macOS comes with a built-in AV program called [XProtect](https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8). XProtect automatically runs in the background and updates its signatures that it uses to detect malware without you having to do anything. If it detects malware already running, it will work to remove and mitigate it just like any other AV program.
 
-You can also use ssh to create an [encrypted tunnel](http://blog.trackets.com/2014/05/17/ssh-tunnel-local-and-remote-port-forwarding-explained-with-examples.html) to send your traffic through, which is similar to a VPN.
+Applications such as [BlockBlock](https://objective-see.com/products/blockblock.html) or [maclaunch.sh](https://github.com/hazcod/maclaunch) might help prevent persistent malware.
 
-For example, to use Privoxy on a remote host:
+Locally installed **Anti-virus** programs are generally a double-edged sword: they may catch "garden variety" malware, but also may increase the attack surface for sophisticated adversaries due to their privileged operating mode. They also typically phone home to send samples in order to catch the newest malware. This can be a privacy concern.
 
-    $ ssh -C -L 5555:127.0.0.1:8118 you@remote-host.tld
+See [Sophail: Applied attacks against Antivirus](https://lock.cmpxchg8b.com/sophailv2.pdf) (pdf), [Analysis and Exploitation of an ESET Vulnerability](https://googleprojectzero.blogspot.ro/2015/06/analysis-and-exploitation-of-eset.html), [Popular Security Software Came Under Relentless NSA and GCHQ Attacks](https://theintercept.com/2015/06/22/nsa-gchq-targeted-kaspersky/), and [How Israel Caught Russian Hackers Scouring the World for U.S. Secrets](https://www.nytimes.com/2017/10/10/technology/kaspersky-lab-israel-russia-hacking.html).
 
-    $ sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 5555
+## Gatekeeper
 
-    $ sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 5555
+**Gatekeeper** tries to prevent non-notarized applications from running.
 
-Or to use an ssh connection as a [SOCKS proxy](https://www.mikeash.com/ssh_socks.html):
+If you try to run an app that isn't notarized, Gatekeeper will give you a warning. This can be easily bypassed if you go to **Privacy & Security**, scroll down to the bottom and click **Open** on your app. Then Gatekeeper will allow you to run it.
 
-    $ ssh -NCD 3000 you@remote-host.tld
+Gatekeeper does not cover all binaries - only applications - so exercise caution when running other file types.
 
-By default, macOS does **not** have sshd or *Remote Login* enabled.
+# System Integrity Protection
 
-To enable sshd and allow incoming ssh connections:
+To verify SIP is enabled, use the command `csrutil status`, which should return: `System Integrity Protection status: enabled.` Otherwise, [enable SIP](https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection) through Recovery Mode.
 
-    $ sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist
+# Metadata and artifacts
 
-Or use the **System Preferences** > **Sharing** menu.
+macOS attaches metadata ([APFS extended attributes](https://en.wikipedia.org/wiki/Extended_file_attributes#OS_X)) to downloaded files, which can be viewed with the `mdls` and `xattr` commands:
 
-If you are going to enable sshd, at least disable password authentication and consider further [hardening](https://stribika.github.io/2015/01/04/secure-secure-shell.html) your configuration.
+```console
+$ ls -l@ ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
+-rw-r--r--@ 1 drduh staff 63M Jan 1 12:00 TorBrowser-8.0.4-osx64_en-US.dmg
+	com.apple.metadata:kMDItemWhereFroms	  46B
+	com.apple.quarantine	  57B
 
-To `/etc/sshd_config`, add:
+$ mdls ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
+kMDItemContentCreationDate         = 2019-01-01 00:00:00 +0000
+kMDItemContentCreationDate_Ranking = 2019-01-01 00:00:00 +0000
+kMDItemContentModificationDate     = 2019-01-01 00:00:00 +0000
+kMDItemContentType                 = "com.apple.disk-image-udif"
+kMDItemContentTypeTree             = (
+    "public.archive",
+    "public.item",
+    "public.data",
+    "public.disk-image",
+    "com.apple.disk-image",
+    "com.apple.disk-image-udif"
+)
+kMDItemDateAdded                   = 2019-01-01 00:00:00 +0000
+kMDItemDateAdded_Ranking           = 2019-01-01 00:00:00 +0000
+kMDItemDisplayName                 = "TorBrowser-8.0.4-osx64_en-US.dmg"
+kMDItemFSContentChangeDate         = 2019-01-01 00:00:00 +0000
+kMDItemFSCreationDate              = 2019-01-01 00:00:00 +0000
+kMDItemFSCreatorCode               = ""
+kMDItemFSFinderFlags               = 0
+kMDItemFSHasCustomIcon             = (null)
+kMDItemFSInvisible                 = 0
+kMDItemFSIsExtensionHidden         = 0
+kMDItemFSIsStationery              = (null)
+kMDItemFSLabel                     = 0
+kMDItemFSName                      = "TorBrowser-8.0.4-osx64_en-US.dmg"
+kMDItemFSNodeCount                 = (null)
+kMDItemFSOwnerGroupID              = 5000
+kMDItemFSOwnerUserID               = 501
+kMDItemFSSize                      = 65840402
+kMDItemFSTypeCode                  = ""
+kMDItemInterestingDate_Ranking     = 2019-01-01 00:00:00 +0000
+kMDItemKind                        = "Disk Image"
+kMDItemWhereFroms                  = (
+    "https://dist.torproject.org/torbrowser/8.0.4/TorBrowser-8.0.4-osx64_en-US.dmg",
+    "https://www.torproject.org/projects/torbrowser.html.en"
+)
 
+$ xattr -l ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
+com.apple.metadata:kMDItemWhereFroms:
+00000000  62 70 6C 69 73 74 30 30 A2 01 02 5F 10 4D 68 74  |bplist00..._.Mht|
+00000010  74 70 73 3A 2F 2F 64 69 73 74 2E 74 6F 72 70 72  |tps://dist.torpr|
+00000020  6F 6A 65 63 74 2E 6F 72 67 2F 74 6F 72 62 72 6F  |oject.org/torbro|
+[...]
+com.apple.quarantine: 0081;58519ffa;Google Chrome.app;1F032CAB-F5A1-4D92-84EB-CBECA971B7BC
 ```
-PasswordAuthentication no
-ChallengeResponseAuthentication no
-UsePAM no
-```
-
- Confirm whether sshd is enabled or disabled:
 
-    $ sudo lsof -Pni TCP:22
-
-## Physical access
-
-Keep your Mac physically secure at all times. Don't leave it unattended in hotels and such.
-
-A skilled attacker with unsupervised physical access to your computer can infect the boot ROM to install a keylogger and steal your password - see [Thunderstrike](https://trmm.net/Thunderstrike), for example.
-
-A helpful tool is [usbkill](https://github.com/hephaest0s/usbkill), which is *"an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer"*.
-
-Consider purchasing a [privacy filter](https://www.amazon.com/s/ref=nb_sb_noss_2?url=node%3D15782001&field-keywords=macbook) for your screen to thwart shoulder surfers.
-
-## System monitoring
+Metadata attributes can also be removed with the `-d` flag:
 
-#### OpenBSM audit
+```console
+xattr -d com.apple.metadata:kMDItemWhereFroms ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
 
-macOS has a powerful OpenBSM auditing capability. You can use it to monitor process execution, network activity, and much more.
-
-To tail audit logs, use the `praudit` utility:
+xattr -d com.apple.quarantine ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
 
-```
-$ sudo praudit -l /dev/auditpipe
-header,201,11,execve(2),0,Thu Sep  1 12:00:00 2015, + 195 msec,exec arg,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,attribute,100755,root,wheel,16777220,986535,0,subject,drduh,root,wheel,root,wheel,412,100005,50511731,0.0.0.0,return,success,0,trailer,201,
-header,88,11,connect(2),0,Thu Sep  1 12:00:00 2015, + 238 msec,argument,1,0x5,fd,socket-inet,2,443,173.194.74.104,subject,drduh,root,wheel,root,wheel,326,100005,50331650,0.0.0.0,return,failure : Operation now in progress,4354967105,trailer,88
-header,111,11,OpenSSH login,0,Thu Sep  1 12:00:00 2015, + 16 msec,subject_ex,drduh,drduh,staff,drduh,staff,404,404,49271,::1,text,successful login drduh,return,success,0,trailer,111,
+xattr -l ~/Downloads/TorBrowser-8.0.4-osx64_en-US.dmg
 ```
 
-See the manual pages for `audit`, `praudit`, `audit_control` and other files in `/etc/security`
+Other metadata and artifacts may be found in the directories including, but not limited to, `~/Library/Preferences/`, `~/Library/Containers/<APP>/Data/Library/Preferences`, `/Library/Preferences`, some of which is detailed below.
 
-**Note** although `man audit` says the `-s` flag will synchronize the audit configuration, it appears necessary to reboot for changes to take effect.
+`~/Library/Preferences/com.apple.sidebarlists.plist` contains historical list of volumes attached. To clear it, use the command `/usr/libexec/PlistBuddy -c "delete :systemitems:VolumesList" ~/Library/Preferences/com.apple.sidebarlists.plist`
 
-See articles on [ilostmynotes.blogspot.com](http://ilostmynotes.blogspot.com/2013/10/openbsm-auditd-on-os-x-these-are-logs.html) and [derflounder.wordpress.com](https://derflounder.wordpress.com/2012/01/30/openbsm-auditing-on-mac-os-x/) for more information.
+`/Library/Preferences/com.apple.Bluetooth.plist` contains Bluetooth metadata, including device history. If Bluetooth is not used, the metadata can be cleared with:
 
-#### DTrace
-
-`iosnoop` monitors disk I/O
-
-`opensnoop` monitors file opens
-
-`execsnoop` monitors execution of processes
-
-`errinfo` monitors failed system calls
-
-`dtruss` monitors all system calls
-
-See `man -k dtrace` for more information.
+```console
+sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist DeviceCache
+sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist IDSPairedDevices
+sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist PANDevices
+sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist PANInterfaces
+sudo defaults delete /Library/Preferences/com.apple.Bluetooth.plist SCOAudioDevices
+```
 
-**Note** [System Integrity Protection](https://github.com/drduh/OS-X-Security-and-Privacy-Guide#system-integrity-protection) [interferes](http://internals.exposed/blog/dtrace-vs-sip.html) with DTrace, so it may no longer be possible to use these tools.
+`/var/spool/cups` contains the CUPS printer job cache. To clear it, use the commands:
 
-#### Execution
+```console
+sudo rm -rfv /var/spool/cups/c0*
+sudo rm -rfv /var/spool/cups/tmp/*
+sudo rm -rfv /var/spool/cups/cache/job.cache*
+```
 
-`ps -ef` lists information about all running processes.
+To clear the list of iOS devices connected, use:
 
-You can also view processes with **Activity Monitor**.
+```console
+sudo defaults delete /Users/$USER/Library/Preferences/com.apple.iPod.plist "conn:128:Last Connect"
+sudo defaults delete /Users/$USER/Library/Preferences/com.apple.iPod.plist Devices
+sudo defaults delete /Library/Preferences/com.apple.iPod.plist "conn:128:Last Connect"
+sudo defaults delete /Library/Preferences/com.apple.iPod.plist Devices
+sudo rm -rfv /var/db/lockdown/*
+```
 
-`launchctl list` and `sudo launchctl list` list loaded and running user and system launch daemons and agents.
+Quicklook thumbnail data can be cleared using the `qlmanage -r cache` command, but this writes to the file `resetreason` in the Quicklook directories, and states that the Quicklook cache was manually cleared. Disable the thumbnail cache with `qlmanage -r disablecache`
 
-#### Network
+It can also be cleared by getting the directory names with `getconf DARWIN_USER_CACHE_DIR` and `sudo getconf DARWIN_USER_CACHE_DIR`, then removing them:
 
-List open network files:
-
-    $ sudo lsof -Pni
+```console
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/exclusive
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-shm
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-wal
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/resetreason
+rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.data
+```
 
-List contents of various network-related data structures:
+Similarly, for the root user:
 
-    $ sudo netstat -atln
+```console
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.fraghandler
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/exclusive
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-shm
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/index.sqlite-wal
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/resetreason
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.data
+sudo rm -rfv $(getconf DARWIN_USER_CACHE_DIR)/com.apple.QuickLook.thumbnailcache/thumbnails.fraghandler
+```
 
-You can also use [Wireshark](https://www.wireshark.org/) from the command line.
+Also see ['quicklook' cache may leak encrypted data](https://objective-see.com/blog/blog_0x30.html).
 
-Monitor DNS queries and replies:
+To clear Finder preferences:
 
-```
-$ tshark -Y "dns.flags.response == 1" -Tfields \
-  -e frame.time_delta \
-  -e dns.qry.name \
-  -e dns.a \
-  -Eseparator=,
+```console
+defaults delete ~/Library/Preferences/com.apple.finder.plist FXDesktopVolumePositions
+defaults delete ~/Library/Preferences/com.apple.finder.plist FXRecentFolders
+defaults delete ~/Library/Preferences/com.apple.finder.plist RecentMoveAndCopyDestinations
+defaults delete ~/Library/Preferences/com.apple.finder.plist RecentSearches
+defaults delete ~/Library/Preferences/com.apple.finder.plist SGTRecentFileSearches
 ```
 
-Monitor HTTP requests and responses:
+Additional diagnostic files may be found in the following directories - but caution should be taken before removing any, as it may break logging or cause other issues:
 
 ```
-$ tshark -Y "http.request or http.response" -Tfields \
-  -e ip.dst \
-  -e http.request.full_uri \
-  -e http.request.method \
-  -e http.response.code \
-  -e http.response.phrase \
-  -Eseparator=/s
+/var/db/CoreDuet/
+/var/db/diagnostics/
+/var/db/systemstats/
+/var/db/uuidtext/
+/var/log/DiagnosticMessages/
 ```
 
-Monitor x509 certificates:
+macOS stored preferred Wi-Fi data (including credentials) in NVRAM. To clear it, use the following commands:
 
+```console
+sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:current-network
+sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:preferred-networks
+sudo nvram -d 36C28AB5-6566-4C50-9EBD-CBB920F83843:preferred-count
 ```
-$ tshark -Y "ssl.handshake.certificate" -Tfields \
-  -e ip.src \
-  -e x509sat.uTF8String \
-  -e x509sat.printableString \
-  -e x509sat.universalString \
-  -e x509sat.IA5String \
-  -e x509sat.teletexString \
-  -Eseparator=/s -Equote=d
-```
-
-Also see the simple networking monitoring application [BonzaiThePenguin/Loading](https://github.com/BonzaiThePenguin/Loading).
-
-## Binary Whitelisting
-
-[google/santa](https://github.com/google/santa/) is a security software developed for Google's corporate Macintosh fleet and open sourced.
-
-> Santa is a binary whitelisting/blacklisting system for macOS. It consists of a kernel extension that monitors for executions, a userland daemon that makes execution decisions based on the contents of a SQLite database, a GUI agent that notifies the user in case of a block decision and a command-line utility for managing the system and synchronizing the database with a server.
-
-Santa uses the [Kernel Authorization API](https://developer.apple.com/library/content/technotes/tn2127/_index.html) to monitor and allow/disallow binaries from executing in the kernel. Binaries can be white- or black-listed by unique hash or signing developer certificate. Santa can be used to only allow trusted code execution, or to blacklist known malware from executing on a Mac, similar to Bit9 software for Windows.
 
-**Note** Santa does not currently have a graphical user interface for managing rules. The following instructions are for advanced users only!
+macOS may collect sensitive information about what you type, even if user dictionary and suggestions are off. To remove them, and prevent them from being created again, use the following commands:
 
-To install Santa, visit the [Releases](https://github.com/google/santa/releases) page and download the latest disk image, the mount it and install the contained package:
-
-```
-$ hdiutil mount ~/Downloads/santa-0.9.14.dmg
-
-$ sudo installer -pkg /Volumes/santa-0.9.14/santa-0.9.14.pkg -tgt /
+```console
+rm -rfv "~/Library/LanguageModeling/*" "~/Library/Spelling/*" "~/Library/Suggestions/*"
+chmod -R 000 ~/Library/LanguageModeling ~/Library/Spelling ~/Library/Suggestions
+chflags -R uchg ~/Library/LanguageModeling ~/Library/Spelling ~/Library/Suggestions
 ```
 
-By default, Santa installs in "Monitor" mode (meaning, nothing gets blocked, only logged) and comes with two rules: one for Apple binaries and another for Santa software itself.
-
-Verify Santa is running and its kernel module is loaded:
+QuickLook application support metadata can be cleared and locked with the following commands:
 
+```console
+rm -rfv "~/Library/Application Support/Quick Look/*"
+chmod -R 000 "~/Library/Application Support/Quick Look"
+chflags -R uchg "~/Library/Application Support/Quick Look"
 ```
-$ santactl status
->>> Daemon Info
-  Mode                   | Monitor
-  File Logging           | No
-  Watchdog CPU Events    | 0  (Peak: 0.00%)
-  Watchdog RAM Events    | 0  (Peak: 0.00MB)
->>> Kernel Info
-  Kernel cache count     | 0
->>> Database Info
-  Binary Rules           | 0
-  Certificate Rules      | 2
-  Events Pending Upload  | 0
 
-$ ps -ef | grep "[s]anta"
-    0   786     1   0 10:01AM ??         0:00.39 /Library/Extensions/santa-driver.kext/Contents/MacOS/santad --syslog
+Document revision metadata is stored in `/.DocumentRevisions-V100` and can be cleared and locked with the following commands - caution should be taken as this may break some core Apple applications:
 
-$ kextstat | grep santa
-  119    0 0xffffff7f822ff000 0x6000     0x6000     com.google.santa-driver (0.9.14) 693D8E4D-3161-30E0-B83D-66A273CAE026 <5 4 3 1>
+```console
+sudo rm -rfv /.DocumentRevisions-V100/*
+sudo chmod -R 000 /.DocumentRevisions-V100
+sudo chflags -R uchg /.DocumentRevisions-V100
 ```
 
-Create a blacklist rule to prevent iTunes from executing:
+Saved application state metadata may be cleared and locked with the following commands:
 
-    $ sudo santactl rule --blacklist --path /Applications/iTunes.app/
-    Added rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3.
-
-Try to launch iTunes - it will be blocked.
+```console
+rm -rfv ~/Library/Saved\ Application\ State/*
+rm -rfv ~/Library/Containers/<APPNAME>/Data/Library/Saved\ Application\ State
+chmod -R 000 ~/Library/Saved\ Application\ State/
+chmod -R 000 ~/Library/Containers/<APPNAME>/Data/Library/Saved\ Application\ State
+chflags -R uchg ~/Library/Saved\ Application\ State/
+chflags -R uchg ~/Library/Containers/<APPNAME>/Data/Library/Saved\ Application\ State
+```
 
-    $ open /Applications/iTunes.app/
-    LSOpenURLsWithRole() failed with error -10810 for the file /Applications/iTunes.app.
+Autosave metadata can be cleared and locked with the following commands:
 
-<img width="450" alt="Santa block dialog when attempting to run a blacklisted program" src="https://cloud.githubusercontent.com/assets/12475110/21062284/14ddde88-be1e-11e6-8e9b-32f8a44c0cf6.png">
+```console
+rm -rfv "~/Library/Containers/<APP>/Data/Library/Autosave Information"
+rm -rfv "~/Library/Autosave Information"
+chmod -R 000 "~/Library/Containers/<APP>/Data/Library/Autosave Information"
+chmod -R 000 "~/Library/Autosave Information"
+chflags -R uchg "~/Library/Containers/<APP>/Data/Library/Autosave Information"
+chflags -R uchg "~/Library/Autosave Information"
+```
 
-To remove the rule:
+The Siri analytics database, which is created even if the Siri launch agent disabled, can be cleared and locked with the following commands:
 
-    $ sudo santactl rule --remove --path /Applications/iTunes.app/
-    Removed rule for SHA-256: e1365b51d2cb2c8562e7f1de36bfb3d5248de586f40b23a2ed641af2072225b3.
+```console
+rm -rfv ~/Library/Assistant/SiriAnalytics.db
+chmod -R 000 ~/Library/Assistant/SiriAnalytics.db
+chflags -R uchg ~/Library/Assistant/SiriAnalytics.db
+```
 
-Open iTunes:
+`~/Library/Preferences/com.apple.iTunes.plist` contains iTunes metadata. Recent iTunes search data may be cleared with the following command:
 
-    $ open /Applications/iTunes.app/
-    [iTunes will open successfully]
+```console
+defaults delete ~/Library/Preferences/com.apple.iTunes.plist recentSearches
+```
 
-Create a new, example C program:
+If you do not use Apple Account-linked services, the following keys may be cleared, too, using the following commands:
 
-```
-$ cat <<EOF > foo.c
-> #include <stdio.h>
-> main() { printf("Hello World\n”); }
-> EOF
+```console
+defaults delete ~/Library/Preferences/com.apple.iTunes.plist StoreUserInfo
+defaults delete ~/Library/Preferences/com.apple.iTunes.plist WirelessBuddyID
 ```
 
-Compile the program with GCC (requires installation of Xcode or command-line tools):
+All media played in QuickTime Player can be found in:
 
+```console
+~/Library/Containers/com.apple.QuickTimePlayerX/Data/Library/Preferences/com.apple.QuickTimePlayerX.plist
 ```
-$ gcc -o foo foo.c
 
-$ file foo
-foo: Mach-O 64-bit executable x86_64
+Additional metadata may exist in the following files:
 
-$ codesign -d foo
-foo: code object is not signed at all
+```console
+~/Library/Containers/com.apple.appstore/Data/Library/Preferences/com.apple.commerce.knownclients.plist
+~/Library/Preferences/com.apple.commerce.plist
+~/Library/Preferences/com.apple.QuickTimePlayerX.plist
 ```
 
-Run it:
+# Passwords
 
-```
-$ ./foo
-Hello World
-```
+The built-in **[Passwords](https://support.apple.com/guide/passwords/the-passwords-app-mchl901b1b95/mac)** app can generate [secure credentials](https://support.apple.com/guide/security/automatic-strong-passwords-secc84c811c4/web).
 
-Toggle Santa into “Lockdown” mode, which only allows whitelisted binaries to run:
+The **Passwords** app also supports [passkeys](https://fidoalliance.org/passkeys/), FIDO credentials that can replace passwords and are much more secure against phishing, human error, and data breaches. Make sure to use them instead of passwords whenever you can.
 
-    $ sudo defaults write /var/db/santa/config.plist ClientMode -int 2
+Consider using [Diceware](https://secure.research.vt.edu/diceware/) for memorable passwords.
 
-Try to run the unsigned binary:
+GnuPG can also be used to manage passwords and other encrypted files (see [drduh/Purse](https://github.com/drduh/Purse) and [drduh/pwd.sh](https://github.com/drduh/pwd.sh)).
 
-```
-$ ./foo
-bash: ./foo: Operation not permitted
+Ensure all eligible online accounts have [multi-factor authentication](https://en.wikipedia.org/wiki/Multi-factor_authentication) enabled. The strongest form of multi-factor authentication is [WebAuthn](https://en.wikipedia.org/wiki/WebAuthn), followed by [TOTP](https://datatracker.ietf.org/doc/html/rfc6238), then [HOTP](https://datatracker.ietf.org/doc/html/rfc4226), and SMS-based codes are weakest.
 
-Santa
+[YubiKey](https://www.yubico.com/products/) is an affordable hardware token with WebAuthn support. It can also be used to store cryptographic keys for GnuPG encryption and SSH authentication - see [drduh/YubiKey-Guide](https://github.com/drduh/YubiKey-Guide).
 
-The following application has been blocked from executing
-because its trustworthiness cannot be determined.
+# Backup
 
-Path:       /Users/demouser/foo
-Identifier: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-Parent:     bash (701)
-```
-To whitelist a specific binary, determine its SHA-256 sum:
+Encrypt files locally before backing them up to external media or online services.
 
-```
-$ santactl fileinfo /Users/demouser/foo
-Path                 : /Users/demouser/foo
-SHA-256              : 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-SHA-1                : 4506f3a8c0a5abe4cacb98e6267549a4d8734d82
-Type                 : Executable (x86-64)
-Code-signed          : No
-Rule                 : Blacklisted (Unknown)
-```
+If the threat model allows it, you should follow the [3-2-1 backup model](https://www.cisa.gov/sites/default/files/publications/data_backup_options.pdf) as outlined by CISA. Keep 3 copies: the original and two backups. Keep backups on 2 different media types, e.g. on a local drive and cloud storage. Store 1 copy offsite.
 
-Add a whitelist rule:
+[Time Machine](https://support.apple.com/104984) is the built-in tool for handling backups on macOS. Get an external drive or network drive to back up to and [encrypt](https://support.apple.com/guide/mac-help/keep-your-time-machine-backup-disk-secure-mh21241) backups.
 
-    $ sudo santactl rule --whitelist --sha256 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed
-    Added rule for SHA-256: 4e11da26feb48231d6e90b10c169b0f8ae1080f36c168ffe53b1616f7505baed.
+GnuPG can be used with a static password or public key (with the private key stored on [YubiKey](https://github.com/drduh/YubiKey-Guide)).
 
-Run it:
+Compress and encrypt a directory using with a password:
 
-```
-$ ./foo
-Hello World
+```console
+tar zcvf - ~/Downloads | gpg -c > ~/Desktop/backup-$(date +%F-%H%M).tar.gz.gpg
 ```
 
-It's allowed and works!
+Decrypt and decompress the directory:
 
-Applications can also be whitelisted by developer certificate (so that new binary versions will not need to be manually whitelisted on each update). For example, download and run Google Chrome - it will be blocked by Santa in "Lockdown" mode:
+```console
+gpg -o ~/Desktop/decrypted-backup.tar.gz -d ~/Desktop/backup-*.tar.gz.gpg
 
+tar zxvf ~/Desktop/decrypted-backup.tar.gz
 ```
-$ curl -sO https://dl.google.com/chrome/mac/stable/GGRO/googlechrome.dmg
 
-$ hdiutil mount googlechrome.dmg
+Encrypted volumes can also be created using **Disk Utility** or `hdiutil`:
 
-$ cp -r /Volumes/Google\ Chrome/Google\ Chrome.app /Applications/
+```console
+hdiutil create ~/Desktop/encrypted.dmg -encryption -size 50M -volname "secretStuff"
 
-$ open /Applications/Google\ Chrome.app/
-LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Google Chrome.app.
-```
+hdiutil mount ~/Desktop/encrypted.dmg
 
-Whitelist the application by its developer certificate (first item in the Signing Chain):
+cp -v ~/Documents/passwords.txt /Volumes/secretStuff
 
+hdiutil eject /Volumes/secretStuff
 ```
-$ santactl fileinfo /Applications/Google\ Chrome.app/
-Path                 : /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
-SHA-256              : 0eb08224d427fb1d87d2276d911bbb6c4326ec9f74448a4d9a3cfce0c3413810
-SHA-1                : 9213cbc7dfaaf7580f3936a915faa56d40479f6a
-Bundle Name          : Google Chrome
-Bundle Version       : 2883.87
-Bundle Version Str   : 55.0.2883.87
-Type                 : Executable (x86-64)
-Code-signed          : Yes
-Rule                 : Blacklisted (Unknown)
-Signing Chain:
-     1. SHA-256             : 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153
-        SHA-1               : 85cee8254216185620ddc8851c7a9fc4dfe120ef
-        Common Name         : Developer ID Application: Google Inc.
-        Organization        : Google Inc.
-        Organizational Unit : EQHXZ8M8AV
-        Valid From          : 2012/04/26 07:10:10 -0700
-        Valid Until         : 2017/04/27 07:10:10 -0700
 
-     2. SHA-256             : 7afc9d01a62f03a2de9637936d4afe68090d2de18d03f29c88cfb0b1ba63587f
-        SHA-1               : 3b166c3b7dc4b751c9fe2afab9135641e388e186
-        Common Name         : Developer ID Certification Authority
-        Organization        : Apple Inc.
-        Organizational Unit : Apple Certification Authority
-        Valid From          : 2012/02/01 14:12:15 -0800
-        Valid Until         : 2027/02/01 14:12:15 -0800
+Additional applications and services which offer backups include:
 
-     3. SHA-256             : b0b1730ecbc7ff4505142c49f1295e6eda6bcaed7e2c68c5be91b5a11001f024
-        SHA-1               : 611e5b662c593a08ff58d14ae22452d198df6c60
-        Common Name         : Apple Root CA
-        Organization        : Apple Inc.
-        Organizational Unit : Apple Certification Authority
-        Valid From          : 2006/04/25 14:40:36 -0700
-        Valid Until         : 2035/02/09 13:40:36 -0800
-```
+* [Tresorit](https://www.tresorit.com)
+* [restic](https://restic.github.io)
 
-In this case, `15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153` is the SHA-256 of Google’s Apple developer certificate (team ID EQHXZ8M8AV). To whitelist it:
+# Wi-Fi
 
-```
-$ sudo santactl rule --whitelist --certificate --sha256 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153
-Added rule for SHA-256: 15b8ce88e10f04c88a5542234fbdfc1487e9c2f64058a05027c7c34fc4201153.
-```
+Most Wi-Fi networks continuously broadcast their network name, called the **service set identifier (SSID)**, allowing devices to [passively](https://www.wi-fi.org/knowledge-center/faq/what-are-passive-and-active-scanning) scan for networks they have already connected to before. However, **hidden** networks don't transmit their SSID, meaning the device has to send a probe with the SSID to connect to it. This can reveal previously connected networks to an attacker.
+
+>Apple devices automatically detect when a network is hidden. If a network is hidden, the device sends a probe with the SSID included in the request—not otherwise. This helps prevent the device from broadcasting the name of previously hidden networks a user was connected to, thereby further ensuring privacy.
 
-Google Chrome should now launch, and subsequent updates to the application will continue to work as long as the code signing certificate doesn’t change or expire.
+As such, avoid connecting to [hidden networks](https://support.apple.com/guide/security/wi-fi-privacy-with-apple-devices-sec31e483abf/web#sec059998a98).
 
-To disable “Lockdown” mode:
+Make sure to avoid setting personal networks to hidden and set the security mode to WPA3 or the highest your router supports. Follow Apple's [guidance](https://support.apple.com/en-us/102766) on how to set up your home Wi-Fi network to be as secure as possible.
 
-    $ sudo defaults delete /var/db/santa/config.plist ClientMode
+You can set your Mac to have a different, [random MAC address](https://support.apple.com/en-gb/guide/mac-help/mchlb1cb3eb4/mac) for each network that rotates over time. This is intended to reduce tracking across networks and on the same network over time.
 
-See `/var/log/santa.log` to monitor ALLOW and DENY execution decisions.
+# SSH
 
-A log and configuration server for Santa is available in [Zentral](https://github.com/zentralopensource/zentral), an open source event monitoring solution and TLS server for osquery and Santa.
-Zentral will support Santa in both MONITORING and LOCKDOWN operation mode. Clients need to be enrolled with a TLS connection to sync Santa Rules, all Santa events from endpoints are aggregated and logged back in Zentral. Santa events can trigger actions and notifications from within the Zentral Framework.
+For outgoing SSH connections, use hardware or password-protected keys, [set up](http://nerderati.com/2011/03/17/simplify-your-life-with-an-ssh-config-file/) remote hosts and consider [hashing](http://nms.csail.mit.edu/projects/ssh/) them for added privacy. See [drduh/config/ssh_config](https://github.com/drduh/config/blob/main/ssh_config) for recommended client options.
 
-**Note** Python, Bash and other interpreters are whitelisted (since they are signed by Apple's developer certificate), so Santa will not be able to block such scripts from executing. Thus, a potential non-binary program which disables Santa is a weakness (not vulnerability, since it is so by design) to take note of.
+You can also use ssh to create an [encrypted tunnel](http://blog.trackets.com/2014/05/17/ssh-tunnel-local-and-remote-port-forwarding-explained-with-examples.html) to send traffic through, similar to a VPN.
 
-## Miscellaneous
+For example, to use Privoxy running on a remote host port 8118:
 
-If you wish, disable [Diagnostics & Usage Data](https://github.com/fix-macosx/fix-macosx/wiki/Diagnostics-&-Usage-Data).
+```console
+ssh -C -L 5555:127.0.0.1:8118 you@remote-host.tld
 
-If you want to play **music** or watch **videos**, use [VLC media player](https://www.videolan.org/vlc/index.html) which is free and open source.
+sudo networksetup -setwebproxy "Wi-Fi" 127.0.0.1 5555
 
-If you want to use **torrents**, use [Transmission](http://www.transmissionbt.com/download/) which is free and open source (note: like all software, even open source projects, [malware may still find its way in](http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/)). You may also wish to use a block list to avoid peering with known bad hosts - see [Which is the best blocklist for Transmission](https://giuliomac.wordpress.com/2014/02/19/best-blocklist-for-transmission/) and [johntyree/3331662](https://gist.github.com/johntyree/3331662).
+sudo networksetup -setsecurewebproxy "Wi-Fi" 127.0.0.1 5555
+```
 
-Manage default file handlers with [duti](http://duti.org/), which can be installed with `brew install duti`. One reason to manage extensions is to prevent auto-mounting of remote filesystems in Finder (see [Protecting Yourself From Sparklegate](https://www.taoeffect.com/blog/2016/02/apologies-sky-kinda-falling-protecting-yourself-from-sparklegate/)). Here are several recommended handlers to manage:
+Or to use an ssh connection as a [SOCKS proxy](https://www.mikeash.com/ssh_socks.html):
 
+```console
+ssh -NCD 3000 you@remote-host.tld
 ```
-$ duti -s com.apple.Safari afp
 
-$ duti -s com.apple.Safari ftp
+By default, macOS does **not** have sshd or *Remote Login* enabled.
 
-$ duti -s com.apple.Safari nfs
+To enable sshd and allow incoming ssh connections:
 
-$ duti -s com.apple.Safari smb
+```console
+sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist
 ```
 
-Monitor system logs with the **Console** application or `syslog -w` or `log stream` commands.
+Or use the **System Preferences** > **Sharing** menu.
 
-In systems prior to macOS Sierra (10.12), enable the [tty_tickets flag](https://derflounder.wordpress.com/2016/09/21/tty_tickets-option-now-on-by-default-for-macos-sierras-sudo-tool/) in `/etc/sudoers` to restrict the sudo session to the Terminal window/tab that started it. To do so, use `sudo visudo` and add the line `Defaults    tty_tickets`.
+If enabling sshd, be sure to disable password authentication and consider further [hardening](https://stribika.github.io/2015/01/04/secure-secure-shell.html) the configuration. See [drduh/config/sshd_config](https://github.com/drduh/config/blob/main/sshd_config) for recommended options.
 
-Set your screen to lock as soon as the screensaver starts:
+Confirm whether sshd is running:
+
+```console
+sudo lsof -Pni TCP:22
+```
 
-    $ defaults write com.apple.screensaver askForPassword -int 1
+# Physical access
 
-    $ defaults write com.apple.screensaver askForPasswordDelay -int 0
+Keep your Mac physically secure at all times and do not leave it unattended in public.
 
-Expose hidden files and Library folder in Finder:
+A skilled attacker with unsupervised physical access could install a [hardware keylogger](https://trmm.net/Thunderstrike_31c3) to record all of your keystrokes. Using a Mac with a built-in keyboard or a bluetooth keyboard makes this more difficult as many off-the-shelf versions of this attack are designed to be plugged in between a USB keyboard and your computer.
 
-    $ defaults write com.apple.finder AppleShowAllFiles -bool true
+To protect against physical theft during use, you can use an anti-forensic tool like [BusKill](https://github.com/buskill/buskill-app) or [swiftGuard](https://github.com/Lennolium/swiftGuard) (updated usbkill, with graphical user interface). All respond to USB events and can immediately shutdown your computer if your device is physically separated from you or an unauthorized device is connected.
 
-    $ chflags nohidden ~/Library
+Consider purchasing a privacy screen/filter for use in public.
 
-Show all filename extensions (so that "Evil.jpg.app" cannot masquerade easily).
+[Nail polish](https://trmm.net/Glitter) and tamper-evidence seals can be applied to components to detect tampering.
 
-    $ defaults write NSGlobalDomain AppleShowAllExtensions -bool true
+# System monitoring
 
-Don't default to saving documents to iCloud:
+## OpenBSM audit
 
-    $ defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
+macOS has a powerful OpenBSM (Basic Security Module) auditing capability. You can use it to monitor process execution, network activity, and much more.
 
-Enable [Secure Keyboard Entry](https://security.stackexchange.com/questions/47749/how-secure-is-secure-keyboard-entry-in-mac-os-xs-terminal) in Terminal (unless you use [YubiKey](https://mig5.net/content/secure-keyboard-entry-os-x-blocks-interaction-yubikeys) or applications such as [TextExpander](https://smilesoftware.com/textexpander/secureinput)).
+To tail audit logs, use the `praudit` utility:
 
-Disable crash reporter (the dialog which appears after an application crashes and prompts to report the problem to Apple):
+```console
+$ sudo praudit -l /dev/auditpipe
+header,201,11,execve(2),0,Thu Sep  1 12:00:00 2015, + 195 msec,exec arg,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,path,/Applications/.evilapp/rootkit,attribute,100755,root,wheel,16777220,986535,0,subject,drduh,root,wheel,root,wheel,412,100005,50511731,0.0.0.0,return,success,0,trailer,201,
+header,88,11,connect(2),0,Thu Sep  1 12:00:00 2015, + 238 msec,argument,1,0x5,fd,socket-inet,2,443,173.194.74.104,subject,drduh,root,wheel,root,wheel,326,100005,50331650,0.0.0.0,return,failure : Operation now in progress,4354967105,trailer,88
+header,111,11,OpenSSH login,0,Thu Sep  1 12:00:00 2015, + 16 msec,subject_ex,drduh,drduh,staff,drduh,staff,404,404,49271,::1,text,successful login drduh,return,success,0,trailer,111,
+```
 
-    $ defaults write com.apple.CrashReporter DialogType none
+See the manual pages for `audit`, `praudit`, `audit_control` and other files in `/etc/security`
 
-Disable Bonjour [multicast advertisements](https://www.trustwave.com/Resources/SpiderLabs-Blog/mDNS---Telling-the-world-about-you-(and-your-device)/):
+Although `man audit` says the `-s` flag will synchronize the audit configuration, it appears necessary to reboot for changes to take effect.
 
-    $ sudo defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool YES
+See articles on [ilostmynotes.blogspot.com](https://ilostmynotes.blogspot.com/2013/10/openbsm-auditd-on-os-x-these-are-logs.html) and [derflounder.wordpress.com](https://derflounder.wordpress.com/2012/01/30/openbsm-auditing-on-mac-os-x/) for more information.
 
-[Disable Handoff](https://apple.stackexchange.com/questions/151481/why-is-my-macbook-visibile-on-bluetooth-after-yosemite-install) and Bluetooth features, if they aren't necessary.
+## DTrace
 
-Consider [sandboxing](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/sandbox-exec.1.html) your applications. See [fG! Sandbox Guide](https://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v0.1.pdf) (pdf) and [s7ephen/OSX-Sandbox--Seatbelt--Profiles](https://github.com/s7ephen/OSX-Sandbox--Seatbelt--Profiles).
+[System Integrity Protection](https://github.com/drduh/macOS-Security-and-Privacy-Guide#system-integrity-protection) interferes with DTrace, so it is not possible to use it in recent macOS versions without disabling SIP.
 
-Did you know Apple has not shipped a computer with TPM since [2006](http://osxbook.com/book/bonus/chapter10/tpm/)?
+* `iosnoop` monitors disk I/O
+* `opensnoop` monitors file opens
+* `execsnoop` monitors execution of processes
+* `errinfo` monitors failed system calls
+* `dtruss` monitors all system calls
 
-## Related software
+See `man -k dtrace` for more information.
 
-[Santa](https://github.com/google/santa/) - A binary whitelisting/blacklisting system for macOS.
+## Execution
 
-[kristovatlas/osx-config-check](https://github.com/kristovatlas/osx-config-check) - checks your OSX machine against various hardened configuration settings.
+`ps -ef` lists information about all running processes.
 
-[Lockdown](https://objective-see.com/products/lockdown.html) - audits and remediates security configuration settings.
+You can also view processes with **Activity Monitor**.
 
-[Dylib Hijack Scanner](https://objective-see.com/products/dhs.html) - scan for applications that are either susceptible to dylib hijacking or have been hijacked.
+`launchctl list` and `sudo launchctl list` list loaded and running user and system launch daemons and agents.
 
-[Little Flocker](https://www.littleflocker.com/) - "Little Snitch for files"; prevents applications from accessing files.
+## Network
 
-[facebook/osquery](https://github.com/facebook/osquery) - can be used to retrieve low level system information.  Users can write SQL queries to retrieve system information.
+List open network files:
 
-[google/grr](https://github.com/google/grr) - incident response framework focused on remote live forensics.
+```console
+sudo lsof -Pni
+```
 
-[yelp/osxcollector](https://github.com/yelp/osxcollector) - forensic evidence collection & analysis toolkit for OS X.
+List contents of various network-related data structures:
 
-[jipegit/OSXAuditor](https://github.com/jipegit/OSXAuditor) - analyzes artifacts on a running system, such as quarantined files, Safari, Chrome and Firefox history, downloads, HTML5 databases and localstore, social media and email accounts, and Wi-Fi access point names.
+```console
+sudo netstat -atln
+```
 
-[libyal/libfvde](https://github.com/libyal/libfvde) - library to access FileVault Drive Encryption (FVDE) (or FileVault2) encrypted volumes.
+[Wireshark](https://www.wireshark.org/) can be used from the command line with `tshark`.
 
-[CISOfy/lynis](https://github.com/CISOfy/lynis) - cross-platform security auditing tool and assists with compliance testing and system hardening.
+Monitor DNS queries and replies:
 
-[Zentral](https://github.com/zentralopensource/zentral) - a log and configuration server for santa and osquery. Run audit and probes on inventory, events, logfiles, combine with point-in-time alerting. A full Framework and Django web server build on top of the elastic stack (formerly known as ELK stack).
+```console
+tshark -Y "dns.flags.response == 1" -Tfields \
+  -e frame.time_delta \
+  -e dns.qry.name \
+  -e dns.a \
+  -Eseparator=,
+```
 
-## Additional resources
+Monitor HTTP requests and responses:
 
-*In no particular order*
+```console
+tshark -Y "http.request or http.response" -Tfields \
+  -e ip.dst \
+  -e http.request.full_uri \
+  -e http.request.method \
+  -e http.response.code \
+  -e http.response.phrase \
+  -Eseparator=/s
+```
 
-[MacOS Hardening Guide - Appendix of \*OS Internals: Volume III - Security & Insecurity Internals](http://newosxbook.com/files/moxii3/AppendixA.pdf) (pdf)
+Monitor x509 (SSL/TLS) certificates:
 
-[Mac Developer Library: Secure Coding Guide](https://developer.apple.com/library/mac/documentation/Security/Conceptual/SecureCodingGuide/Introduction.html)
+```console
+tshark -Y "ssl.handshake.certificate" -Tfields \
+  -e ip.src \
+  -e x509sat.uTF8String \
+  -e x509sat.printableString \
+  -e x509sat.universalString \
+  -e x509sat.IA5String \
+  -e x509sat.teletexString \
+  -Eseparator=/s -Equote=d
+```
 
-[OS X Core Technologies Overview White Paper](https://www.apple.com/osx/all-features/pdf/osx_elcapitan_core_technologies_overview.pdf) (pdf)
+# Miscellaneous
 
-[Reverse Engineering Mac OS X blog](https://reverse.put.as/)
+Disable [Diagnostics & Usage Data](https://support.apple.com/guide/mac-help/share-analytics-information-mac-apple-mh27990).
 
-[Reverse Engineering Resources](http://samdmarshall.com/re.html)
+If you want to play **music** or watch **videos**, use QuickTime Player, the built-in media player in macOS. It uses the [App Sandbox](https://developer.apple.com/documentation/security/app_sandbox/protecting_user_data_with_app_sandbox), [Hardened Runtime](https://developer.apple.com/documentation/xcode/configuring-the-hardened-runtime), and benefits from the [Signed System Volume](https://support.apple.com/guide/security/signed-system-volume-security-secd698747c9/web) as part of the base system.
 
-[Patrick Wardle's Objective-See blog](https://objective-see.com/blog.html)
+If you want to use **torrents**, use [Transmission](https://transmissionbt.com/download/) which is free and open source (note: like all software, even open source projects, [malware may still find its way in](http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/)). You may also wish to use a block list to avoid peering with known bad hosts - see [Which is the best blocklist for Transmission](https://giuliomac.wordpress.com/2014/02/19/best-blocklist-for-transmission/) and [johntyree/3331662](https://gist.github.com/johntyree/3331662).
 
-[Managing Macs at Google Scale (LISA '13)](https://www.usenix.org/conference/lisa13/managing-macs-google-scale)
+Manage [default file handlers](https://support.apple.com/guide/mac-help/choose-an-app-to-open-a-file-on-mac-mh35597).
 
-[OS X Hardening: Securing a Large Global Mac Fleet (LISA '13)](https://www.usenix.org/conference/lisa13/os-x-hardening-securing-large-global-mac-fleet)
+Monitor system logs with the **Console** application or `syslog -w` or `/usr/bin/log stream` commands.
 
-[DoD Security Technical Implementation Guides for Mac OS](http://iase.disa.mil/stigs/os/mac/Pages/mac-os.aspx)
+Set your screen to lock as soon as the screensaver starts:
 
-[The EFI boot process](http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/efi-boot-process.html)
+```console
+defaults write com.apple.screensaver askForPassword -int 1
 
-[The Intel Mac boot process](http://refit.sourceforge.net/info/boot_process.html)
+defaults write com.apple.screensaver askForPasswordDelay -int 0
+```
 
-[Userland Persistence on Mac OS X](https://archive.org/details/joshpitts_shmoocon2015)
+Expose hidden files and Library folder in Finder:
 
-[Developing Mac OSX kernel rootkits](http://phrack.org/issues/66/16.html#article)
+```console
+defaults write com.apple.finder AppleShowAllFiles -bool true
 
-[IOKit kernel code execution exploit](https://code.google.com/p/google-security-research/issues/detail?id=135)
+chflags nohidden ~/Library
+```
+
+Show all filename extensions (so that "Evil.jpg.app" cannot masquerade easily).
 
-[Hidden backdoor API to root privileges in Apple OS X](https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/)
+```console
+defaults write NSGlobalDomain AppleShowAllExtensions -bool true
+```
 
-[IPv6 Hardening Guide for OS X](http://www.insinuator.net/2015/02/ipv6-hardening-guide-for-os-x/)
+Don't default to saving documents to iCloud:
+
+```console
+defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
+```
 
-[Harden the World: Mac OSX 10.11 El Capitan](http://docs.hardentheworld.org/OS/OSX_10.11_El_Capitan/)
+Enable [Secure Keyboard Entry](https://support.apple.com/guide/terminal/use-secure-keyboard-entry-trml109) in Terminal (unless you use [YubiKey](https://mig5.net/content/secure-keyboard-entry-os-x-blocks-interaction-yubikeys) or applications such as [TextExpander](https://smilesoftware.com/textexpander/secure-input)).
 
-[Hacker News discussion](https://news.ycombinator.com/item?id=10148077)
+Disable crash reporter (the dialog which appears after an application crashes and prompts to report the problem to Apple):
 
-[Hacker News discussion 2](https://news.ycombinator.com/item?id=13023823)
+```console
+defaults write com.apple.CrashReporter DialogType none
+```
 
-[Apple Open Source](https://opensource.apple.com/)
+Disable Bonjour multicast advertisements (also disabling AirPlay and AirPrint features):
 
-[OS X 10.10 Yosemite: The Ars Technica Review](http://arstechnica.com/apple/2014/10/os-x-10-10/)
+```console
+sudo defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool YES
+```
 
-[CIS Apple OSX 10.10 Benchmark](https://benchmarks.cisecurity.org/tools2/osx/CIS_Apple_OSX_10.10_Benchmark_v1.1.0.pdf) (pdf)
+[Disable Handoff](https://support.apple.com/guide/mac-help/change-airdrop-handoff-settings-mchl6a407f99) and [Bluetooth](https://support.apple.com/guide/mac-help/turn-bluetooth-on-or-off-blth1008) features, if they aren't necessary.
 
-[How to Switch to the Mac](https://taoofmac.com/space/HOWTO/Switch)
+Validate applications are sandboxed in [Activity Monitor](https://developer.apple.com/documentation/security/app_sandbox/protecting_user_data_with_app_sandbox#4098972).
 
-[Security Configuration For Mac OS X Version 10.6 Snow Leopard](http://www.apple.com/support/security/guides/docs/SnowLeopard_Security_Config_v10.6.pdf) (pdf)
+macOS comes with this line in `/etc/sudoers`:
 
-[EFF Surveillance Self-Defense Guide](https://ssd.eff.org/)
+```console
+Defaults env_keep += "HOME MAIL"
+```
 
-[MacAdmins on Slack](https://macadmins.herokuapp.com/)
+Which stops sudo from changing the HOME variable when you elevate privileges. This means it will execute as root the zsh dotfiles in the non-root user's home directory when you run "sudo zsh". It is advisable to comment this line out to avoid a potentially easy way for malware or a local attacker to escalate privileges to root.
 
-[iCloud security and privacy overview](http://support.apple.com/kb/HT4865)
+If you want to retain the convenience of the root user having a non-root user's home directory, you can append an export line to /var/root/.zshrc, e.g.:
 
-[Demystifying the DMG File Format](http://newosxbook.com/DMG.html)
+```console
+export HOME=/Users/blah
+```
 
-[There's a lot of vulnerable OS X applications out there (Sparkle Framework RCE)](https://vulnsec.com/2016/osx-apps-vulnerabilities/)
+Set a [custom umask](https://support.apple.com/101914):
 
-[iSeeYou: Disabling the MacBook Webcam Indicator LED](https://jscholarship.library.jhu.edu/handle/1774.2/36569)
+```console
+sudo launchctl config user umask 077
+```
 
-[Mac OS X Forensics - Technical Report](https://www.ma.rhul.ac.uk/static/techrep/2015/RHUL-MA-2015-8.pdf) (pdf)
+Reboot, create a file in Finder and verify its permissions (macOS default allows 'group/other' read access):
 
-[Mac Forensics: Mac OS X and the HFS+ File System](https://cet4861.pbworks.com/w/file/fetch/71245694/mac.forensics.craiger-burke.IFIP.06.pdf) (pdf)
+```console
+$ ls -ld umask*
+drwx------  2 kevin  staff       64 Dec  4 12:27 umask_testing_dir
+-rw-------@ 1 kevin  staff  2026566 Dec  4 12:28 umask_testing_file
+```
 
-[Extracting FileVault 2 Keys with Volatility](https://tribalchicken.com.au/security/extracting-filevault-2-keys-with-volatility/)
+# Related software
 
-[Auditing and Exploiting Apple IPC](https://googleprojectzero.blogspot.com/2015/09/revisiting-apple-ipc-1-distributed_28.html)
+* [CISOfy/lynis](https://github.com/CISOfy/lynis) - Cross-platform security auditing tool and assists with compliance testing and system hardening.
+* [Zentral](https://github.com/zentralopensource/zentral) - A log and configuration server for osquery. Run audit and probes on inventory, events, logfiles, combine with point-in-time alerting. A full Framework and Django web server build on top of the elastic stack (formerly known as ELK stack).
+* [osquery](https://github.com/osquery/osquery) - Can be used to retrieve low level system information.  Users can write SQL queries to retrieve system information.
+* [Pareto Security](https://github.com/paretoSecurity/pareto-mac/) - A MenuBar app to automatically audit your Mac for basic security hygiene.
 
-[Mac OS X and iOS Internals: To the Apple's Core by Jonathan Levin](https://www.amazon.com/Mac-OS-iOS-Internals-Apples/dp/1118057651)
+# Additional resources
 
-[Demystifying the i-Device NVMe NAND (New storage used by Apple)](http://ramtin-amin.fr/#nvmepcie)
+* [Apple Open Source](https://opensource.apple.com/)
+* [CIS Benchmarks](https://www.cisecurity.org/benchmark/apple_os/)
+* [EFF Surveillance Self-Defense Guide](https://ssd.eff.org/)
+* [iOS, The Future Of macOS, Freedom, Security And Privacy In An Increasingly Hostile Global Environment](https://gist.github.com/iosecure/357e724811fe04167332ef54e736670d)
+* [Patrick Wardle's Objective-See blog](https://objective-see.com/blog.html)
+* [Reverse Engineering macOS blog](https://reverse.put.as/)
+* [Reverse Engineering Resources](http://samdmarshall.com/re.html)
+* [The macOS Phishing Easy Button: AppleScript Dangers](https://duo.com/blog/the-macos-phishing-easy-button-applescript-dangers)
+* [iCloud security and privacy overview](https://support.apple.com/102651)
diff --git a/_config.yml b/_config.yml
deleted file mode 100644
index 2f7efbea..00000000
--- a/_config.yml
+++ /dev/null
@@ -1 +0,0 @@
-theme: jekyll-theme-minimal
\ No newline at end of file
diff --git a/comments.csv b/comments.csv
deleted file mode 100644
index 63da20ce..00000000
--- a/comments.csv
+++ /dev/null
@@ -1,524 +0,0 @@
-Label,Comment
-com.apple.postgres,Legacy or server app
-com.apple.bootpd,DHCP/BOOTP/NetBoot server
-com.apple.afpfs_afpLoad,
-com.apple.afpfs_checkafp,
-com.apple.airplaydiagnostics.server.mac,Apple Internal Diagnostic Tool
-com.apple.AirPlayXPCHelper,
-com.apple.airport.wps,
-com.apple.airportd,
-com.apple.akd,
-com.apple.alf,Apple Application Firewall
-com.apple.AppleFileServer,Apple File Server (AFP)
-com.apple.appleseed.fbahelperd,
-com.apple.applessdstatistics,
-com.apple.apsd,Apple Push Notification service daemon
-com.apple.aslmanager,Manages rotated files and ASL data written by the syslogd server
-com.apple.AssetCacheLocatorService,
-com.apple.atrun,
-com.apple.audio.coreaudiod,daemon used for Core Audio related purposes
-com.apple.audio.systemsoundserverd,
-com.apple.auditd,
-com.apple.autofsd,
-com.apple.automountd,
-com.apple.avbdeviced,
-com.apple.awacsd,
-com.apple.awdd,
-com.apple.backupd-auto,
-com.apple.backupd,
-com.apple.blued,
-com.apple.bluetoothaudiod,
-com.apple.bluetoothReporter,
-com.apple.bnepd,
-com.apple.bsd.dirhelper,
-com.apple.cache_delete,
-com.apple.cfprefsd.xpc.daemon,
-com.apple.cloudfamilyrestrictionsd,
-com.apple.cmio.AppleCameraAssistant,
-com.apple.cmio.AVCAssistant,
-com.apple.cmio.IIDCVideoAssistant,
-com.apple.cmio.iOSScreenCaptureAssistant,
-com.apple.cmio.VDCAssistant,
-com.apple.colorsyncd,
-com.apple.CommCenterRootHelper,
-com.apple.comsat,
-com.apple.configd,
-com.apple.configureLocalKDC,
-com.apple.corecaptured,
-com.apple.coreduetd,
-com.apple.CoreRAID,
-com.apple.coreservices.appleevents,
-com.apple.coreservices.appleid.passwordcheck,
-com.apple.coreservices.launchservicesd,
-com.apple.coreservices.sharedfilelistd,
-com.apple.coreservicesd,
-com.apple.corestorage.corestoraged,
-com.apple.corestorage.corestoragehelperd,
-com.apple.coresymbolicationd,
-com.apple.CrashReporterSupportHelper,
-com.apple.csrutil.report,
-com.apple.ctkd,
-com.apple.cvmsServ,
-com.apple.DesktopServicesHelper,
-com.apple.diagnostic.uuidpathd,
-com.apple.diagnosticd,
-com.apple.diskarbitrationd,
-com.apple.diskmanagementd,
-com.apple.diskmanagementstartup,
-com.apple.displaypolicyd,
-com.apple.distnoted.xpc.daemon,
-com.apple.dnsextd,
-com.apple.dpaudiothru,
-com.apple.dpd,
-com.apple.dspluginhelperd,
-com.apple.DumpGPURestart,
-com.apple.DumpPanic,
-com.apple.dvdplayback.setregion,
-com.apple.dynamic_pager,
-com.apple.eapolcfg_auth,
-com.apple.efax,
-com.apple.efilogin-helper,
-com.apple.emlog,
-com.apple.emond.aslmanager,
-com.apple.emond,
-com.apple.AEServer,
-com.apple.familycontrols,
-com.apple.FileCoordination,
-com.apple.FileSyncAgent.sshd,
-com.apple.findmymacd,
-com.apple.findmymacmessenger,iCloud Find My Mac feature daemon
-com.apple.firmwaresyncd,
-com.apple.fontd,
-com.apple.fontmover,
-com.apple.FontWorker,
-com.apple.fseventsd,
-com.apple.ftp-proxy,
-com.apple.GameController.gamecontrollerd,
-com.apple.getty,
-com.apple.gkreport,
-com.apple.GSSCred,
-com.apple.gssd,
-com.apple.hdiejectd,
-com.apple.hidd,
-com.apple.icloud.findmydeviced,
-com.apple.iconservices.iconservicesagent,
-com.apple.iconservices.iconservicesd,
-com.apple.IFCStart,
-com.apple.ifdreader,
-com.apple.installandsetup.systemmigrationd,
-com.apple.installd,
-com.apple.IOAccelMemoryInfoCollector,
-com.apple.IOBluetoothUSBDFU,
-com.apple.kcproxy,
-com.apple.kdumpd,
-com.apple.Kerberos.digest-service,
-com.apple.Kerberos.kadmind,
-com.apple.Kerberos.kcm,
-com.apple.Kerberos.kdc,
-com.apple.Kerberos.kpasswdd,
-com.apple.KernelEventAgent,Responsible for displaying disk full and unresponsive file server messages
-com.apple.kextd,
-com.apple.kuncd,
-com.apple.locate,
-com.apple.locationd,Location daemon
-com.apple.lockd,
-com.apple.logd,
-com.apple.logind,
-com.apple.loginwindow.LFVTracer,
-com.apple.loginwindow,
-com.apple.logkextloadsd,
-com.apple.lsd,
-com.apple.ManagedClient.cloudconfigurationd,
-com.apple.ManagedClient.enroll,
-com.apple.ManagedClient,
-com.apple.ManagedClient.startup,
-com.apple.mbsystemadministration,
-com.apple.mbusertrampoline,
-com.apple.mdmclient.daemon,
-com.apple.mdmclient.daemon.runatboot,
-com.apple.mDNSResponder.reloaded,
-com.apple.mDNSResponderHelper.reloaded,
-com.apple.metadata.mds.index,
-com.apple.metadata.mds,
-com.apple.metadata.mds.scan,
-com.apple.metadata.mds.spindump,
-com.apple.MobileFileIntegrity,
-com.apple.MRTd,
-com.apple.msrpc.echosvc,
-com.apple.msrpc.lsarpc,
-com.apple.msrpc.mdssvc,
-com.apple.msrpc.netlogon,
-com.apple.msrpc.srvsvc,
-com.apple.msrpc.wkssvc,
-com.apple.mtmd,
-com.apple.mtmfs,
-com.apple.nehelper,
-com.apple.nesessionmanager,
-com.apple.netauth.sys.auth,
-com.apple.netauth.sys.gui,
-com.apple.netbiosd,netbiosd is responsible for interacting with NetBIOS networks.
-com.apple.NetBootClientStatus,
-com.apple.networkd,network daemon
-com.apple.networkd_privileged,
-com.apple.NetworkDiagnostics,
-com.apple.nlcd,
-com.apple.NetworkSharing,
-com.apple.newsyslog,
-com.apple.nfsconf,
-com.apple.nfsd,
-com.apple.nis.ypbind,
-com.apple.noticeboard.state,
-com.apple.notifyd,
-com.apple.nsurlsessiond_privileged,
-com.apple.nsurlstoraged,
-com.apple.ocspd,"Performs caching and network fetching of CRLs and OCSP responses, used by Security.framework during certificate verification"
-com.apple.odproxyd,
-com.apple.ODSAgent,
-com.apple.opendirectoryd,
-com.apple.PasswordService,
-com.apple.PCIELaneConfigTool,
-com.apple.periodic-daily,
-com.apple.periodic-monthly,
-com.apple.periodic-weekly,
-com.apple.pfctl,
-com.apple.pfd,
-com.apple.platform.ptmd,
-com.apple.powerd,
-com.apple.powerd.swd,
-com.apple.preferences.timezone.admintool,
-com.apple.preferences.timezone.auto,
-com.apple.printtool.daemon,
-com.apple.racoon,Built-in VPN key management daemon
-com.apple.RemoteDesktop.PrivilegeProxy,
-com.apple.RemotePairTool,
-com.apple.ReportCrash.Root,
-com.apple.ReportPanicService,
-com.apple.revisiond,
-com.apple.RFBEventHelper,
-com.apple.rootless.init,
-com.apple.rpcbind,
-com.apple.sandboxd,
-com.apple.SCHelper,
-com.apple.screensharing,
-com.apple.scsid,
-com.apple.secinitd,
-com.apple.security.agent.login,
-com.apple.security.authhost,
-com.apple.security.FDERecoveryAgent,
-com.apple.security.syspolicy,
-com.apple.securityd,
-com.apple.securityd_service,
-com.apple.sessionlogoutd,
-com.apple.smb.preferences,
-com.apple.smbd,
-com.apple.softwareupdate_download_service,
-com.apple.softwareupdatecheck.initial,
-com.apple.softwareupdated,
-com.apple.speech.speechsynthesisd,
-com.apple.spindump,
-com.apple.statd.notify,
-com.apple.storagekitd,
-com.apple.storeaccountd.daemon,
-com.apple.storeagent.daemon,
-com.apple.storeassetd.daemon,
-com.apple.storedownloadd.daemon,
-com.apple.storereceiptinstaller,
-com.apple.SubmitDiagInfo,Sends diagnostic information to Apple
-com.apple.suhelperd,
-com.apple.symptomsd,
-com.apple.sysdiagnose,
-com.apple.syslogd,
-com.apple.sysmond,
-com.apple.system_installd,
-com.apple.systemkeychain,
-com.apple.systempreferences.install,
-com.apple.systemstats.analysis,
-com.apple.systemstats.daily,
-com.apple.systemstatsd,
-com.apple.taskgated-helper,
-com.apple.taskgated,
-com.apple.tccd.system,
-com.apple.thermald,Thermal management daemon
-com.apple.TMCacheDelete,
-com.apple.trustd,
-com.apple.TrustEvaluationAgent.system,
-com.apple.ucupdate.plist,
-com.apple.uninstalld,
-com.apple.unmountassistant.sysagent,
-com.apple.updateEFIDesktopPicture,
-com.apple.usbd,
-com.apple.usbmuxd,
-com.apple.UserEventAgent-System,
-com.apple.UserNotificationCenter,
-com.apple.uucp,
-com.apple.var-db-dslocal-backup,
-com.apple.vsdbutil,
-com.apple.warmd,
-com.apple.watchdogd,
-com.apple.wdhelper,
-com.apple.wifid,
-com.apple.WindowServer,
-com.apple.wirelessproxd,
-com.apple.WirelessRadioManagerd-osx,
-com.apple.wwand,
-com.apple.xpc.smd,
-com.apple.xpc.uscwoap,
-com.apple.xsan,
-com.apple.xsandaily,
-com.apple.xscertadmin,
-com.apple.xscertd-helper,
-com.apple.xscertd,
-com.vix.cron,
-com.apple.rexecd,
-com.apple.fingerd,
-com.apple.ftpd,
-com.apple.rlogind,
-com.apple.ntalkd,
-org.apache.httpd,
-org.cups.cups-lpd,
-org.cups.cupsd,
-org.net-snmp.snmpd,
-org.ntp.ntpd,Wrapper for ntpdate/ntpd called by launchd
-org.openldap.slapd,Slapd is the stand-alone LDAP daemon.
-org.postfix.master,
-org.postfix.newaliases,
-com.apple.rshd,Remote shell server
-com.openssh.sshd,Wrapper for OpenSSH SSH daemon called by launchd
-com.apple.telnetd,
-com.apple.tftpd,TFTP server daemon
-com.apple.accountsd,
-com.apple.AddressBook.abd,
-com.apple.AddressBook.AssistantService,
-com.apple.AddressBook.SourceSync,
-com.apple.AirPlayUIAgent,
-com.apple.AirPortBaseStationAgent,
-com.apple.akd,
-com.apple.alf.useragent,Apple Application Firewall (User Process)
-com.apple.aos.migrate,
-com.apple.AOSHeartbeat,
-com.apple.AOSPushRelay,
-com.apple.AppleGraphicsWarning,
-com.apple.appleseed.seedusaged,
-com.apple.appsleep,
-com.apple.appstoreupdateagent,
-com.apple.apsctl,
-com.apple.askpermissiond,
-com.apple.AskPermissionUI,
-com.apple.AssetCacheLocatorService,
-com.apple.assistant_service,
-com.apple.assistantd,
-com.apple.AssistiveControl,
-com.apple.BezelUIServer,
-com.apple.bird,Documents in the Cloud feature daemon
-com.apple.bluetoothUIServer,
-com.apple.btsa,
-com.apple.CalendarAgent,
-com.apple.CallHistoryPluginHelper,
-com.apple.CallHistorySyncHelper,
-com.apple.cdpd,
-com.apple.cfnetwork.AuthBrokerAgent,
-com.apple.cfnetwork.cfnetworkagent,
-com.apple.cfprefsd.xpc.agent,
-com.apple.cloudd,
-com.apple.cloudfamilyrestrictionsd,
-com.apple.cloudpaird,
-com.apple.cloudphotosd,
-com.apple.cmfsyncagent,
-com.apple.CommCenter,
-com.apple.ContainerRepairAgent,
-com.apple.CoreAuthentication.daemon,
-com.apple.coredata.externalrecordswriter,
-com.apple.CoreLocationAgent,
-com.apple.CoreRAIDAgent,
-com.apple.coreservices.appleid.authentication,
-com.apple.coreservices.useractivityd,
-com.apple.coreservices.sharedfilelistd,
-com.apple.coreservices.uiagent,
-com.apple.csuseragent,
-com.apple.ctkd,
-com.apple.cvmsCompAgent3600_i386,
-com.apple.cvmsCompAgent3600_i386_1,
-com.apple.cvmsCompAgent3600_x86_64,
-com.apple.cvmsCompAgent3600_x86_64_1,
-com.apple.cvmsCompAgent_i386,
-com.apple.cvmsCompAgent_i386_1,
-com.apple.cvmsCompAgent_x86_64,
-com.apple.cvmsCompAgent_x86_64_1,
-com.apple.cvmsCompAgentLegacy_i386,
-com.apple.cvmsCompAgentLegacy_i386_1,
-com.apple.cvmsCompAgentLegacy_x86_64,
-com.apple.cvmsCompAgentLegacy_x86_64_1,
-com.apple.DiagnosticReportCleanup.plist,
-com.apple.diagnostics_agent,
-com.apple.DictationIM,
-com.apple.DiskArbitrationAgent,
-com.apple.distnoted.xpc.agent,
-com.apple.Dock.agent,
-com.apple.dt.CommandLineTools.installondemand,
-com.apple.EscrowSecurityAlert,
-com.apple.familycircled,
-com.apple.familycontrols.useragent,
-com.apple.familynotificationd,
-com.apple.FileStatsAgent,
-com.apple.FileSyncAgent.PHD,
-com.apple.FilesystemUI,
-com.apple.Finder,Finder
-com.apple.findmymacmessenger,iCloud Find My Mac feature daemon
-com.apple.FolderActionsDispatcher,
-com.apple.followupd,
-com.apple.FollowUpUI,
-com.apple.fontd,
-com.apple.FontRegistryUIAgent,
-com.apple.ATS.FontValidator,
-com.apple.ATS.FontValidatorConduit,
-com.apple.FontWorker,
-com.apple.FTCleanup,
-com.apple.gamed,
-com.apple.helpd,
-com.apple.icdd,
-com.apple.icloud.findmydeviced.findmydevice-user-agent,
-com.apple.icloud.fmfd,
-com.apple.iCloudUserNotificationsd,
-com.apple.iconservices.iconservicesagent,
-com.apple.identityservicesd,
-com.apple.idsfoundation.IDSRemoteURLConnectionAgent,
-com.apple.imagent,
-com.apple.imavagent,
-com.apple.imklaunchagent,
-com.apple.IMLoggingAgent,
-com.apple.imcore.imtransferagent,
-com.apple.installandsetup.migrationhelper.user,
-com.apple.installd.user,
-com.apple.isst,
-com.apple.java.InstallOnDemand,
-com.apple.java.updateSharing,
-com.apple.lateragent,
-com.apple.locationmenu,
-com.apple.lsd,
-com.apple.ManagedClientAgent.agent,
-com.apple.ManagedClientAgent.enrollagent,
-com.apple.Maps.mapspushd,
-com.apple.maspushagent,
-com.apple.mbbackgrounduseragent,
-com.apple.mbfloagent,
-com.apple.mbuseragent,
-com.apple.mdmclient.agent,
-com.apple.mdworker.32bit,
-com.apple.mdworker.bundles,
-com.apple.mdworker.isolation,
-com.apple.mdworker.lsb,
-com.apple.mdworker.mail,
-com.apple.mdworker.shared,
-com.apple.mdworker.single,
-com.apple.mdworker.sizing,
-com.apple.metadata.mdbulkimport,
-com.apple.metadata.mdflagwriter,
-com.apple.metadata.mdwrite,
-com.apple.metadata.SpotlightNetHelper,
-com.apple.midiserver,
-com.apple.MRTa,
-com.apple.navd,
-com.apple.neagent,
-com.apple.netauth.user.auth,
-com.apple.netauth.user.gui,
-com.apple.NetworkDiagnostics,
-com.apple.noticeboard.agent,
-com.apple.notificationcenterui.agent,
-com.apple.nsurlsessiond,
-com.apple.nsurlstoraged,
-com.apple.PackageKit.InstallStatus,
-com.apple.parentalcontrols.check,
-com.apple.pboard,
-com.apple.pbs,Services menu daemon
-com.apple.PCIESlotCheck,
-com.apple.photolibraryd,
-com.apple.PhotoLibraryMigrationUtility.XPC,
-com.apple.pictd,
-com.apple.pluginkit.pkd,
-com.apple.pluginkit.pkreporter,
-com.apple.powerchime,
-com.apple.printtool.agent,
-com.apple.printuitool.agent,
-com.apple.PubSub.Agent,
-com.apple.quicklook.32bit,
-com.apple.quicklook.config,
-com.apple.quicklook,
-com.apple.quicklook.ui.helper,
-com.apple.rcd,
-com.apple.recentsd,
-com.apple.RemoteDesktop.agent,
-com.apple.ReportCrash,Analyzes crashing processes and saves a crash report to disk
-com.apple.ReportCrash.Self,
-com.apple.ReportGPURestart,
-com.apple.ReportPanic,
-com.apple.reversetemplated,
-com.apple.rtcreportingd,
-com.apple.Safari.SafeBrowsing.Service,
-com.apple.SafariCloudHistoryPushAgent,
-com.apple.safaridavclient,
-com.apple.SafariNotificationAgent,
-com.apple.SafariPlugInUpdateNotifier,
-com.apple.scopedbookmarksagent.xpc,
-com.apple.ScreenReaderUIServer,
-com.apple.screensharing.agent,
-com.apple.screensharing.MessagesAgent,
-com.apple.scrod,
-com.apple.secd,
-com.apple.secinitd,
-com.apple.security.agent,
-com.apple.security.cloudkeychainproxy3,
-com.apple.security.DiskUnmountWatcher,
-com.apple.security.idskeychainsyncingproxy,
-com.apple.security.keychain-circle-notification,
-com.apple.sharingd,"Sharing Daemon that enables AirDrop, Handoff, Instant Hotspot, Shared Computers, and Remote Disc in the Finder"
-com.apple.soagent,
-com.apple.SocialPushAgent,
-com.apple.softwareupdate_notify_agent,
-com.apple.speech.speechdatainstallerd,
-com.apple.speech.speechsynthesisd,
-com.apple.speech.synthesisserver,
-com.apple.spindump_agent,
-com.apple.spotlight.IndexAgent,
-com.apple.Spotlight,
-com.apple.ssinvitationagent,
-com.apple.storeaccountd,
-com.apple.storeassetd,
-com.apple.storedownloadd,
-com.apple.storeinappd,
-com.apple.storelegacy,
-com.apple.storeuid,
-com.apple.suggestd,
-com.apple.swcd,
-com.apple.syncdefaultsd,
-com.apple.syncservices.SyncServer,
-com.apple.syncservices.uihandler,
-com.apple.systemprofiler,
-com.apple.SystemUIServer.agent,
-com.apple.talagent,
-com.apple.tccd,
-com.apple.telephonyutilities.callservicesd,
-com.apple.thermaltrap,
-com.apple.tiswitcher,
-com.apple.TMHelperAgent,
-com.apple.TMHelperAgent.SetupOffer,
-com.apple.trustd.agent,
-com.apple.TrustEvaluationAgent,
-com.apple.universalaccessAuthWarn,
-com.apple.universalaccesscontrol,
-com.apple.universalaccessd,
-com.apple.unmountassistant.useragent,
-com.apple.USBAgent,
-com.apple.UserEventAgent-Aqua,
-com.apple.UserEventAgent-LoginWindow,
-com.apple.usernoted,
-com.apple.UserNotificationCenterAgent-LoginWindow,
-com.apple.UserNotificationCenterAgent,
-com.apple.VoiceOver,
-com.apple.warmd_agent,
-com.apple.webinspectord,
-com.apple.WebKit.PluginAgent,
-com.apple.wifi.WiFiAgent,
-com.apple.xpc.loginitemregisterd,
-com.apple.xpc.otherbsd,
-com.apple.ZoomWindow,
-org.openbsd.ssh-agent,
\ No newline at end of file
diff --git a/read_launch_plists.py b/read_launch_plists.py
deleted file mode 100755
index 25966f50..00000000
--- a/read_launch_plists.py
+++ /dev/null
@@ -1,107 +0,0 @@
-#!/usr/bin/env python
-#
-# This script reads system launch daemon and agent plists.
-
-import glob
-import hashlib
-import os
-import plistlib
-import subprocess
-import csv
-
-header ='filename,label,program,sha256,runatload,comment'
-location = '/System/Library/Launch%s/*.plist'
-comments = {}
-
-def LoadPlist(filename):
-  """Plists can be read with plistlib."""
-  # creating our own data
-  data = None
-  
-  try:
-    p = subprocess.Popen(
-        ['/usr/bin/plutil', '-convert', 'xml1', '-o', '-', filename],
-        stdout=subprocess.PIPE, stderr=subprocess.PIPE)
-    out_data, err_data = p.communicate()
-  except IOError as e:
-    # file could not be found
-    print e
-      
-  if(p.returncode == 0):
-      data = plistlib.readPlistFromString(out_data)
-  
-  return data
-
-
-def GetStatus(plist):
-  """Plists may have a RunAtLoad key."""
-  try:
-    return plist['RunAtLoad']
-  except KeyError:
-    return 'False'
-
-
-def GetLabel(plist):
-  """Plists have a label."""
-  try:
-    return plist['Label']
-  except KeyError:
-    return 'False'
-
-
-def GetProgram(plist):
-  """Plists have either a Program or ProgramArguments key,
-     if the executable requires command line options.
-  """
-  try:
-    return "['%s']" % plist['Program'], HashFile(plist['Program'])
-  except KeyError:
-    return plist['ProgramArguments'], HashFile(plist['ProgramArguments'])
-
-
-def HashFile(f):
-  """Returns SHA-256 hash of a given file."""
-  if type(f) is list:
-    f = f[0]
-  try:
-    return hashlib.sha256(open(f,'rb').read()).hexdigest()
-  except:
-    return 'UNKNOWN'
-
-
-def GetComment(plist):
-  """docstring for GetComment"""
-  global comments
-  label = plist['Label']
-  comment = None
-  if label in comments:
-    comment = comments[label]
-  return comment
-
-
-def main():
-  """Main function."""
-  print(header)
-  
-  global comments
-
-  csvfile = os.path.join(os.path.dirname(
-      os.path.realpath(__file__)), 'comments.csv')
-
-  with open(csvfile, 'rb') as f:
-      reader = csv.reader(f)
-      comments = {rows[0]:rows[1] for rows in reader}
-  
-  for kind in ['Daemons', 'Agents']:
-    for filename in glob.glob(location % kind):
-      if not filename.endswith('com.apple.jetsamproperties.Mac.plist'):
-        p = LoadPlist(filename)
-        if p:
-          e = (filename, GetLabel(p), '"%s",%s' % GetProgram(p), GetStatus(p), '"%s"' % GetComment(p))
-          print('%s,%s,%s,%s,%s' % e)
-        else:
-          print('Could not load %s' % filename)
-
-
-if __name__ == '__main__':
-  main()