What is that process on my Mac?
The processes you see near the top of Activity Monitor: what each one does, why it gets busy, and what (if anything) to do about it.
Part of macOS
backupd
backupd is the Time Machine engine. It gets heavy on first backups, big VM and Docker files, and network disks. Check progress and exclude the right folders.
bird
bird is the iCloud Drive sync daemon. High CPU usually means a big upload, Desktop & Documents syncing, or a stuck file. How to check status and unstick it.
bluetoothd
bluetoothd runs the Mac’s Bluetooth stack: AirPods, keyboards, mice and Continuity. High CPU means a device reconnect loop or noisy radio traffic. How to fix it.
cloudd
cloudd is the CloudKit daemon that syncs app data with iCloud: Messages, Notes, Safari, Photos metadata and third-party apps. How to find which app is busy.
com.apple.Virtualization.VirtualMachine
This process is a virtual machine run by Apple’s Virtualization framework, for Docker Desktop, OrbStack, UTM, Lima, Colima or Tart. How to tell which app and shrink it.
ControlCenter
ControlCenter runs the menu bar’s Control Center and the AirPlay Receiver, which listens on ports 5000 and 7000. How to free those ports and stop its CPU spikes.
coreaudiod
coreaudiod is the macOS audio server. High CPU, crackling or no sound usually comes from audio plug-ins, virtual devices or sample-rate changes. How to fix it.
corespotlightd
corespotlightd indexes content apps hand to Spotlight: Mail, Messages, Notes and third-party apps. Why it gets busy and how to make it settle.
fseventsd
fseventsd records every file change for Spotlight, Time Machine and file watchers. npm installs, builds and Docker mounts make it spike. How to find who’s writing.
kernel_task
kernel_task is the macOS kernel. High CPU usually means your Mac is hot and macOS is holding the CPU back on purpose. Here’s how to find the real cause.
launchd
launchd is PID 1: it starts and supervises every service on macOS. High CPU means a job is crashing and respawning in a loop. How to find and fix that job.
logd
logd collects the unified log for every process on macOS. High CPU or disk writes mean some app is logging far too much. How to find the noisy one.
mds_stores
mds_stores is Spotlight’s index database. It gets busy after updates, big copies and dev folders like node_modules. How to see what it’s indexing and stop it.
mdworker
mdworker_shared reads files for Spotlight. Dozens of copies and high CPU are normal after big changes. Find which file or importer is stuck and fix it.
mediaanalysisd
mediaanalysisd powers Live Text, Visual Look Up and object search in images and video. Why it spikes, why it talks to Apple, and how to limit it.
nsurlsessiond
nsurlsessiond runs background downloads and uploads for apps and macOS: updates, iCloud, Photos, Music and more. How to see which app it’s downloading for.
opendirectoryd
opendirectoryd answers every user, group and login lookup on macOS. High CPU usually means an unreachable directory server or an app hammering lookups. How to fix it.
photoanalysisd
photoanalysisd scans your Photos library for people, pets, places and Memories. It runs when your Mac is idle and plugged in. How to let it finish faster.
powerd
powerd is the macOS power manager: sleep, wake, battery and power assertions. It often appears in pmset as the holder of sleep blockers. How to read that.
rapportd
rapportd links your Apple devices for Continuity: Handoff, Universal Control, call relay and more. Why it asks for network access, and the lookalike to watch for.
sharingd
sharingd runs AirDrop, Handoff, Universal Clipboard and Instant Hotspot. Why it spikes near other Apple devices, and which settings make it quieter.
softwareupdated
softwareupdated checks for, downloads and prepares macOS updates. The Preparing step is CPU and disk heavy. How to see what it’s doing and schedule it.
syspolicyd
syspolicyd is Gatekeeper: it checks apps and binaries before they run. Developers see it spike on new builds and downloads. How to make it stop slowing builds.
trustd
trustd checks certificates for HTTPS connections and code signatures, including revocation lookups. Why it spikes and what to do when it hangs on a bad network.
WindowManager
WindowManager runs Stage Manager, desktop widgets, window tiling and click-to-reveal-desktop. Why it gets busy and which settings make it lighter.
WindowServer
WindowServer draws every window and pixel on your screens. High CPU comes from displays, transparency, animations and apps that redraw constantly. How to fix it.
Third-party
Code Helper (Renderer)
Code Helper (Renderer) is a VS Code window; Code Helper (Plugin) runs your extensions. Find the heavy one with Process Explorer and Extension Bisect, then fix it.
com.docker.backend
com.docker.backend is Docker Desktop’s main service: it runs the VM, file sharing and port forwarding. Why it’s busy, why it owns your ports, and how to tame it.
Google Chrome Helper (Renderer)
Each Google Chrome Helper (Renderer) is a tab, site or extension. Find which tab is heavy with Chrome’s Task Manager, then use Memory Saver and Energy Saver.
node
A node process is a JavaScript program: a dev server, a build watcher, a language server or an AI coding agent. How to tell which one it is and stop it safely.
Know what your Mac is doing, without adding to it.
Free, no account. Pro is $9.99 once for the first 100 buyers.