Pro plugin
Screen Time
Collects Screen Time restrictions, family management, installed apps, and usage analytics from RMAdminStore databases
system.screentimePromacOS 10.15+v1.0.0systemactivityparental-controlsRun this plugin
Trigger collection for Screen Time on its own with the --plugin flag, or include it in a wider sweep by category.
# Just this plugin
macfor-pro collect --plugin system.screentime --output ./evidence.zip
# Dry run — list what would be collected
macfor-pro collect --plugin system.screentime --dry-runCompatibility
- macOS 10.15+
Licensing: ships in the macfor-pro binary. See Community vs Pro.
Artifacts collected (10)
Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optional artifacts are skipped unless explicitly enabled.
config
| Artifact | Format | Path | Notes |
|---|---|---|---|
Screen Time Restrictions screentime_restriction | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite+1 more
| Screen Time restriction blueprints with per-day usage limits. |
Screen Time Downtime screentime_downtime | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite | Downtime configuration with per-weekday schedules. |
Screen Time Devices screentime_device | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite+1 more
| Device inventory with names, UUIDs, and platform types. |
Screen Time User-Device Mapping screentime_user_device | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite | Maps users to their associated devices. |
Screen Time Installed Apps screentime_installed_app | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite+1 more
| Installed application inventory per device. |
Screen Time Settings screentime_settings | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite | Screen Time enabled state, cloud sync, Communication Safety flags. |
contacts
| Artifact | Format | Path | Notes |
|---|---|---|---|
Screen Time Users screentime_user | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite+1 more
| Family sharing user profiles with Apple IDs, names, and roles. |
logs
| Artifact | Format | Path | Notes |
|---|---|---|---|
Screen Time Ask for Time Requests screentime_ask_for_time | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite | Child ask-for-more-time requests with parent responses. |
Screen Time Notification Counts screentime_notification_count | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite | Per-app notification and pickup counts per hourly usage block. |
Screen Time Pickup Analysis screentime_pickup | sqlite | ~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite | Device pickup frequency, first pickup times, and longest session data. |