Pro plugin

Screen Time

Collects Screen Time restrictions, family management, installed apps, and usage analytics from RMAdminStore databases

system.screentimePromacOS 10.15+v1.0.0systemactivityparental-controls

Run this plugin

Trigger collection for Screen Time on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin system.screentime --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin system.screentime --dry-run

Compatibility

macOS 10.15+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Artifacts (11 collected)

Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optionalartifacts are often absent, and their absence isn't recorded as an error. Plannedartifacts are documented locations the plugin doesn't collect yet. Where a path shows a version range, macfor only tries it when the source's macOS or application version is in that range.

config

Artifact	Format	Path	Notes
Screen Time Restrictions screentime_restriction	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite` +1 more `~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite`	Screen Time restriction blueprints with per-day usage limits.
Screen Time Downtime screentime_downtime	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite`	Downtime configuration with per-weekday schedules.
Screen Time Devices screentime_device	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite` +1 more `~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite`	Device inventory with names, UUIDs, and platform types.
Screen Time User-Device Mapping screentime_user_device	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite`	Maps users to their associated devices.
Screen Time Installed Apps screentime_installed_app	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite` +1 more `~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite`	Installed application inventory per device.
Screen Time Settings screentime_settings	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite`	Screen Time enabled state, cloud sync, Communication Safety flags.
Screen Time Agent Preferences screentime_agent_prefs	binary_plist	`~/Library/Containers/com.apple.ScreenTimeAgent/Data/Library/Preferences/com.apple.ScreenTimeAgent.plist`	ScreenTimeAgent preferences with usage genesis date, last check-in, and last timezone.

contacts

Artifact	Format	Path	Notes
Screen Time Users screentime_user	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite` +1 more `~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite`	Family sharing user profiles with Apple IDs, names, and roles.

logs

Artifact	Format	Path	Notes
Screen Time Ask for Time Requests screentime_ask_for_time	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Cloud.sqlite`	Child ask-for-more-time requests with parent responses.
Screen Time Notification Counts screentime_notification_count	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite`	Per-app notification and pickup counts per hourly usage block.
Screen Time Pickup Analysis screentime_pickup	sqlite	`~/Library/Application Support/com.apple.ScreenTimeAgent/Store/RMAdminStore-Local.sqlite`	Device pickup frequency, first pickup times, and longest session data.