By rogue I mean those processes which are not beneficial (at least for my configuration). To start with there are those processes which actual communicate over the network.
View Processes on OSX with nettop
Nettop is a built in process communication display utility, useful, especially with seeing what network interfaces are being used (for example, if requests are tunneled or not when using a vpn).
Unbelievable that a canon scanner registeration process is always running, especially since I've never owned a Canon scanner, nor installed this software.
sudo rm -rf "/Library/Image Capture/Support/LegacyDeviceDiscoveryHelpers/CIJScannerRegister.app"
AddressBookSourceSync, aka AddressBookSour
launchctl unload -w /System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist
To undo, use:
launchctl load -w /System/Library/LaunchAgents/com.apple.AddressBook.SourceSync.plist
Source: Apple Stackexchange
apsd - Apple push notification
sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.apsd.plist
sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.apsd.plist
See: Apple Stackexchange
rm -rf /Library/Application\ Support/SIMBL
If you don't do file and print sharing or accessing named resources over the local internet, then you don't need NetBIOS
sudo launchctl disable system/netbiosd
Kerberos 5 server, mostly not needed. Disable:
sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist
sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.Kerberos.kdc.plist
Remote desktop agent
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -configure -access -off
launchctl unload -w /System/Library/LaunchAgents/com.apple.CalendarAgent.plist
launchctl load -w /System/Library/LaunchAgents/com.apple.CalendarAgent.plist