python script for Mac forensics

I have started identifying indicators of compromise on a Mac system by using volatility to gather memory dumps to investigate 1 out of 5 Mac spywares so far. I need help writing a script/algorithm that would run on a MAC system to detect/alert if those 5 particular spywares are installed on the MAC system using the indicators of compromise (file path created, the process created, etc.). for each using provided screenshots.