python script for malware analysis on a Mac system.

I have started identifying indicators of compromise on a Mac system by using volatility to gather memory dumps to investigate 1 of 5 spywares so far. I need help writing a script/algorithm that would run on a MAC system to detect/alert a user if the spyware in the screenshots sent (Spyrix) is installed on the MAC system based on the indicators of compromise (file path created and executed from, the process created, hashes found on VirusTotal, etc.). for each using provided screenshots.