<div>
They may appear in two places.<br />
1. your memory. see your task manager if there is some suspicious tool<br />
2. Your Backbround service, check the services running
</div>


<div>
That would be helpful if I had the computer running, only have an image. 
</div>


<div>
<div class="content wysiwyg-content">
I have an image of a mac hard drive and I am looking for the directory where potential key loggers may be installed. &nbsp;I have quite a detailed list of key loggers to search for but I am not turning up any hits in searches not sure of their install file names or what directory I might be able to find these installs in. &nbsp;<br />
<br />
Thanks in Advance,<br />
Chase
</div>
</div>


I have an image of a mac hard drive and I am looking for the directory where potential key loggers may be installed.  I have quite a detailed list of key loggers to search for but I am not turning up any hits in searches not sure of their install file names or what directory I might be able to find these installs in.  

Thanks in Advance,
Chase

What is the best place to look in a mac file structure for keyloggers?

Digital forensics encompasses the recovery and investigation of material found in digital devices, often in relation to computer crime. Digital forensics investigations have a variety of applications. The most common is to support or refute a hypothesis before criminal or civil (as part of the electronic discovery process) courts. The technical aspect of an investigation is divided into several sub-branches, relating to the type of digital devices involved; computer forensics, network forensics, forensic data analysis and mobile device forensics. The typical forensic process encompasses the seizure, forensic imaging (acquisition) and analysis of digital media and the production of a report into collected evidence.

Digital Forensics

Mac OS X is the desktop operating system from Apple Inc., found on Macintosh computers. OS X consists of a Mach/BSD-based kernel, operating system interfaces primarily based on FreeBSD and additional frameworks (written in C, C++ and Objective-C providing user interface and application-level services.

Mac OS X

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.