(Image:\/usr\/bin\/security (CommandLine:find\-certificate* OR CommandLine:\ export\ *)) OR (CommandLine:\ dump\-keychain\ * OR CommandLine:\ login\-keychain\ *)