It is known that malware often uses keyloggers. Also some viruses aren't detected by antiviruses, therefore some viruses, especially APTs could stay in a system for so long without any detection. What I think is if I could find out keylogger activities, I could increase the chance of detecting virus or even APT (my real aim is not APT but viruses).
I want a software (or a system) that finds out possible keylogger activities by looking at network traffic. Is there such a software? This software doesn't have to be working real-time, it may be a tool doing daily analysis or even it may be an incident response tool.