Using Real-Time Network Monitoring to Spot Suspicious Application Behavior on macOS