Are 'coreservicesd' & 'syslogd' disguises for keylogger apps?
Check Code Signatures

If you suspect a process on your Mac is disguising itself as part of macOS, check the process's digital code signature. You can do this with the codesign binary:

/usr/bin/codesign -d -vvvv /System/Library/CoreServices/coreservicesd


If there is no signature, it is not from Apple.

If the Authority fields do not list Apple Root CA, then it is not signed by Apple or one of their partners.