How to Triage a Suspicious APK: A SOC Workflow
A six-step static triage workflow for classifying an unknown Android application, extracting actionable indicators and deciding what to escalate.
How to Identify an Unknown Android Package Name
A package name found in Settings, an MDM alert or a report proves nothing on its own. Five checks that establish what an unknown Android package actually is.