Stalkerware on Android: Signs, Checks and Analysis
How stalkerware works on Android, the settings that reveal it, why removing it first can be dangerous, and what static analysis of a suspect APK shows.
APK Analysis Tools Compared: Services and Toolkits
VirusTotal, Droidwatch, MobSF, ANY.RUN, jadx, apktool and Frida answer different questions about an APK. What each one does, where it runs and when to use it.
AI in APK Analysis: Ask the Report, Triage in Chat
Droidwatch uses AI in two places: an assistant that explains a finished report, and a skill that runs APK triage from your AI chat. Neither sets the verdict.
How to Triage a Suspicious APK: A SOC Workflow
A six-step static triage workflow for classifying an unknown Android application, extracting actionable indicators and deciding what to escalate.
How to Identify an Unknown Android Package Name
A package name found in Settings, an MDM alert or a report proves nothing on its own. Five checks that establish what an unknown Android package actually is.