yara-forensics

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

TraceTree - Runtime behavioral analysis tool that maps the process cascade of suspicious packages into a directed tree, catching supply chain attacks that install-time scanners miss.