
ACF
Android Connections Forensics
digital-forensicsmobile-forensicsnetwork-forensics+2

Android Connections Forensics

Suspicious DGA from PDNS and Sandbox.

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Analysis of state-sponsored WhatsApp phishing infrastructure with real-time QR hijacking and device surveillance

androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

DDoS botnet research and indicators of compromise from Nokia Deepfield ERT