Coriander

A Python Toolset for coordinating Android Emulator instances and Android Applications (APKs) in order to create /generate and collect realistic Datasets of Android Process Memory Metadata (... and in future, datasets of metadata of other forensic artifacts e.g. network traffic, logs, disk dumps, etc).

For now, Machine Learning techniques are being applied on the metadata in order to assist in the triage of malicious Android applications, as a precursor to deeper forensic analysis.

(To be updated ...)

Dependencies:

Non-Standard Python libs:

• tqdm
• AXMLParserpy
• psutil

How to set it up:

• Directories:

• Config File:

• Inputs:

• Outputs:

Footnotes:

• Yeah, i know it's a corny name. Couldn't come up with something better.