Series · 6 articles
Android system debugging
App detection of modified Android systems: packages, permissions, logs, attestation, and startup failures.
Investigate the evidence Android apps can observe: attestation, packages, permissions, logs and native system calls. Read the limits of each observation alongside the implementation; local changes do not establish hardware-backed trust.
Read in the order below: start with the constraints, then follow the implementation and debugging details.