DroidDetective

DroidDetective is a Python-based machine learning framework designed to analyze Android application packages (APKs) for potential malware behavior. It utilizes a Random Forest classifier trained on data from approximately 14 malware families and 100 benign apps, examining permissions specified in the APK's AndroidManifest.xml file to provide predictions on whether an app is malicious. Notably, the tool offers the ability to retrain its model with new datasets and can output results in both the CLI and JSON format for further analysis.