Binder Trace is our tool to help track how Android applications interact with each other and the underlying operating system. This workshop covers: Setting up Binder Trace to use on an Android emulator and (if you’ve brought one) a real device An introduction to using Binder Trace , including The key UI components How to interpret the different displays How to filter message types How to export data How to recognise errors in parsing and what you can do about them How binder and Binder Trace work: The binder architecture How Binder Trace accesses binder messages How messages are recognised and how their data is parsed Using Binder Trace against a real 3rd-party application to find out what it’s doing under the hood Looking for privacy and security risks using Binder Trace Using Binder Trace to help with vulnerability research For this workshop you will need a laptop with the following already installed: An Android emulator with a root shell Frida-tools It will be useful if you know the basics of getting Frida running on the emulated device.