I was thinking about spyware and wondered if you could sniff for suspcious network traffic from spyware.
Mobile spyware usually uploads messages, location and images, is it possible to analyse network traffic and detect these actions?
I can't seem to find many google resources mentioning this. I know that GlassWire does network monitoring on a per-device basis and alerts for suspicious network activity.
An issue is detecting real spyware image uploads and not legitimate user uploads.