How the JAR Tools security scanner detects suspicious behavior in Java archives — network activity, process execution, obfuscation, and more.