Skip to content

Commit

Permalink
Update Android YAML formatter to support Airtag data
Browse files Browse the repository at this point in the history
  • Loading branch information
hanamahes78 committed Dec 8, 2024
1 parent 1330363 commit 4b92f12
Showing 1 changed file with 27 additions and 0 deletions.
27 changes: 27 additions & 0 deletions plaso/data/formatters/android.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,33 @@
# Plaso Android related event formatters.
---
type: 'conditional'
data_type: 'android:airtag:event'
enumeration_helpers:
- input_attribute: 'rssi'
output_attribute: 'rssi'
default_value: 'UNKNOWN'
values:
-100: 'Very Weak'
-80: 'Weak'
-60: 'Average'
-40: 'Strong'
message:
- 'Device address: {device_address}'
- 'Signal strength: {rssi}'
- 'Latitude: {latitude}'
- 'Longitude: {longitude}'
- 'Device name: {device_name}'
- 'First discovery: {first_discovery}'
- 'Last seen: {last_seen}'
short_message:
- 'Device address: {device_address}'
- 'Signal strength: {rssi}'
- 'Last seen: {last_seen}'
separator: ', '
short_source: 'AirGuard AirTag Tracker'
source: 'AirGuard AirTag Tracker event data.'
---
type: 'conditional'
data_type: 'android:app_usage'
message:
- 'Package: {package}'
Expand Down

0 comments on commit 4b92f12

Please sign in to comment.