Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SQLite parser for android burners app (burners.sqlite) file #4928

Open
wants to merge 9 commits into
base: main
Choose a base branch
from

Conversation

brokamal
Copy link

@brokamal brokamal commented Dec 1, 2024

One line description of pull request

Add SQLite parser for android burners app (burners.sqlite) file

Description:

I add/edit several files:

  • add import android_burners to plaso/parsers/sqlite_plugins/init.py
  • add a new parser plugin androird_burners.py to plaso/parsers/sqlite_plugins/
  • add burners.db file to plaso/test_data/
  • add unit test android_burners.py to plaso/tests/parsers/sqlite_plugins/
  • modify android.yaml to support android_burners parser plugin (plaso/data/formatters/android.yaml)
  • modify timeliner.yaml to support android_burner parser plugin
    (plaso/data/timeliner.yaml)

Related issue (if applicable): fixes #

Notes:

All contributions to Plaso undergo code review.
This makes sure that the code has appropriate test coverage and conforms to the
Plaso style guide.

One of the maintainers will examine your code, and may request changes. Check off the items below in
order, and then a maintainer will review your code.

Checklist:

  • Automated checks (GitHub Actions, AppVeyor) pass
  • No new new dependencies are required or l2tdevtools has been updated
  • Reviewer assigned
  • Test data has a Plaso compatible license

@joachimmetz
Copy link
Member

Thanks for the PR, I'm a bit preoccupied at the moment will try to take a look as soon as time permits

@brokamal
Copy link
Author

brokamal commented Dec 5, 2024

Thanks for the PR, I'm a bit preoccupied at the moment will try to take a look as soon as time permits

We're still working on the project, it's not finished yet. So I'm closing this pull request. Thank you.

@brokamal brokamal closed this Dec 5, 2024
@joachimmetz
Copy link
Member

We're still working on the project, it's not finished yet. So I'm closing this pull request. Thank you.

thanks for that context, note that you can change the PR to draft status as well

@brokamal brokamal reopened this Dec 6, 2024
@joachimmetz joachimmetz self-assigned this Mar 2, 2025
@joachimmetz
Copy link
Member

@brokamal a couple of questions

  • is this PR ready for review?
  • what is the origin of the test data file?

@joachimmetz joachimmetz added the pending reporter input Issue is pending input from the reporter label Mar 2, 2025
message:
- 'Phone Number: {phone_number_id}'
- 'Voice Mail: {voicemail_url}'
- 'User Id: {user_id}'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

style guide nit: use identifier instead of id

features (str): Features enabled for the burner.
total_minutes (int): Total minutes available for calls on the burner.
expiration_date (datetime): Expiration date of the burner.
date_created (datetime): Date the burner was created.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

for consistency with the rest of the codebase please use creation_time (also applicable to the other date and time values)

from plaso.containers import events
from plaso.parsers import sqlite
from plaso.parsers.sqlite_plugins import interface

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

style guide nit: use 2 empty lines

self.date_created = None
self.last_updated_date = None
self.renewal_date = None

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

style guide nit: use 2 empty lines

'renewal_date')

parser_mediator.ProduceEventData(event_data)

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

style guide nit: use 2 empty lines

@joachimmetz
Copy link
Member

rebased PR

@joachimmetz
Copy link
Member

@brokamal can you PTAL at failing CI tests and linter warnings

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pending reporter input Issue is pending input from the reporter
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants