Addition of properties to observable:AndroidDeviceFacet

[chrishargreaves]

Background

AndroidDeviceFacet contains:

• observable:androidFingerprint xsd:string 0..1
• observable:androidID xsd:hexBinary 0..1
• observable:androidVersion xsd:string 0..1
• observable:isADBRootEnabled xsd:boolean 0..1
• observable:isSURootEnabled

There is more granularity than that which can be captured for android devices i.e. :

• build number
• Security Patch Level (SPL)

emu64a:/ $  getprop ro.build.version.release
16
127|emu64a:/ $  getprop ro.build.version.security_patch                                                                
2025-07-05
emu64a:/ $ getprop ro.build.display.id
sdk_gphone64_arm64-userdebug 16 BE2A.250530.026.F3 13894323 dev-keys
emu64a:/ $ 

Requirements

Requirement 1

AndroidDeviceFacet has additional property of observable:androidSecurityPatchLevel

Requirement 2

AndroidDeviceFacet has additional property of observable:androidBuildNumber

Risk / Benefit analysis

Benefits

Would support UCO/CASE integration into https://github.com/prosch88/ALEX

Risks

None identified

Competencies demonstrated

Competency 1

Competency Question 1.1

Two devices run the same Android version. Which of them was running an out-of-date security patch level at the time of acquisition?

Competency Question 1.2

For a given device, which exact firmware build was present?

Solution suggestion

Addition of properties as described above.