check-for-incoming-call-in-dotnet-on-android.yml

rule:
  meta:
    name: check for incoming call in .NET on Android
    namespace: host-interaction
    authors:
      - michael.hunhoff@mandiant.com
    scopes:
      static: function
      dynamic: unsupported  # requires property
  features:
    - and:
      - property/read: Android.Content.Intent::Action
      - string: "android.intent.action.PHONE_STATE"
      - property/read: Android.Telephony.TelephonyManager::ExtraStateRinging