Compromised environment
ADB & USB debugging
On a device with ADB enabled, a connected computer can install, control and observe the app — common in analysis and automation setups.
What it is
ADB (Android Debug Bridge) is a developer tool that controls a device from a PC; its presence indicates USB debugging is enabled.
How attackers use it
Attackers use ADB to drive the app automatically, collect logs/state, and combine it with other tools to automate analysis.
How Appsolid detects it
USB-debugging property detection
Checks the adbd service state and USB-config system properties to detect active ADB, and reports an ADB event.
Honest scope: Legitimate cases are common (developers, wireless debugging, power users), so false positives are likely — it's opt-in and especially useful as telemetry (visibility).