Android Debug Bridge (ADB)
Definition
A command-line tool included in the Android SDK that allows communication with an Android device over USB or Wi-Fi. Used for logical and file-system extraction when USB debugging is enabled; higher-privilege adb commands require root access.
- Origin
- Android SDK command-line tool
- Connection method
- USB or Wi-Fi
- Precondition
- USB debugging enabled on device
- Elevated commands
- Require root access
Common questions
Why does USB debugging being disabled matter so much to a forensic examiner?+
Without USB debugging already enabled, ADB cannot connect to the device at all, and enabling it typically requires unlocking the device first, which is why locked devices with debugging off often force examiners toward alternative acquisition methods such as chip-off or exploit-based tools.
What is the practical difference between a logical extraction over ADB and a rooted extraction?+
A standard ADB session without root gives access to a limited set of app data and shared storage through the file-system permissions the OS allows, while root access exposes protected app sandboxes and system partitions, greatly expanding what can be extracted.
Related terms
- AFC (Apple File Conduit)
- The iOS service that exposes the media partition for file transfer during synchronisation. In standard form it only surfaces the media partition;...
- File-System Extraction
- A deeper form of extraction that retrieves the full accessible directory tree by mounting the file system or using a privileged API...
- iTunes Backup Protocol
- Apple's proprietary protocol for transferring device data to a computer. Used by forensic tools to conduct logical acquisition of iOS devices; backup...
- Logical Acquisition
- An extraction method that uses the device's own operating system interfaces, such as iTunes backup or Android Debug Bridge, to export the...
- Trust Relationship (iOS)
- The pairing between an iOS device and a computer established when the user taps 'Trust' after connecting. A forensic logical or file-system...