XRY physical suppor...
 
Notifications
Clear all

XRY physical support for Sony Xperia M2 (D2303)

7 Posts
3 Users
0 Likes
627 Views
(@kuiper)
Posts: 7
Active Member
Topic starter
 

Hi friends,

Just a very quick one - did XRY 6.9 support a physical extraction of Sony Xperia M2 (D2303)?

If not, did it support a logical?

Thanks in advance )

 
Posted : 15/07/2016 5:22 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I know I am picky, but "did"? 😯

I mean, that is (was) an "interim" (whatever that means) version released in 2014
https://www.msab.com/2014/04/24/xry-offers-support-for-new-encrypted-version-of-whatsapp/
latest should be 7.0/7.01, but there are/were 6.10, 6.11, … 6.16.

Do you mean, "would a copy of XRY 6.9 do …" (now) or "would a copy of XRY 6.9 have been capable of" (at a given time)?

If you are a customer of MSAB, you may want to tell them how you dissent from those that asked them to NOT publish the list of supported devices [1]
https://www.msab.com/faq-items/what-devices-do-you-support/

jaclaz

[1] Which I presume has to be because someone thinks that criminals or wanna-be criminals would peruse such a list to choose which devices to NOT buy or use. ?
Possibly an extension of the "security by obscurity" concept.

 
Posted : 15/07/2016 8:10 pm
(@kuiper)
Posts: 7
Active Member
Topic starter
 

Hi jaclaz,

Thanks for the reply )

I'm confusing myself I think…

I was a customer up until 6.13 - I've stll got that version but very rarely dust off the XRY dongle.

The log files I'm looking at for a case state 'XRY Version 6.9'. I looked at the current release (7) and thought they had changed their numbering system from 6.1X… The extraction is from July 2015 and the viewer they provided is V 6.15, so let's start afresh ) …

Did XRY 6.15 support a physical for this handset? Or indeed, does it now?

Regarding keeping the supported models list 'secret' - I think that's more due to embarrassment - Potential new customers would be able to compare against other leading brands and would likely go elsewhere… Just my opinion.

 
Posted : 15/07/2016 8:45 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Did XRY 6.15 support a physical for this handset? Or indeed, does it now?

You will need a reply by someone that has access to that mythical list or "device manual" to be sure.

Common sense tells me that since 6.15
https://www.msab.com/download/release_notes/en/english_xry_release_notes/XRY_6.15_release_notes_EN.pdf

adds the support* for the Xperia M2 D2305* (which I believe is a very similar model with the Qualcomm MSM8226 as opposed to the Qualcomm MSM8926), it is likely, but cannot say for sure.

jaclaz

*=Untested devices 😯

 
Posted : 15/07/2016 9:39 pm
(@kuiper)
Posts: 7
Active Member
Topic starter
 

Hi jaclaz,

Thanks again )

I saw that, but it's basically a case of the police saying they'd done a physical exam but it was actually a logical and they'd used a different phone profile instead of the D2303. I wanted to know if it was supported at the time or not.

I've figured it out now - It's not supported in my 6.13, release notes for 6.14 show it as newly supported for logical but not physical and 6.15 doesn't mention it, so it must only have been supported for logical at the time…

The mythical supported list does exist - anyone who has XRY installed can go to the installation directory (C\Program Files (x86)\Micro Systemation\Forensic Pack\Documentation) and there's an Excel spreadsheet (Supported Features).

Anyone reading this can feel free to link to it if, like me, you don't agree with the secrecy policy… 😉

 
Posted : 16/07/2016 2:30 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Anyone reading this can feel free to link to it if, like me, you don't agree with the secrecy policy… 😉

And just for the record, should there be some sort of NdA or similar involved, the actual Excel sheet (obviously in an outdated version, without a proper date/version reference) has already been published …. by the FBI 😯 (actually RCFL wink )
https://www.rcfl.gov/downloads/documents/
https://www.rcfl.gov/downloads/documents/xry-supported-devices/view

Anyway the "right" way would be IMHO that actual customers of XRY/MSAB could "vote" on whether the list of supported devices should be made public or not (and in a properly updated/referenced form).

jaclaz

 
Posted : 16/07/2016 3:46 pm
XRY_Mike
(@xry_mike)
Posts: 28
Eminent Member
 

Hello MSAB here…

You can access an update to date list of supported devices in XRY anytime you like here

https://customer.msab.com/Support/DeviceRequest

This is the latest list online behind the customer portal firewall to prevent public access.

The website link given to RCFL is woefully out of date and refers to v6.6 XRY which was released in June 2013. Please don't use that as a basis for comparison. We asked them to stop publishing the list at the request of other LE agencies worldwide.

The reasons stated above given for keeping it non-public are correct, but if there is sufficient customer agreement to publicize the list, then we will certainly consider it.

If sufficient readers post a reply asking for it to be publicized below - then we hold a poll as suggested.

 
Posted : 18/07/2016 12:03 pm
Share: