MSAB New Release: XRY 9.1, XAMN 5.1 And XEC Export 6.0.1

Significantly increase the amount of location data, extract more refined data from more devices more securely and in less time, view content from warrant returns and more.

Today’s release of new versions of XRY, XAMN and XEC Export represents a substantial advance in our efforts to help our customers acquire mobile data faster, easier and more securely.

XRY 9.1 brings significant extraction and decoding speeds to more mobile devices, with the total number of supported devices exceeding 32400. XRY 9.1 features improvements to the streamlined user interface that make the extraction process easier than ever before. Plus, you can now get past locked LG Android Qualcomm based devices and get a complete data extraction.

MSAB is proud to say that the XRY suite of tools can assist law enforcement agencies to adhere to restricted search criteria and data privacy regulations. We have always been aware of the need for ensuring the security of data for those responsible for processing sensitive personal data.

To process a wider variety of mobile related data; XAMN now enables you to ingest and view content from warrant returns in your case. XAMN 5.1 also allows rapid access to all the apps from the start page to simplify the selection of decoded app artifacts for examiners.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Among the highlights we have added support in XEC Export 6.0.1 for new data formats to speed up and automate the transfer of data between MSAB and third-party analytical tools.

Highlights of the latest release are summarized below and, as always, we highly recommend that current customers download the Release Notes from the Customer Portal for a complete description of all updated product capabilities and supported devices and apps.

Release highlights:

XRY 9.1

XRY 9.1 introduces an updated version of the “Categories and Time Span” step by step feature which allows examiners to quickly refine their extractions to individual file categories within specified time ranges. This allows operators to restrict mobile device investigations to help comply with data privacy requirements, such as time restrictions or specific data types.

XRY also includes significant improvements in the recovery of location data from both iOS and Android databases.

In XRY 9.1, you can now perform physical extractions of LG Android Qualcomm based devices. This new solution will empower you to overcome locked devices for a complete data extraction.

The new version of XRY features multiple enhancements to the user interface:

  • Design improvements to the Case Overview to make it easier to find XRY files.
  • New step-by-step procedures to help users save time when creating a new case.

…and much more.

MSAB also offers service options for approved agencies that need access to the most challenging locked or encrypted mobile phones in critical cases. These services provide access to many of the latest Samsung Galaxy, Huawei and many other Android devices. Please contact us at services@msab.com for more information.

XAMN 5.1

XAMN now enables you to parse content from warrant returns and include that data in your case as .xry file. The first iteration is designed to support Snapchat warrant returns and it will address popular returns from Facebook, Google, iCloud and Instagram in future releases.

XAMN 5.1 also introduces an enhanced Case Overview display of all apps in the case and the number of decoded artifacts per app to speed up the selection for examiners.

In addition, XAMN now supports the latest VICS 2.0 database for use with child abuse investigations. MSAB is proud to continue working closely with Project VIC International and the community to help detect and prevent the spread of child sexual abuse material.

XAMN Horizon introduces a new capability that automatically links person profiles which are identified as related, helping you to focus investigations on people of interest and build a complete profile of a suspect, using all available identifiers.

In XAMN Elements you can now run your Python Scripts directly, without the need to launch XRY.

XEC Export 6.0.1

For users of XEC Export, we have enhanced capabilities and now offer additional export options for Open Office documents and Dictionary, along with the new NUIX exporter to transfer data into different formats as a fully automated background service.

Leave a Comment

Latest Videos

Digital Forensics News Round Up, February 28 2024 #digitalforensics #dfir

Forensic Focus 29th February 2024 4:58 pm

Digital Forensics News Round-Up, February 21 2024 #digitalforensics #dfir

Forensic Focus 21st February 2024 6:19 pm

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts. 

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director 
43:45 – Privacy of user data

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts.

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director
43:45 – Privacy of user data

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_ifoHVkjJtRc

How MSAB Is Managing The Digital Forensics Challenges Of Frontline Policing

Forensic Focus 21st February 2024 3:07 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles