Today, MSAB released new versions of our product suites – XRY, XAMN and XEC – with many significant new and improved capabilities to help investigators, examiners and other users work faster, smarter and more efficiently.
Among the highlights are faster Android extractions and significantly improved Android and iOS app support in XRY, plus a time-saving intelligent free text search function, many user experience improvements and a new export wizard in XAMN. The new version of XEC Director gives supervisors the ability to collect more granular information on user levels for improved management and efficiency.
XRY 7.12 adds support for 342 mobile devices and apps, bringing the total number of supported devices and app profiles to 27,118.
This summarizes additional highlights in each product.XRY 7.12
The app downgrade feature now supports the latest Android OS versions: Users can now acquire app data even from devices with the latest Android versions. This enables access to data that has been inaccessible through standard extractions from WhatsApp, Facebook Messenger, WeChat, LINE, Snapchat, Telegram, QQ and many other apps. You can choose to downgrade apps with just a few clicks during the XRY extraction.
Faster, smarter, easier extractions: We have improved the speed of Android extractions by optimizing the extraction protocol. Another time saving change: XRY now automatically accepts Android backup requests during the extraction workflow. Until now, those backup requests required an examiner to manually take action before the extraction could continue. Lastly, XRY 7.12 now offers the option to “soft abort” and, skip individual steps in an ongoing extraction process instead of aborting the entire extraction and having to restart.
Improved iOS app support: XRY now supports the latest versions of multiple iOS apps, and we have expanded the breadth of log and workout data acquired from the Apple Health app to include step count and distance as well as heartbeats.
Improvements to XRY Photon: We have now improved the workflow to let you access Photon directly from the XRY start view. Photon now also supports WhatsApp Business.
Intelligent free text search: With this improvement, when XAMN users start typing a word or phrase that they are searching for, XAMN instantly presents matching text found in the case. In addition, the text search now saves and shows users the last five used search terms.
Export wizard: A new, user-friendly export wizard now guides users through the steps of selecting which findings to report, and which file format and layout to use – making reporting more intuitive.
User experience improvements: There are many UX improvements in XAMN 4.2, including dynamic tab names that reflect the chosen artifact categories, and customizable user interface color schemes.
Faster, high volume translations: XAMN now lets users translate content in bulk, such as an entire chat conversation, even offline, using a downloadable language database (requires an additional license). Until now, chat and text messages could only be translated one at a time.
We have also added support for importing and converting .ufdr files into .xry files for analysis in XAMN Horizon.
Advanced user profiles: Supervisors managing multiple mobile forensic users and computers with XEC Director can now collect user activity data and adjust workflows to better match user needs and skills. For example, they can remove some workflow steps and instructions when users reach a more experienced level.
Standard management information reports for system group/site are also now available, along with the ability to easily import user lists from .xls and .csv files.
MSAB Kiosk
XAMN Express now replaces XRY Viewer as the standard analytical viewing software used on new MSAB Kiosks. MSAB Kiosks currently in the field can be upgraded by contacting ps@msab.com.