Now Released: XRY 8.1, XAMN 4.4 and XEC 5.2

With significant advances in extraction and decoding speeds, first-to-market support for the official iOS 13 release, new mobile app extraction capabilities and much more.

Today’s release of new versions of XRY, XAMN and XEC gives mobile forensic examiners, investigators and their organizations a range of benefits and new and improved capabilities.LEARN MORE ON THE MSAB WEBSITE
TRY FREE FOR 30 DAYS

Here are a number of the highlights:

XRY 8.1
Introducing XRY Photon Manual: The XRY Photon feature is designed for recovering smartphone app data that is inaccessible through normal extraction techniques. It uses an exclusive screen-scraping function to capture the data electronically in a .xry file with searchable artifacts. Now the power of XRY Photon has been expanded to cover hundreds of additional apps with a new manual option.

Watch video: Introducing XRY Photon Manual

Even faster extractions: XRY 8.1 is our fastest version ever. We have improved our embedded file decoders and added a Fast Mode Option to XRY Photon, making it up to 25 times faster. Many more speed-improving upgrades are included.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

First-to-market support for the official iOS 13 release: XRY supports extracting the latest official iOS version 13 and now offers improved decoding support for media files and multiple Apple apps.

New step by step extraction process for iOS devices: Users can now perform extractions step by step to save time and improve efficiency and success rates. You choose which apps to decode, whether to include deleted SQL data, which Python scripts to use and whether to enable backup encryption.

Improved physical security bypass for Samsung Galaxy S6 & S7: XRY now offers improved support for bypassing the security of locked Samsung Galaxy S6 and S7 phone models.

New Python API for those who use Python scripts: We’ve added an improved GUI for using Python scripts, and XRY now supports the latest Python version 3.7.4. Scripts using older Python versions are still supported. Other mobile forensic tools are still relying on far older Python APIs.

MSAB Kiosk/Tablet & XRY Express
Digital Documentation Capture: If your organization or jurisdiction requires the use of a standard digital forensic report, XRY now can capture data from the workflow to automatically populate fields in standard forensic reports, which can be a tremendous efficiency generator and time saver.

XAMN 4.4
Chat View added to free XAMN Viewer: XAMN Viewer now includes the powerful Chat View, making it the most capable free mobile forensics analysis tool available. The Chat View is a user favorite for investigating message conversions. It was previously exclusive to XAMN Spotlight and XAMN Horizon.
> Download XAMN Viewer For Free

New screenshot tool: XAMN features a new screenshot tool which lets you capture screenshots of all or selected part of your analysis. This enables displaying specific elements and offers greater flexibility in reporting and presentations.

Improved interface and speed: Multiple improvements make XAMN faster and more intuitive. They include: Faster loading of XRY files into XAMN, a new feature that makes it easier to browse images in full-screen mode, and improvements to the Project VIC functionality.

XEC 5.2
Improved options in XEC Export: New options in XEC Export enable organizations to reduce stored data volumes by automatically deleting redundant files.

KAD (Keep Awake Dongle) pack now available
Newly purchased XRY kits include a KAD (Keep Awake Dongle) pack. The pack includes the Keep Awake Dongle, a Micro USB OTG adaptor and a USB-C OTG adaptor.

The KAD simulates interaction with smartphone screens and by doing so prevents the phones from entering locked mode. The KAD works with Android phones and it is recommended for unlocked phones at the time of seizure, before being placed in a Faraday bag.

Leave a Comment

Latest Videos

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools. 

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools.

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_7QiFTiuY7Vw

AI In CSAM Investigations And The Role Of Digital Evidence In Criminal Cases

Forensic Focus 22nd March 2023 12:44 pm

Throughout the past few years, the way employees communicate with each other has changed forever.<br /><br />69% of employees note that the number of business applications they use at work has increased during the pandemic.<br /><br />Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.<br /><br />Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.<br /><br />Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.<br /><br />With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.<br /><br />Join Monica Harris, Product Business Manager, as she showcases how investigators can:<br /><br />- Manage multiple cloud collections through a web interface<br />- Cull data prior to collection to save time and money by gaining these valuable insights of the data available<br />- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box<br />- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee<br />- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 12:00 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...