XRY and XAMN are digital forensics and mobile device forensics product by the Swedish company MSAB used to analyze and recover information from mobile devices such as mobile phones, smartphones, GPS navigation tools, and tablet computers.

2. WHAT IS XRY?
• A mobile device forensics product by the
Swedish company MSAB.
• Designed to recover and analyze the
contents of a digital device in a forensically
secure manner.
• Latest Version : 9.4

3. XRY is purpose built
software, complete with the
necessary hardware for
recovering data from mobile
devices .

4. XRY PACKAGE INCLUDES:
• XRY Application Software and 12 month License
• XRY Briefcase with Cable Organizer
• XRY Communication Unit
• XRY Office Mobile Phone Cable Kit
• SIM id-Cloner Device with 12 month License
• 3 Rewritable SIM id-Cloner Examination Cards
• Write Protected Universal Memory Card Reader
• Cleaning Brush & Accessories
• New cable support for 12 months

5. MICRO SYSTEMATION XRY USB KEY XRY OFFICE MOBILE PHONE CABLE KIT

6. MICRO SYSTEMATION XRY COMMUNICATIONS UNIT

7. The USB end highlighted
is the main USB end.
The secondary USB is only
for increased data
transfer rates
XRY COMMUNICATIONS UNIT-TO-COMPUTER CABLE

8. SYSTEM REQUIREMENTS FOR XRY
• Processor : Intel 6th Generation (Core i3 or above
or equivalent.
• RAM : 8 GB
• Operating System : Windows 7 (64 bit).
• Display : 1600 x 900 Screen Resolution
• USB port : 1
• Other requirements : Microsoft .NET Framework 4.7.2

9. SUPPORTED DEVICES

10. FEATURES OF XRY
• Mobile Device Logical and Physical Examinations
• Tablet & GPS Devices Examinations
• Memory Card Logical and Physical Examinations
• SIM Card Reading and Cloning
• Secure XRY file with forensic log
• Hash Algorithms
• File Signature Analysis
• Selective Extraction of Data

11. MSAB products - XRY and XAMN works together to
perform a complete forensic examination of a mobile
device.

13. THREE SIMUTANEOUS EXTRACTIONS ARE POSSIBLE IN XRY

15. • Extracts data from digital devices by communicating with the operating
system of the device.
• Data Availability may be limited by permission levels in the handsets of
Operating System.
• Can sometimes recover deleted data – Handset Dependent.
• Different protocols are used for :
* Different handsets
* Different data types

17. • Extracts data from digital devices by bypassing the operating system to
dump all the raw data out of the device.
• Data recovered is in raw form.
• This memory dump is a complex data structure that gives you access to
system, protected and deleted data, plus allowing you to overcome certain
security and encryption challenges on locked devices.
• Decoding of raw data will vary based on handset model.

22. hgvfuj

23. • XAMN is responsible for filtering and searching through large
quantities of data in a highly effective manner.
• XAMN is used for Analysis , Reporting, and Filtering.
• Latest version : 6

26. ADVANTAGES
• Let you extract three devices at once.
• Includes XRY Photon (Automatic Screen Capture) for acquiring
unencrypted data from encrypted apps, when other methods don’t
work.
• The best available support on the market for Chinese Chipsets like
MTK, Spreadtrum, Coolsand & Infineon.
• User - friendly interface.
• Provides excellent support for Chip – off forensics and JTAG.

27. How XRY will be helpful in a Law Enforcement
Agency ?

29. TYPES OF DATA RESIDES IN A MOBILE DEVICE?
+

31. Q & A