Difference between revisions of ".XRY"

From ForensicsWiki
Jump to: navigation, search
m
m (Update for 2012)
 
(6 intermediate revisions by one other user not shown)
Line 8: Line 8:
 
}}
 
}}
  
'''XRY''', pronounced "ex-arr-why", is a forensic system for analyzing digital devices written by [[Micro Systemation]]. It is designed to retrieve information from mobile phones for later analysis.  
+
'''XRY''', pronounced "ex-arr-why", is a forensic system specifically designed for analyzing mobile digital devices written by [[Micro Systemation]]. The software is designed to run on a Windows computer and will retrieve information from mobile devices for immediate display of the results or files can be saved for later analysis. At the time of writing support levels included smartphones, gps units and mobile tablets such as the iPad.
  
 
== Overview ==
 
== Overview ==
XRY comes complete with software that reads information and then creates reports on the data, and also the hardware: the "XRY Communications Unit". The hardware is connected to a computer using a USB cable. The standard package of phone cables contains 40 different cables. USB, Bluetooth and IR are available in order to connect as many different telephone models as possible to the unit.
+
XRY comes complete as a package containing both hardware and software to read the device information. XRY currently includes the following hardware in the package; XRY Communications Unit, SIM Card Reader, Clone SIM Cards, Write-Protected Memory Card Reader & Complete set of Cables.  
  
Specifically it can grab phone book information, SMS and other text messages, call lists, calendar entries, task items, pictures, media files, and SIM card information. XRY also retrieves a lot of information about the phone itself, such as IMEI/ESN, IMSI, model no., matching between the clock in the telephone and the computer, etc. An encrypted file is created, containing a copy of the information retrieved from the phone. XRY has got full support for Unicode.
+
The hardware is connected to a Windows computer using a USB cable and is capable of displaying immediate results from the device extraction.
 +
 
 +
The software can grab phone book information, SMS and other text messages, MMS, call lists, calendar entries, task items, pictures, media files, and SIM card information. XRY also retrieves a lot of information about the phone itself, such as IMEI/ESN, IMSI, model no., matching between the clock in the telephone and the computer, etc. The latest version includes support for some smartphone applications such as Facebook, Myspace, Skype and Gmail.
 +
 
 +
The system generates an encrypted file called .XRY which contains a copy of all the information retrieved from the phone. The company also licences customers to free issue their XRY Reader application so these secure encrypted files can be read by authorized third parties.
 +
 
 +
One difference with XRY is that the software allows for the extraction of up to 3 different mobile devices simultaneously on the same computer from a single license key.
  
 
== Supported devices ==  
 
== Supported devices ==  
The tool supports more than 1900 phone models including [[GSM]], [[UMTS]] and [[CDMA]] phones. SIM cards are supported as well. Smartphones such as Android, BlackBerry, iPhone, Symbian and Windows Mobile are supported.  
+
The tool supports more than 5,000 different mobile device profiles including [[GSM]], [[UMTS]], [[CDMA]] and iDEN phones. SIM cards are supported as well. Smartphones such as Android, BlackBerry, iPhone, Symbian and Windows Mobile are also supported.
 +
 
 +
XRY is one of a limited number of mobile forensic products which also offers Physical Extraction capabilities on devices to gain access to potentially more information from a device, including deleted data.
  
Support for new phones is added in each release, which in 2008 was quarterly.
 
  
 
== XRY Reader ==
 
== XRY Reader ==
Line 24: Line 31:
  
 
== External Links ==  
 
== External Links ==  
* [http://www.msab.com/en/mobile-forensic-products/XRY-Mobile-Version-Forensic-Software/ Official web site]
+
* [http://www.msab.com/ Official web site]
 +
* [http://en.wikipedia.org/wiki/.XRY Wikipedia]

Latest revision as of 12:06, 17 January 2012

XRY
Maintainer: Micro Systemation
OS: Windows
Genre: Template:Mobile forensics
License: Commercial
Website: www.msab.com

XRY, pronounced "ex-arr-why", is a forensic system specifically designed for analyzing mobile digital devices written by Micro Systemation. The software is designed to run on a Windows computer and will retrieve information from mobile devices for immediate display of the results or files can be saved for later analysis. At the time of writing support levels included smartphones, gps units and mobile tablets such as the iPad.

Overview

XRY comes complete as a package containing both hardware and software to read the device information. XRY currently includes the following hardware in the package; XRY Communications Unit, SIM Card Reader, Clone SIM Cards, Write-Protected Memory Card Reader & Complete set of Cables.

The hardware is connected to a Windows computer using a USB cable and is capable of displaying immediate results from the device extraction.

The software can grab phone book information, SMS and other text messages, MMS, call lists, calendar entries, task items, pictures, media files, and SIM card information. XRY also retrieves a lot of information about the phone itself, such as IMEI/ESN, IMSI, model no., matching between the clock in the telephone and the computer, etc. The latest version includes support for some smartphone applications such as Facebook, Myspace, Skype and Gmail.

The system generates an encrypted file called .XRY which contains a copy of all the information retrieved from the phone. The company also licences customers to free issue their XRY Reader application so these secure encrypted files can be read by authorized third parties.

One difference with XRY is that the software allows for the extraction of up to 3 different mobile devices simultaneously on the same computer from a single license key.

Supported devices

The tool supports more than 5,000 different mobile device profiles including GSM, UMTS, CDMA and iDEN phones. SIM cards are supported as well. Smartphones such as Android, BlackBerry, iPhone, Symbian and Windows Mobile are also supported.

XRY is one of a limited number of mobile forensic products which also offers Physical Extraction capabilities on devices to gain access to potentially more information from a device, including deleted data.


XRY Reader

XRY creates a report containing the user's own logotype, address, etc. and the basic required information. The generated report can either be printed out, exported in whole or in part, or forwarded electronically with .XRY Reader which is distributed for free. A search function simplifies the task of searching for a particular name/number or some other type of text.

External Links