From ForensicsWiki
Revision as of 13:37, 22 September 2009 by Svedman (Talk | contribs)

Jump to: navigation, search
Maintainer: Micro Systemation
OS: Windows
Genre: Template:Mobile forensics
License: Commercial
Website: www.msab.com

.XRY, pronounced "dot-ex-arr-why", is a forensic system for analyzing digital devices written by Micro Systemation. It is designed to retrieve information from mobile phones for later analysis.


.XRY comes complete with software that reads information and then creates reports on the data, and also the hardware: the ".XRY Communications Unit". The hardware is connected to a computer using a USB cable. The standard package of phone cables contains 40 different cables. USB, Bluetooth and IR are available in order to connect as many different telephone models as possible to the unit.

Specifically it can grab phone book information, SMS and other text messages, call lists, calendar entries, task items, pictures, media files, and SIM card information. .XRY also retrieves a lot of information about the phone itself, such as IMEI/ESN, IMSI, model no., matching between the clock in the telephone and the computer, etc. An encrypted file is created, containing a copy of the information retrieved from the phone. .XRY has got full support for Unicode.

Supported devices

The tool supports more than 800 phone models including GSM, UMTS and CDMA phones. SIM cards are supported as well. Smartphones such as BlackBerry, iPhone, Symbian and Windows Mobile are supported.

Support for new phones is added in each release, which in 2008 was quarterly.

.XRY Reader

.XRY creates a report containing the user's own logotype, address, etc. and the basic required information. The generated report can either be printed out, exported in whole or in part, or forwarded electronically with .XRY Reader which is distributed for free. A search function simplifies the task of searching for a particular name/number or some other type of text.

External Links