Today, MSAB released new versions of our product suites – XRY, XAMN and XEC – with many significant new and improved capabilities to help investigators, examiners and other users work faster, smarter and more efficiently.
Among the highlights are faster Android extractions, significantly improved Android and iOS app support in XRY, a time-saving intelligent free text search function, many user experience improvements and a new export wizard in XAMN. The new version of XEC Director gives supervisors the ability to collect more granular information on user levels.
XRY 7.12 adds support for 342 mobile devices and apps, bringing the total number of supported devices and app profiles to 27,118.
This summarizes additional highlights in each product. Customers with current licenses are encouraged to download the newest product releases today.
The app downgrade feature now supports the latest Android OS versions: Users can now acquire app data even from devices with the latest Android versions. This enables access to data that has been inaccessible through standard extractions from WhatsApp, Facebook Messenger, WeChat, LINE, Snapchat, Telegram, QQ and many other apps. You can choose to downgrade apps with just a few clicks during the XRY extraction.
Faster, smarter, easier extractions: We have improved the speed of Android extractions by optimizing the extraction protocol. Another time saving change: XRY now automatically accepts Android backup requests during the extraction workflow. Until now, those backup requests required an examiner to manually take action before the extraction could continue. Lastly, XRY 7.12 now offers the option to soft abort, to skip individual steps in an ongoing extraction process instead of aborting the entire extraction and having to restart.
Improved iOS app support: XRY now supports the latest versions of multiple iOS apps, and we have expanded the breadth of log and workout data acquired from the Apple Health app to include step count and distance as well as heartbeats.
Improvements to XRY Photon: We have now improved the workflow to let you access Photon directly from the XRY start view as seen below. Photon now also supports WhatsApp Business.
The intelligent free text search now saves and shows users the last five used search terms.
The new export wizard makes reporting more intuitive.
Intelligent free text search: With this improvement, when XAMN users start typing a word or phrase that they are searching for, XAMN instantly presents matching text found in the case. In addition, the text search now saves and shows users the last five used search terms.
Export wizard: A new, user-friendly export wizard now guides users through the steps of selecting which findings to report, and which file format and layout to use – making reporting more intuitive.
Miglioramenti dell’esperienza utente: Numerosi sono i miglioramenti apportati in XAMN 4.2 in termini di UX, a cominciare dai nomi dinamici delle schede che riflettono le categorie di artefatti scelti, e schemi di colore personalizzabili dell’interfaccia utente. Traduzioni più rapide di grandi volumi di parole: XAMN consente ora agli utenti di tradurre blocchi di contenuti, come ad esempio un’intera conversazione di chat, anche offline, utilizzando un database linguistico scaricabile (richiede una licenza aggiuntiva). Finora, le chat e i messaggi di testo potevano essere tradotti solo uno alla volta. Abbiamo anche aggiunto il supporto per importare e convertire i file .ufdr da analizzare in XAMN Horizon.
Advanced user profiles: Supervisors managing multiple mobile forensic users and computers with XEC Director can now collect user activity data and adjust workflows to better match user needs and skills. For example, they can remove some workflow steps and instructions when users reach a more experienced level.
Standard management information reports for system group/site are also now available, along with the ability to easily import user lists from .xls and .csv files.
XAMN Express now replaces XRY Viewer as the standard analytical viewing software used on new MSAB Kiosks. MSAB Kiosks currently in the field can be upgraded by contacting firstname.lastname@example.org.