Mobile data extraction

Recovering more data faster and easier to produce forensically sound evidence is critical in investigative and intelligence work. MSAB can help your organization through the challenges of mobile data extraction.

Contact us

Mobile device forensics

MSAB is the global leader in digital forensic technology for mobile device extraction and analysis. The MSAB vision is to empower every investigation with digital forensic solutions – for a safer world.

The product categories include the MSAB Extract – XRY, the MSAB Analyze – XAMN, and the MSAB Manage – XEC. MSAB supplies software for different hardware platforms. These platforms fall into two categories: Open and Turnkey. Open platforms (MSAB Office and MSAB Field) are designed for traditional Windows computers with point-and-click interfaces. Turnkey platforms (MSAB Kiosk and MSAB Tablet) are easy-to-use systems via touch screen interfaces.

MSAB also offers the MSAB Express, a simplified, locked-down workflow for mobile device extractions, installed on Windows based PCs.

MSAB helps the world’s leading law enforcement organizations to leverage the full potential of mobile forensics by offering them a wide range of services that include Strategy, Implementation, Advanced Access Services, Advanced Acquisition Lab, Training and Support.

The combination of our products, platforms and services gives a complete digital forensics solution to empower organizations, speed operations, conduct more efficient investigations and ensure the consistent quality of digital evidence.

MSAB offers you top-notch solutions and platforms enabling you to speed up your investigations with greater reliability at a lower cost.

Get started

Mobile forensics with lawful access and analysis to digital intel

MSAB provides you with top mobile forensics solutions to speed up your operations and to allow you to easily acquire and analyze evidence and intelligence from more mobile devices with greater functionality and control.

Frontline Extractions

MSAB understands the current challenges facing frontline personnel in the first few critical hours. You need to find vital evidence, insights and intel as quickly as possible. We can help.

Read more about the right solutions for your team.

Lab Extractions

In modern forensic labs you need solutions that can bypass device locks, acquire passcodes, extract, and decode digital evidence and intel — quickly and in a forensically sound way.

Read more about our digital forensic analysis solution.

Locked out of a mobile device in a critical case?

MSAB knows the way into the most challenging phones while maintaining complete chain of custody.

MSAB offers two options for examiners and investigators to unlock the most challenging mobile phones and help you get the previously unattainable intelligence and digital evidence you need to solve the most critical cases.

The MSAB Advanced Access Services use modern forensically sound techniques to recover and decrypt the data from even the most challenging mobile phones to help you get to the previously unattainable intelligence and digital evidence you need to solve cases.

How does it work?

MSAB Advanced Access Services are delivered in one of our secure MSAB forensic facilities using forensically sound techniques and with written documentation of every step. In selected special cases service may be able to take place on-site at a customer facility. Customers using MSAB Advanced Access Services will receive an XRY file containing all recovered data, alongside return of the device for safe custody.

MSAB Advanced Access Services has a proven track record of success in a number of critical investigations and cases.

Submit service request

The MSAB Advanced Acquisition Lab (AAL) is an ongoing digital forensics service available on-site for advanced extraction and decryption.

MSAB Advanced Acquisition Lab is ideally suited to existing MSAB customers who regularly encounter challenging devices and frequently need immediate access to mobile data.

What We Offer:

  • Unique Exploits
  • Unlimited number of extractions
  • Full training for users on how to use all the available exploits
  • Complete Tech support
  • Trustworthy and reliable service

Get in touch

Elevate your digital forensics goals and operations to a higher level

Considering that most organizations are overwhelmed by the ever-increasing data volumes and backlog of digital investigations, it is key that your processes are scalable. By reducing backlog and turnaround time, you can dedicate your primary energies to your core business activities.

MSAB can assist your organization with everything from discovering your opportunities and defining strategy, to setting up and optimizing the capability for mobile forensics.

With the strategic framework in place, we are partners in helping you implement the configured solution aligned in accordance with your priorities, budget and specifications. MSAB can assist customers with the full suite – installation, configuration and digital forensics solution architecture.

The implementation approach is based on a proven solution methodology that has been iterated in close collaboration with our existing customers. Together with a designated project manager, the delivered project work and milestones will be aligned according to your project schedule.

Get started

  • Solving child exploitation case with the right digital intelligence solution

    Catching the perpetrator in time while preserving the victims right to privacy was the main goal for the Internet Crimes Against Children Task Force. To enable this it was necessary to find a solution that would only recover the vital digital evidence without compromising people’s private data. More on this true story in the video.

    Download case

  • The only solution to select the digital evidence you need

    The need to understand the legal grounds for recovering digital evidence from mobile phones while maintaining the fundamental rights to privacy is increasingly important to our industry. We at MSAB are passionate about helping our customers acquire mobile data from more devices while emphasizing the right to privacy for victims and witnesses.

    Learn more   Contact an expert

/

Ten reasons to choose XRY over other mobile forensics tools

  • Data recovery from an ever-increasing number of mobile devices and app profiles.
  • Quickly refine extractions to data categories, apps or individual files within specified time ranges.
  • Simultaneously extract and decode data from three phones with a single license.
  • Decode images with automated image recognition up to 20 times faster with Nvidia CUDA enabled GPUs.
  • Support for the latest Android and iOS versions.
  • Recover and decode Warrant Returns, Cloud Data and iCloud Backups.
  • Secure your chain of evidence in a forensically sound file format with a complete audit log.
  • Includes XRY Photon for acquiring unencrypted data from encrypted apps, when other methods don’t work.
  • Market leading support for Chipsets like Exynos, Qualcomm, Kirin, MTK, Spreadtrum, Coolsand & Infineon.
  • Retrieve more location data along with related timestamps from embedded files in both iOS and Android databases.

  • XRY helps in solving a triple homicide

    “We worked on a very tragic case, but I’m happy to report we were able to make an arrest. XRY proved to be very valuable to our investigation. We used the digital intel obtained through the extraction to question the suspect on inconsistencies, and he ultimately confessed.

    I must say, I’ve worked with numerous companies throughout my law enforcement career and I’ve never had a company be more responsive than MSAB. I really respect that so many of your employees are former law enforcement or have a familiarity with what we do and understand the challenges of making sure that the digital evidence must be admissible in Court.”

    – Lieutenant, Sheriff’s Office in the US

    Sign up for a free trial

  • XRY recovers crucial mobile forensic evidence to secure a conviction

    When the former Olympic sprinter Oscar Pistorius admitted shooting his girlfriend Reeva Steenkamp, there was no need to prove who was responsible for her death. Instead, the question became whether the shooting was in self-defense, an accident, a crime of passion or a premeditated action.

    The XRY data recovery software retrieved the deleted WhatsApp messages from the phone of a scared Reeva Steenkamp and helped seal the conviction.

    Learn more about our solutions

  • XRY – the best mobile forensics solution for demanding situations

    • I have used both XRY and other systems in tactical and strategic commands. I find XRY has many advantages over the competition. It’s an easy choice if one has tested for themselves the abilities of each system as I have.

      – A commander, The United States of America

    • Download product overview

  • Top-notch mobile forensics training

    Well-pitched delivery for novice as well as more experienced students. Workbooks are very useful for future reference when in the field.

    • – XRY Certification Feedback

    Book Your Course Today!

/

Manage your mobile forensic team from a central control point

As mobile forensic solutions grow in scale and complexity, it can be challenging, whilst using mobile forensic tools in multiple locations, to maintain consistent processes and manage team collaborations from a single vantage point. But with XEC from MSAB, you can accomplish this.

XEC enables a seamless distribution of data between users, locations, departments and other agencies. XEC will also ensure the integrity and proper management of your digital evidence, streamline processes and enforce policies.

XEC Director

XEC Director is a centralized management solution that lets you manage your team and integrate all your MSAB mobile forensic extraction tools into a single network.

Learn more

XEC Export

XEC Export is an innovative standalone tool from MSAB, specifically designed for users who need batch export capability for multiple XRY files.

Learn more

Accelerate your extraction speed for iOS devices

Are you a digital forensic examiner or investigator?

The Checkm8 exploit is now integrated in XRY, enabling faster iOS extractions.

Get started

Are you…

A forensic specialist

Increase your speed and reach without giving up quality or integrity. XRY offers wide support for devices and seamless access to analysis and reporting through its integration with other MSAB products.

A frontline user

Make your job easier and solve cases faster by having the ability to start investigations and even confront suspects right away at the crime scene without having to send devices to the lab.

A manager

Improve your team’s efficiency and help them solve more crimes with a cost efficient, trustworthy solution that’s been proven in court and which maintains the integrity of the chain of evidence.

Take your mobile forensics investigations to the next level

Six proven ways to optimize frontline operations

Digital forensics key to preserving the victims right to privacy

On-the-Spot Access to Digital Evidence and Intel

Q&A

Mobile forensics is the extraction and analyzation of digital data from mobile devices – such as cell phones and tablets – to help investigators uncover evidence. Mobile forensics, as opposed to computer forensics, enables portable, easy-access data analyzation on-the-go, making it a vital part of any law enforcement unit in today’s digital world.
Mobile forensics is important because mobile devices, goldmines of data, play a major role in today’s world. In an era where 98% of investigations and intelligence work rely on digital evidence, it is often the most critical factor. Having software, hardware and tools to extract, recover and search for data in these devices is crucial for frontline investigations. Mobile forensics offers faster and more efficient ways to access evidence that could otherwise take much longer to uncover in forensic labs. The purpose is to uncover data on the spot so that users on the field can make informed decisions quicker without delays while fully maintaining the integrity of the evidence. In law enforcement, for example, having the opportunity to work with tailored mobile forensic solutions while solving crimes will create a safer and more efficient process suited to any law enforcement organization. By adopting new technology, crime solving will become more efficient and keep pace with the level of criminal investigation required today. In short, it will simply save resources.
Various types of evidence can be extracted from mobile devices, even deleted data. One of MSAB’s guiding principles is integrity, which also applies to data extraction processes – the privacy rights of the innocent are at the heart of all approaches. The evidence that can be extracted from mobile devices include apps, deleted chat messages, files such as pictures and videos, and encrypted and cloud-based data.
The challenges of mobile device forensics are unmistakably around protecting an individual’s right to privacy. The nature of law enforcement work is complex on its own, as lives are possibly hanging in the balance. Not only are the speed and effectiveness of technology of utmost importance, but also the integrity and the accountability of the approach. The processes provided by MSAB have data privacy considerations at the heart of all the approaches, ensuring that the rights of the innocent, victims and witnesses are protected. MSAB continues to be a global leader in privacy and integrity. A recent launch of features, based on the concept of “selective extraction”, helps further the privacy of individuals’ personal data while still being able to extract relevant information for investigations. MSAB is also dedicated to advancing digital safety and security in the EU by being involved in FORMOBILE, a project to secure an end-to-end mobile forensic investigation chain. The focus on ensuring that fundamental rights are respected is evident in the way MSAB has played an important role in funding and supporting research so that close attention is paid to fundamental rights to privacy and a fair trial. Other challenges of mobile forensics include the increasing password security and data encryption in mobile devices, anti-forensic techniques exploited by criminals, and lack of proper tools and equipment.
This depends on many factors, such as the device in question, what data is needed, and which tools are available in your organization. With the various platforms offered by MSAB, the time to extract data – live or deleted – has shortened significantly. With mobile forensic devices in the hands of frontline personnel, the data can be extracted on the spot within minutes, as opposed to being sent to the forensic lab to await analysis. This allows the investigators to make quick, informed decisions, thus speeding up the process. For example, in some cases XRY can recover and extract vital iOS data in around 5-10 minutes, or even less, including the time for decoding information.