Now available: XRY 11.0, XAMN 8.1, UNIFY 25.3*, XEC 7.13 and KTE 11.0

MSAB proudly announces the latest releases of XRY, XAMN, UNIFY, XEC and KTE

Broader support & improved efficiency for smarter investigations

Download new releases

MSAB is excited to introduce the latest releases of XRY, XAMN, UNIFY, XEC and KTE that will help improve the efficiency when dealing with mobile device extractions and analysis. XRY sees improvements made to the device manual for a better understanding of what is possible, the popular persons functionality in XAMN has been improved, making it easier than ever to filter on key subjects during your investigation.

Release highlights in XRY 11.0

Device Manual re-design

Working with the Device Manual just got easier! For some devices, all the information that you need to perform an extraction is now presented in the Capability overview. Giving you vital information such as if the device requires XRY Pro, device state support (AFU, BFU, Unlocked or locked) and if a FFS or Physical extraction may be possible.

Enhanced Android FFS (Full File System) Unlocked Generic profile

More devices have been added for FFS extractions, along with enhanced stability improvements. Making this the go to profile when dealing with unlocked Android devices.

Updated support for FFS extractions from iPhones via an agent

With the Apple iOS FFS Agent Unlocked Generic profile in XRY 11.0, you can use an agent to extract FFS from unlocked iPhones. iOS versions 15.0-15.8.3/16.0-16.5.1 are supported. For devices with an A11 chipset (For example iPhone 8) iOS versions 16.6.0-16.6.1 are also supported.

Configure on the go!

Use the new setting Allow process option changes before the extraction starts if you want to configure specific settings during the extraction setup as you go.

Improved Pre-scan

Pre-scan is now the default tab when you enter the step-by-step page, the pre-scan sees several improvements such as the grouping of data for easier viewing. iPhone devices now present data such as the ICCID and IMSI data, even if the SIM card was removed by the device owner along with the device name, device type, model, model number, device OS version and if iTunes backup encryption has been enabled.

XRY Pro

• Wider BFU (Before First Unlock) brute forcing and extraction support for Exynos devices such as the Samsung Galaxy A55
• New support for brute forcing and physical extraction capability for Xiaomi and Oppo devices with MTK chipsets such as the Oppo Reno3 Pro and the Xiaomi Redmi Note 12s
• XRY Brute Storm updates – Improved timestamps and logging, more devices can be brute forced using Brute Storm.

Release highlights in XAMN 8.1

Work on case files in XAMN Express

In XAMN Express 8.1, we’ve made it easier for you to review multiple extractions at once, eradicating the need to analyze each extraction separately, saving time and improving your work-flow efficiency.

Review data from more sources with newly added import profiles

With XAMN Pro 8.1 you can now import the Encase E01 files, support has also been added for L01 and S01 files. A new profile called Media/docs allows you to import files of any file format, such as pictures and documents.

Export all chats in Conversation view to PDF

Conversation artifacts are often among the most important evidence in forensic investigations.

When such evidence is found, you might want to save it in a PDF report to be able to quickly pass it

on to others. Previously, you could create a report based on one specific conversation and export it to PDF. With this release, you can create a report based on all filtered conversations in the Conversations view.

Open files from Source mode and Hex Viewer

We understand that validation is a must when dealing with digital evidence, XAMN 8.1 now supports opening a file in another view or another tool from source mode or the Hex Viewer. Simply right click the file name to open the context menu to utilize this new functionality.

Show pictures and videos on hover in the Column view

When working in Column view, you can now hover over the file name of any pictures or videos to show a thumbnail preview in a pop-up. This makes it easier to quickly review artifacts of different types in the Column view.

Improved Persons

The popular Persons feature within XAMN has now been improved, you can now search by not only name but also by any of the associated metadata such as phone number, email address or chat app ID. Working with persons has just got easier, this improved functionality makes obtaining an overview of all activity linked to an individual even faster.

Offline Maps support in XAMN Viewer

XAMN Viewer 8.0 added a lot of new functionality, part of this improved functionality was mapping support. We have added on these improvements for XAMN Viewer 8.1 by adding support for working with offline maps.

Release highlights in UNIFY 25.3*

Import users from Active Directory (AD) with LDAP (Lightweight Directory Access Protocol) integration

It is now possible to import users from an external user directory, for example AD or OpenLDAP via LDAP. This reduces manual maintenance, and minimizes the risk of information that differs between the two systems

Project VIC support in UNIFY Collaborate

XAMN Pro has supported Project VIC for many years, providing essential functionality for those investigating CSAM. UNIFY Collaborate, which is XAMN Pro used in combination with MSAB UNIFY to make collaborative investigations possibly, previously did not support working with Project VIC. With the release of UNIF 25.3 and XAMN Pro 8.1, users can now work on Project VIC grading in UNIFY Collaborate.

Release highlights in XEC 7.13

Improved system restarts

It is now possible to schedule restarts of Kiosks and Tablets via XEC Director 7.13, the scheduled restarts are executed when no user is logged in and no current uploads are in progress.

Distribute hash lists

Early hash matching is a great feature for the user to be alerted during the extraction if there are files present on the device for which the hash value matches a value on the hash list and be possible to investigate further within XAMN. XEC 7.13 now supports distribution of multiple hash lists to your estate.

Filter the list of uploaded extractions

It is now possible to filter the upload list based on any of the following parameters, time, status, client system, user and the extraction file name.

Improved license renewal process

When updating client system licenses online, you will now get detailed information during the process, this is extremely useful if you’re updating several systems at once.

Disable Cloud token generation

A new setting has been introduced that makes it possible to disable the generation of cloud token files, by default cloud token generation is enabled.

Improved client system view

Improvements have been made so it is now possible to see if a new software version has been uploaded, client systems running an older version are now clearly visible as they will display a lower version with a blue dot along with the text Update available.

Reporting view improvements

This update significantly improves reporting times, this is achieved via faster data retrieval. Data caching has been introduced which means table data is pre-calculated and cached every 24 hours (configurable) resulting in faster data retrieval and the performance scales better.

Release highlights in KTE 11.0

Export extracted data from XRY Express

In XRY Express, it is now possible to export extracted files to a selected folder. This makes it easy for XRY Express users to save the selected files to an external drive or USB stick. The possibility to export has previously only been available on Kiosks and Tablets.

Recoverable Workflow data

Sometimes something may go wrong during the extraction process, the Workflow data recovery document can provide valuable detail such as user-added photos and other information. Previously this document was only accessible to the Kiosk administrator, now an option is available, making it possible to provide users access to the document.

Open case files in XAMN Express

In XAMN Express, we’ve made it easier for you to review multiple extractions at once, eradicating the need to analyze each extraction separately, saving time and improving your work-flow efficiency.

*MSAB Unify 25.3 will be available on March 27^th 2025.

If you want to learn more about what’s new in XRY, you’ll find a comprehensive version of the Release Notes on the MSAB Customer Portal.

Ready to upgrade? Download the new release now!

Download the new release

If you need any assistance or have questions, don’t hesitate to reach out to our support team.