XRY (software)

XRY is a digital forensics and mobile device forensics product by the Swedish company Micro Systemation used to analyze and recover information from mobile devices such as mobile phones, smartphones, GPS navigation tools and tablet computers. It consists of a hardware device with which to connect phones to a PC and software to extract the data.^[1]

XRY is designed to recover the contents of a device in a forensic manner so that the contents of the data can be relied upon by the user. Typically it is used in civil/criminal investigations, intelligence operations, data compliance and electronic discovery cases. The software is available to law enforcement, military and intelligence agencies. It has become well known in the digital forensics community as one of their common tools for this type of work.^[2]

There are many more complex challenges when examining mobile phones in comparison to the forensic examination of normal computers. Many mobile phones have their own proprietary operating systems, which makes reverse engineering of such devices a very complex operation. The speed of the mobile device market also means that there are many more new devices being manufactured on a regular basis, so a mobile forensics tool must deal with all of these issues before being suitable for the task.

The XRY system allows for both logical examinations (direct communication with the device operating system) and also physical examinations (bypassing the operating system and dumping available memory). Whilst the logical recovery of data is generally better supported for more devices, physical examination offers the ability to recover more deleted information such as SMS text messages, images and call records etc. Because of the complexities of the topic, specialist training is usually recommended to operate the software.

The latest versions include support to recover data from smartphone apps such as the Android, iPhone and Blackberry devices. Data recovered by XRY has been used successfully in various court systems around the world.^[3]^[4]

XRY has been tested by a number of different government organizations as suitable for their needs and is now in worldwide use.^[5]

References

↑ "Chapter 6: Micro Systemation XRY". viaForensics.
↑ "Australian News Story". news.com.au. October 2009. Archived from the original on December 29, 2011.
↑ "Borneo News Story". Borneo Post Online. December 2011.
↑ "IRA membership trial hears mobile phone evidence". Breaking News IE. May 2012.
↑ "Test Results for Mobile Device Acquisition Tool: XRY 5.0.2". National Institute of Justice. November 2010.

External links

Lucie Blanchard. "Fillon et Guéant veulent "engager une lutte à armes égales" avec les délinquants" [Fillon and Guéant want to "start a fight on equal terms" with offenders] (in French). Archived from the original on May 9, 2011.
What is .XRY?
Micro Systemation Website

Digital forensics

Branches	Computer forensics Mobile device forensics Network forensics Database forensics

Hardware	Forensic disk controller

Software	EnCase Foremost FTK Registry Recon PTK Forensics The Sleuth Kit The Coroner's Toolkit COFEE Selective file dumper HashKeeper Xplico

Certification	Certified Forensic Computer Examiner (CFCE) Global Information Assurance Certification

Processes	Digital forensic process Data acquisition Digital evidence eDiscovery Anti-computer forensics

Organisations	National Software Reference Library American Society of Digital Forensics & eDiscovery Department of Defense Cyber Crime Center National Hi-Tech Crime Unit (NHTCU) Australian High Tech Crime Centre (AHTCC)

People	Eoghan Casey Clifford Stoll Erik Laykin Robert Zeidman

Glossary of digital forensics terms

This article is issued from Wikipedia - version of the 9/13/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.