MOBILE FORENSIC, .XRY & XACT

What is .XRY and XACT?

Micro Systemation is a new player in the field of criminal forensics and has quickly established itself as a leader in extracting information securely from mobile phones. The company’s wide experience developing its own software solutions – in particular data communications – has laid the groundwork for the .XRY system’s success. Our latest mobile forensic product: the XACT software may even recover deleted information.
 
Report_sheet

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
In the middle of the nineties, Micro Systemation developed the first device driver for a GSM telephone. We studied teleology from the ground up and learned enough to produce SoftGSM in 1998. This was a software based GSM modem. In autumn 2003, a concept product was developed based on the latest version of SoftGSM and named XRay.  In 2008 we took this solution even further when we released the XACT software, which enables law enforcement agencies to perform “logical” data acquisitions—a forensic process used to read information contained in confiscated phones and generate ready-to-use reports for legal, investigation, or intelligence purposes.
 
The idea was to effectively and securely retrieve information stored in a mobile phone and present the findings in a way that could be used by authorities investigating crimes. During 2004, a completely new product was developed based on the XRay experiences. This new product was called .XRY 2.0 and went on sale in autumn 2004.
 
Today, the latest version of .XRY is a full-fledged tool for extraction of large quantities of mobile phone data. To be acceptable for use in criminal forensics an instrument must have high standards of reliability and data integrity. Evidence may not be changed or destroyed. Methods and procedures must be documented and possible to repeat. .XRY meets all these demands according to the law.
 
Mobile phone use in connection with crime is increasing steadily and examining mobile phones has become more of the rule than the exception in recent years. There is a large demand for a product that can cover a broad range of requirements .XRY can retrieve call registers, phone books, calendars, SMS/MMS, photographs and video files from confiscated phones and XACT even may recover deleted information. Data content from a large number of phone models can be retrieved and copied. This vastly improves the investigative authority’s ability to achieve results. Tasks that were previously complicated, time-consuming and risky can now be carried out quickly and effectively. All development of .XRY and XACT has taken place in close cooperation with police authorities.

COMMUNICATIONS UNIT

.XRY and XACT consists of a specially developed communications unit that contains the infrastructure for communication with a mobile phone. Regardless whether the communication method is IR, Bluetooth or cable, the data transfer is done via the communications unit. This also contains a connection to the hardware key, essential if the programme is to be used. The communications unit is connected to a standardized computer via USB. Its design is unique and it has proven to be a secure and durable product.

.XRY

.XRY is updated continuously, providing support for new telephone models. Between version two and three, eight upgrades have been made, increasing the number of phone models which can be handled from about eighty to more than 350. In Autumn 2006, there was a major upgrade of the program software, including a new file format, a better user interface and the option of creating reports with local language support for the client.
 
When a new version of the software is to be launched, the application goes through a thorough test programme to ensure data is uncorrupted. In a new edition of the application a number of mobile phone models were shown to be untested. This means that Micro Systemation has had reports from police authorities informing them that the model can be unlocked with .XRY, but that the company can’t verify this. 

XACT

Our latest mobile forensic solution, the new XACT, lets forensics specialists push investigations even further by performing physical data acquisitions–a process generating Hex-dumps from the phone memory and allowing the recovery of deleted information. In most cases, .XRY enables any investigation of most information contained in a confiscated mobile phone, including deleted SMS recovered from the SIM card, to be concluded quickly and efficiently. XACT allows customers to go deeper by acquiring data from locked phones and deleted information not available to .XRY.

COMPLETE PACKAGE

One of .XRY’s and XACTs strong competitive advantages is that the product contains all the necessary components for use direct after installation. Software, cables, communications unit and instruction manuals. MSAB is today one of the few suppliers with a complete product.

.XRY READER

.XRY and XACT is delivered with an application, which can read and present .XRY’s file format. The reader, which doesn’t need a licence, can be distributed freely and allow the person who is emptying a phone to send the material on to investigators, lawyers, prosecutors etc. The integrity of a data file generated by .XRY is secured through encryption and can also be protected with a password.

TECHNOLOGY

The heart of .XRY and XACT is the software that enables it to extract and present information from mobile phones. The software, which is entirely self-developed, consists of a number of clearly defined modules. For each individual phone there is a descriptive file that determines which communications protocol is applicable to the particular phone model. The programme software identifies the connected phone to determine which protocol combination should be used to extract data. The presentation module common to .XRY reader contains the user interface and makes it possible to search, sort and create subsets of the retrieved information.

SIM ID-CLONER

SIM id-Cloner is an extra product that makes it possible to copy a SIM card or create a completely new one. In many cases you don’t want a seized phone to continue to have radio contact with the operator’s net. Data received by a phone after it has been confiscated can sometimes destroy the value of evidence already copied. Using a copied SIM card the investigative authorities can block the phone’s contact with a GSM or 3G net. If the seized phone doesn’t have a SIM card, information from the operator together with the SIM id-Cloner can create a new SIM card and through this access the information stored in the phone’s memory.

.XRY PACKAGING

.XRY and XACT comes as a complete package with all cables and other necessities in a smart and sturdy aluminum briefcase. Many authorities wants to ensure that the equipment needed to read a mobile phone is easily accessible in one place.
Field version is the latest .XRY system and is a package mainly used by the military. The field version works in extreme environments and can stand any amount of wear. It is packaged in a hermetically sealed case.

PRODUCTION

Micro Systemation produces the .XRY and XACT software. Parts of the hardware are purchased semi produced or subcontracted by suppliers. All final assembly, testing and packaging is done at MSAB’s premises in Solna, Sweden.
 
Last page change: 2008-06-18 02:54
 
.XRY System
.XRY Original
The de facto standard within mobile forensic.
 
 
 

» .XRY System
XACT System
XACT Do the impossible, recover deleted information! 
 
 

» XACT System
Training
Training Certified users achive more! Get the most out of your products.
 
 

» Training
SIM id-Cloner
SIM id-Cloner Examine mobile phones that don’t have an original SIM card, phones that have a PIN locked SIM card.
 

» SIM id-Cloner
.XRY Field Version
.XRY Field Version - Road Warrior This is a robust and weather resistant all in one ”Field version” of .XRY.
 
 

» .XRY Field Version
leftBorder
Copyright Micro Systemation AB 2007 | info@msab.com | Contact
rightBorder
Mirror