RELEASE DATE: W/C 26 TH NOVEMBER 2012 XRY 6.4 RELEASE NOTES NOW WITH 8,108 DEVICE PROFILES SUPPORTED WELCOME TO THE NEW WINDOWS 7 64-BIT COMPATIBLE VERSION OF XRY. NOW YOU CAN USE XRY ON FASTER MACHINES THAN EVER BEFORE. AFTER A SUCCESSFUL BETA EVALUATION WE HAVE NOW FORMALLY ROLLED OUT XRY V6.4.1 FOR USE BY ALL CUSTOMERS. THIS VERSION IS ALSO COMPATIBLE WITH EXISTING WINDOWS 32-BIT SYSTEMS. NEW WINDOWS 64-BIT SUPPORT V6.4.1 HIGHLIGHTS 64-bit support BlackBerry Physical support MTK Chipset Physical support Nokia BB5 Physical support iPhone 5 and iOS 6 support Windows Phone 8 support New Android and iOS Apps support Improved extraction wizard Android Backup extraction Improved Android file system support Improved Decoding 100+ CDMA devices Brazilian Portuguese and Russian language Until now XRY could only be used on Windows 32-bit machines and much of the reason for that was due to the drivers required to connect to the thou- sands of different phones supported in XRY. Many pre-date the invention of 64-bit processors, so the process of cre- ating/implementing 64-bit compatible drivers for over 4,000 different mobile devices has been incredibly time inten- sive, but we have finally delivered on our promise. BLACKBERRY PHYSICAL We are pleased to announce the support of BlackBerry devices in XRY Physical. In v6.4.1 we have introduced physical dumping support for several RIM mobile devices which can be found listed in the release pages. The ability to physically dump these BlackBerry devices and do so faster than any other solution on the market will be of valuable assistance to customers. Now you have the opportunity to recover and carve out deleted data on these uniquely complex handsets. Forensic Method v6.4 Total XRY Logical 153 3,670 XRY Physical Dumping 167 1,594 XRY Physical Decoding 116 1,368 Security Code Only 123 647 Smartphone Apps 17 110 XRY Untested 241 719 Total 817 8,108 DUMPING AND DECODING OF MTK ANDROIDS XRY v6.4.1 Physical now offers the dumping and decod- ing of a wide range of MTK based Android devices. This support extends to being able to bypass security and lock codes to get you access to the file system on a wide range of devices using a generic profile, to give you the broadest possible device coverage. This is a unique USB dumping and decoding solution available only to XRY users. Box 17111, SE-104 62 Stockholm, Sweden | Visiting address: Hornsbruksgatan 28, Stockholm Phone: +46 8 739 02 70 | Fax: +46 8 730 01 70 | [email protected] | msab.com
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Release date: w/c 26th novembeR 2012
XRY 6.4Release notes
now with
8,108 device pRofiles suppoRted
Welcome to the neW WindoWs 7 64-bit compatible version of XrY.
noW You can use XrY on faster machines than ever before.
after a successful beta evaluation We have noW formallY
rolled out XrY v6.4.1 for use bY all customers. this version
is also compatible With eXisting WindoWs 32-bit sYstems.
New wiNdows 64-bit support v6.4.1 highlights
64-bit support blackberry physical support mtK chipset physical support nokia bb5 physical support iphone 5 and ios 6 support Windows phone 8 support new android and ios apps support improved extraction wizard android backup extraction improved android file system support improved decoding 100+ cdma devices brazilian portuguese and russian language
Until now XRY could only be used on Windows 32-bit machines and much of the reason for that was due to the drivers required to connect to the thou-sands of different phones supported in XRY. Many pre-date the invention of
64-bit processors, so the process of cre-ating/implementing 64-bit compatible drivers for over 4,000 different mobile devices has been incredibly time inten-sive, but we have finally delivered on our promise.
BlackBerry physicalwe are pleased to announce the support of blackberry devices in Xry physical. in v6.4.1 we have introduced physical dumping support for several riM mobile devices which can be found listed in the release pages. the ability to physically dump these blackberry devices and do so faster than any other solution on the market will be of valuable assistance to customers. Now you have the opportunity to recover and carve out deleted data on these uniquely complex handsets.
Forensic Method v6.4 Total
Xry logical 153 3,670
Xry physical dumping 167 1,594
Xry physical decoding 116 1,368
security code only 123 647
smartphone apps 17 110
Xry untested 241 719
Total 817 8,108
duMpiNg aNd decodiNg of MTk androidsXry v6.4.1 physical now offers the dumping and decod-ing of a wide range of MtK based android devices. this support extends to being able to bypass security and lock codes to get you access to the file system on a wide range of devices using a generic profile, to give you the broadest possible device coverage. this is a unique usb dumping and decoding solution available only to Xry users.
during the installation phase in v6.4.1 you will see the dialogue box below. the two options allow flexibility for customers who run other software on their Windows machines which could conflict with our own XrY usb drivers.
use msab drivers all the time – this is the optimal solution for customers with dedicated machines for XrY. please note that if you have other applications running, then there is a risk that XrY will override the correct usb driver installation and prevent it from working correctly.
use msab drivers only when wizard run-ning – this is the alternative to help prevent such conflicts occurring. in this mode XrY will only recognize and install the device driver when the wizard is open. if you con-nect a phone before starting the extraction wizard, the device will not be detected.
installation guidance
XrY installation guidance
The backup feature was introduced by Google for smartphones in An-droid 4.0. With this release you can now extract the backup file directly from the phone into XRY. This functionality is particularly useful because it can be done without the need to root the phone. So it’s a use-ful alternative way to recover data potentially containing calls, sms, contacts etc. plus app data and also data from the SD card.
We have also introduced en-hanced app support for about half of the 360 Android devices currently supported. As it is limited you need to refer to the device manual for specific handset information. For those devices with enhanced sup-port levels we now offer the ability to extract and decode data from the following apps:
android sMartphoNe support
V6.4.1 offers support for:
iPhone 5 and iOS 6 devices Deleted message data on iOS 6 WhatsApp and TigerText Apps Vkontakte App Yandex Navigator App Yandex Maps App
With this release of XRY we have been able to take smartphone app support to the next level with de-cryption support for TigerText in iOS devices.
A brand new and unique fea-ture in XRY for iOS 6 devices is the ability to recover deleted message data from SMS, MMS & iMessage. No doubt recovery of deleted messages from iPhones will prove to be of invaluable as-sistance to examiners.
apple sMartphoNe support
We stopped supplying the old green Wibu license keys to customers in 2009. after giving it almost four years for custom-ers to change over; we think it’s finally time to drop support altogether.
With XrY v6.4 onwards we will only support the new silver codemeter license keys. the old green keys will no longer work and if you still have one of these, please contact us to discuss your options.
eNd of the greeN liceNse Key
WhatsApp TigerText NQ Mobile Vault Yandex Mail Yandex Navigator Yandex Maps Odnoklassniki Vkontakte
mtK phYsicalWe are packing in the value as this will be our last XrY release of 2012 and so we have increased mtK chipset physical support for this release. v6.4.1 now supports many more chinese manufactured mtK chipsets for physical extractions.
With XrY you can now acquire a full physical image of numerous mtK devices to achieve a compre-hensive and thorough examina-tion of the phone’s content, all as standard without the need for any additional specialist hardware.
Hopefully you already know that XRY is unique in the ability to recover Contacts, Calendar, SMS and a complete file sys-tem extraction for supported Windows Phone 7 devices. To add to this extended support, we are pleased to announce logi-cal file system support for the very first Windows Phone 8 device, the HTC 8X. In addition to that, we have also added Skype App support for Windows Phone 7 devices.
xry version 6.4 | rele a se Notes
XAMN is a brand new analytical tool from Micro Sys-temation designed specifically for visualizing phone fo-rensic files from multiple devices in a simple and easy to use interface. XAMN allows users to visualize connec-tions, map geo-data and see timelines for several differ-ent phones simultaneously.
XAMN is the phone forensic analytical tool for specialists who need to com-pare data from multiple mobile devices together in one place. It works seam-lessly to allow you to drag and drop XRY files straight into the graphical user interface to start analysing data in greater detail than ever before.
coMing soonv6.4 XrY brings forward a new stream-lined and improved extraction wizard designed to make life easier for examin-ers. now you can identify devices in any one of four ways simultaneously:
device type manufacturer form factor operating system
in addition you can also use the tac database to speed up identification.
new eXtractioN wizard
windows phone 7 and 8 sMart-phoNe support
In v6.4.1 we have also added support for the physical dumping of Nokia Base Band 5 (BB5) handsets for the very first time. This generation of Nokia phones has enhanced security mechanisms and the unlock code is much harder to recover as each code is randomly assigned to the hand-set and stored on a special chip. As with the BlackBerry physical extrac-tion we believe this Physical sup-port to be the fastest solution on the market for these types of devices from either locked or unlocked handsets.
Appleipad 4 cdMa (a1460)*ipad 4 gsM (a1459)*ipad 4 wi-fi (a1458)ipad Mini cdMa (a1455)*ipad Mini gsM (a1454)*ipad Mini wi-fi (a1432)iphone 4s (a1431)iphone 5 (a1428)iphone 5 (a1429)*ipod touch 5 (a1421)
AT&TsMt5700*status a810a
au by KDDIisw12ht eVo 3d*
Barnes & NobleNooK 1st edition (bNrz100)*
Beckertraffic assist highspeed 7934
BLUcubo Q300dash d130adeco Mini Q120*deco Mini Q130*deco pro tV Q360t*deco tV Q260t*deejay ii Q150*deejay touch s210*deejay touch tV s210tdiesel r200a 3g*electro t610t*hero s190*Jenny t172*lindy Q61*samba elite Q200e*samba Jr Q51*samba Mini Q200*
spark s120swing M110tattoo Mini Q180*tattoo Mini tV Q190t*
CamangifM600
Chinese Chipsetsb8*h168 bentleyMtK X8*Nokia N9samsonic M1*
windows 7 64-bit and 32-bit support New extraction wizard, improved device identification improved display of gps info from metadata in pictures enhanced XMl export functionality New device manual languages: brazilian portuguese
and russian
COMMON EXTRACTION FEATURES
android: 4.0+ backup extraction method improved file system support decryption of whatsapp messages added option to select which apps to decode New apps: google search bar, hide My text, Keepsafe,
support for iphone 5 windows phone 8 file system support improved support for messages in ios 6 automatic identification of blackberry devices allow passcode entry to unlock iphones during logical
extraction improved decoding for 100+ cdMa devices
phYSICAL FEATURES
blackberry physical dumping Nokia bb5 physical dumping MtK chipset physical dumping MtK android dumping and decoding dump Motorola droid razr phones without rooting
NTT DoCoModynapocket t-01b*galaxy s sc-02b*pro series sc-01b*sc-03d galaxy s ii lte*sc-04d galaxy Nexusso-01d Xperia play*so-03c Xperia ray*Xperia so-01b*
don’t forget to register your license. By registering your license you ensure that you receive new information about XRY software updates and new cables free of charge: www.msab.com/licreg