has moved to this site, For information, please join the Google Group forensicswiki-reborn


From Forensics Wiki
Jump to navigation Jump to search
Maintainer: Micro Systemation
OS: Windows
Genre: Template:Mobile forensics
License: Commercial

XRY, pronounced "ex-arr-why", is a forensic system specifically designed for analyzing mobile digital devices written by Micro Systemation. The software is designed to run on a Windows computer and will retrieve information from mobile devices for immediate display of the results or files can be saved for later analysis. At the time of writing support levels included smartphones, gps units and mobile tablets such as the iPad.


XRY comes complete as a package containing both hardware and software to read the device information. XRY currently includes the following hardware in the package; XRY Communications Unit, SIM Card Reader, Clone SIM Cards, Write-Protected Memory Card Reader & Complete set of Cables.

The hardware is connected to a Windows computer using a USB cable and is capable of displaying immediate results from the device extraction.

The software can grab phone book information, SMS and other text messages, MMS, call lists, calendar entries, task items, pictures, media files, and SIM card information. XRY also retrieves a lot of information about the phone itself, such as IMEI/ESN, IMSI, model no., matching between the clock in the telephone and the computer, etc. The latest version includes support for some smartphone applications such as Facebook, Myspace, Skype and Gmail.

The system generates an encrypted file called .XRY which contains a copy of all the information retrieved from the phone. The company also licences customers to free issue their XRY Reader application so these secure encrypted files can be read by authorized third parties.

One difference with XRY is that the software allows for the extraction of up to 3 different mobile devices simultaneously on the same computer from a single license key.

Supported devices

The tool supports more than 5,000 different mobile device profiles including GSM, UMTS, CDMA and iDEN phones. SIM cards are supported as well. Smartphones such as Android, BlackBerry, iPhone, Symbian and Windows Mobile are also supported.

XRY is one of a limited number of mobile forensic products which also offers Physical Extraction capabilities on devices to gain access to potentially more information from a device, including deleted data.

XRY Reader

XRY creates a report containing the user's own logotype, address, etc. and the basic required information. The generated report can either be printed out, exported in whole or in part, or forwarded electronically with .XRY Reader which is distributed for free. A search function simplifies the task of searching for a particular name/number or some other type of text.

External Links