Now Available: XRY 11.2, XAMN 8.2, UNIFY 25.5, XEC 7.14, and KTE 11.2
MSAB is proud to announce the latest releases of XRY, XAMN, UNIFY, XEC, and KTE — all purpose-built to enhance efficiency and capability in mobile forensic extractions and analysis.
With XRY 11.2, gain new file system export functionality for more flexible case handling. In XAMN 8.2, enjoy faster tab navigation and smarter artifact filtering. Across the board, our tools are evolving to meet the demands of modern investigations.
XRY 11.2 Highlights
File System Export
Export the full file system. This step is additional from extraction and decoding, and includes the Android Keystore and iOS Keychain keys in JSON format.
Device Manual Enhancements
Improved search, new filters, and chipset-based browsing make device identification easier. Legacy profiles are now grouped separately, with an enhanced Capability overview shown during extraction.
Android App Sandbox Extraction
A second extractor improves app sandbox access during Logical acquisitions. Supported on Android 9–14 (SPL < June 1, 2024) and Android 12–13 (SPL < October 2024).
PDF Report from Summary Page
After each extraction, XRY auto-generates a Summary Page PDF, preserving key data and chain of custody. (Disabled for Kiosk, Tablet, and Express.)
Android Wi-Fi Extraction Improvements
Supports Wi-Fi 7 and simultaneous wired internet during extraction. On Windows 11, users can also select Wi-Fi frequency bands.
Pre-Scanned Data Update
XRY now highlights device status (Airplane mode, Wi-Fi, Bluetooth) before extraction. This info is saved in the XRY file and searchable in XAMN.
XRY Pro Updates
Improved stability across multiple extraction types
Expanded decryption support for Vivo Qualcomm devices
RAMalyzer Enhancements:
Custom regex via external config
RAM-wide regex scans
New cache reset feature
Brute Storm Upgrades:
More full disk encrypted device support
New infinite brute force mode
Improved dictionary handling
HTML User Guide now accessible via Help menu
XAMN 8.2 Highlights
Improved Ease of Use for Tabs
Open new tabs faster with quick-access buttons and a Ctrl+T shortcut, aligned with your default tab settings.
Import Amazon and T Mobile Warrant Returns
Easily import and examine Amazon and T Mobile data for more comprehensive case analysis.
Better Control of Artifact Viewing
Customize your viewing experience with new tab defaults, Gallery view memory, and interaction thresholds in Connection View.
Easier Access to Biome and KnowledgeC Data
Artifacts from Apple’s Biome and KnowledgeC databases now show dual app associations across all relevant views.
New Artifact Subcategory for Folders
Browse folders with metadata such as size, file count, and timestamps, similar to Windows Explorer.
New Notes Block in Report Builder
More formatting control, support for images, and dynamic content (e.g. date, time, case operator) for clearer, reusable reports.
File Export Improvements
Faster zip exports with updated file metadata aligned to timestamp interpretation. Export keystore data directly from the File Tree view (XAMN Pro).
UNIFY 25.5 Highlights
Improved Server Overview
Servers in the Management Console are now grouped by type with all details visible in-table: Authentication, Case, Storage, and Worker servers.
Custom Caddy Port Selection in Installer
You can now define a custom port for the Caddy service during installation, rather than defaulting to port 443.
XEC 7.14 Highlights
More Secure Evidence Password Handling
Admins can now recover passwords for protected XRY, XRYCASE, and PDF files. Passwords are encrypted and stored securely within XEC Director.
Transfer or Revoke Shared Licenses
With Enterprise License Management, easily move licenses between online systems or reclaim from idle devices. Supported in XRY Express 11.2+.
Simplified License Management in Restricted Networks
Use template licenses to activate clients without connecting to MSAB servers. Supported for XRY 11.2+ and XAMN 8.2+.
Filter the Log on Any Property
Search logs by any property or value, including those not shown in the main log table.
More Aligned Standard Reports
Standard reports now consistently include extraction data and display use of generic profiles. Updates apply to Client System, Group, and User activity reports.
Set Database Log Size Limit
Set alerts for large client system database logs. View log size on the Overview tab (highlighted in red when above limit). Clear logs directly.
Generate Reports Button Moved
The Generate Standard Reports option has been moved from the top ribbon to the right-click menu on the Client Systems page.
KTE 11.2 Highlights
Enhanced Handling of Password Protected Evidence
XEC administrators can now retrieve encrypted passwords entered during extractions on Kiosks, Tablets, and XRY Express.
Password Protection for Workflow PDF Files
PDFs generated from workflows are now automatically protected when document protection is enabled.
Support for BitLocker Protected USB Hard Drives
File export from Kiosks and Tablets now supports BitLocker-encrypted USB hard drives, in addition to USB sticks.
For more information about the latest release, please join us on June 25th for our release webinar via these links or to access the recording later.
To view the more detailed release notes please visit msab.com
