XRY Photon
Description
As app versions and security protocols are constantly improved, mobile extraction tools can fail to extract decrypted app data. Until now, this has forced examiners to use time-consuming manual processes such as using a camera to capture, review and present app data. XRY Photon is like an automated version of manual app examination for Android devices, with the added benefit of storing the documented data in a searchable way, which enables text search, filtering and other types of analysis.
Automatic mode
The automatic mode is tailored to the structure of the supported apps, so it requires very little user interaction. Current automatic supported apps are:
- WhatsApp Business
- Signal
Generic mode
The generic mode requires more user interaction but supports extracting virtually any app that allows taking screenshots. It is ideal when the app you need to examine is not supported by any other forensic tool and it is essential to be able to capture the data forensically and be able to search through it for critical evidence. XRY Photon Manual empowers an examiner to forensically recover almost any app on the Android platform
