MobileMobile & IoT ForensicsAndroid ForensicsExtract and examine Android phones, from ADB pulls to WhatsApp databases and ALEAPP reportsMSAB
MSAB XEC
XEC is MSAB's Manage line. XEC Director connects every XRY installation in an organisation into one network for oversight and updates, while XEC Export batch-exports XRY files.
PlatformCommercialCurrent
Profile
- Manufacturer
- MSAB
- Category
- Mobile forensics
- Product type
- Platform
- Platforms
- Not stated by the manufacturer
- Licensing
- Commercial
- Product status
- Current
- Educational level
- Advanced
- Last verified
- 2 November 2026
MSAB's page names the family MSAB Manage - XEC and lists XEC Director and XEC Export. No product called XEC Connect appears there. Deployment model and operating system are not stated.
What MSAB XEC is
A police force with twenty XRY kiosks and a central lab has a management problem before it has a forensic one. Who updated which machine, which examiner ran which extraction and whether the field units are on the same release as the lab all matter when the work is questioned later. XEC Director is MSAB's answer. It links the organisation's MSAB extraction tools into a single network so a manager can push software updates from one control point, give remote assistance to a user in the field, track goals and generate the reports the organisation needs.
XEC Export is a separate, standalone tool with a narrow job: exporting many XRY files in one batch rather than opening each in XAMN. For an institute like DFRTI the teaching value of XEC lies in governance. A tool that logs who did what, on which version, supports the chain of custody argument that every examiner has to make in court. MSAB's page does not describe the deployment model or operating system, so those points are left open here.
Primary applications
Where it is used
- Central oversight of XRY installations spread across a lab, field units and kiosks
- Pushing software updates to every connected machine from one point
- Remote assistance to front-line users running extractions under supervision
- Management reporting on team activity and goals
- Batch export of many XRY files for review or archiving
Who uses it
- Laboratory managers responsible for several XRY installations
- IT staff who maintain forensic workstations and kiosks
- Quality managers building audit trails for accreditation
- Students of laboratory governance
Capabilities and limits
Major capabilities
- XEC Director connects all MSAB mobile forensic extraction tools into a single network
- Software updates for all connected computers from a central control point
- Remote assistance to users
- Team performance tracking and report generation
- XEC Export for batch export of multiple XRY files
- Free trial offered by MSAB on request
Technical limitations
- It manages MSAB tools only; a mixed lab needs separate processes for other vendors
- The product page does not state the deployment model, so on-premises or hosted options must be confirmed with MSAB
- A central management network needs IT support and access control of its own
- XEC adds no forensic capability; extraction and analysis stay with XRY and XAMN
Learning with DFRTI
Independent professional education covering the principles and workflows of MSAB XEC. DFRTI is not a vendor training centre and its courses are not vendor certifications.
Before you learn it
- The XRY and XAMN workflow and the platforms MSAB sells them on
- Basic network and software deployment concepts
- Why version control and audit logs matter for digital evidence
Disciplines
Related tools
- MSAB XRYXRY is MSAB's mobile data extraction software, sold as a family of modules and delivered on office, field, kiosk and tablet platforms. Its output is analysed in XAMN and managed through XEC.MSAB
- MSAB XAMNXAMN is where an XRY extraction becomes readable evidence. MSAB sells XAMN Pro for analysis and gives away XAMN Viewer so that others in the case team can open the same files.MSAB
- MSAB XRY ProXRY Pro is the advanced tier of the XRY family, aimed at locked and encrypted devices that standard modules cannot reach. MSAB restricts it to practitioners who hold a current XRY certification.MSAB
- Cellebrite InseyetsInseyets is Cellebrite's current flagship for mobile evidence. It puts the extraction side (Inseyets.UFED) and the decoding side (Inseyets.PA) under one name and one licence.Cellebrite
Courses that cover this tool
MobileMobile & IoT ForensicsAndroid ForensicsExtract and examine Android phones, from ADB pulls to WhatsApp databases and ALEAPP reports
LegalFoundation & Legal CoursesLegal & Court ProceduresIndian law on electronic evidence: BSA Section 63, BNSS search and seizure and the IT Act.Official source
Product names and trademarks belong to their respective owners. DFRTI is an independent educational and research institute. Inclusion in this directory does not imply manufacturer endorsement, partnership or authorisation. Facts are checked against the manufacturer's public documentation on the date shown and may have changed since.
Go deeper with DFRTI
Free pages explain the ground. Structured courses, lab work and a mentor take you from knowing about it to doing it on a case.