MSAB XRY vs Volatility 3
MSAB XRY
msab.comVolatility 3
volatilityfoundation.orgSide by side
| Figure | MSAB XRY | Volatility 3 |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Computer Forensics Software | 7.2 (#13) | 7.3 (#12) |
| Spec score · Digital Forensics Software | 7.2 (#23) | 7.3 (#22) |
| Purpose | XRY extracts mobile device data for digital investigations while maintaining evidential integrity and chain of custody. | Volatility 3 extracts digital artifacts from volatile memory (RAM) samples to provide visibility into a system’s runtime state. |
| Support | Technical support is available to MSAB license holders by email, phone, or LiveChat, and MSAB aims to respond within 24 business hours. | The project directs bug reports to GitHub Issues and community support questions to its Slack. |
Plans
In their own words
Volatility 3
Volatility 3 is a free, open-source framework for extracting digital artifacts from volatile memory (RAM) samples. It gives investigators visibility into a system's runtime state and focuses on memory forensics rather than disk imaging or mobile forensics. It supports memory images from Windows, macOS, and Linux, and offers CSV, JSON, JSONL, pretty, and quick export formats.
Volatility 3 requires Python 3.8.0 or later and is published on PyPI. Windows symbols can be queried, downloaded, generated, and cached when missing; Mac and Linux symbol tables must be produced manually. A 2024 release added support for Amazon S3 and Google Cloud Storage. Documentation is generated from doc strings with Sphinx and available online. Bug reports go to GitHub Issues, while community questions can be taken to Slack. The license permits free use, sharing, and building, but requires public source sharing for additions made available to others. It provides the software as is, without warranty or condition to the extent allowed by law.