XRY Cloud by MSAB is a component that recovers data from connected cloud-based storage solutions. It enables forensic examiners to retrieve online social media data and app-based information from services such as Facebook, Google, iCloud, Twitter, Snapchat, WhatsApp, and Instagram. XRY Cloud can be used as a standalone product or as part of the MSAB Ecosystem. It operates in two modes: automatic and manual. In automatic mode, XRY Cloud requires physical possession of the phone to recover cloud data based on app tokens obtained during a standard smartphone extraction with XRY. In manual mode, it allows investigators to recover cloud-based data without physical possession of the mobile device.