A wider range of email repositories are now examined as part of enhancing artifacts support. Local as well as web based email storage analysis scope is extended with the addition of eM Client, Zoho, Kerio Connect, hMailServer, MDaemon Server, Zimbra, KMail, Maildir, Dovecot and many more. Learn More →
All case related progress or evidence can be shared by the custodians over web / on cloud with fellow investigators for review purpose. This can be accomplished via Shared Location, Mail Settings, or over Cloud.
KML (Keyhole Markup Language) file format is used to save and display the geographic data Google Maps and Google Earth. The available image attachments having GPS locations can be exported using "Export as KML"; and can be viewed using Google Earth. Learn More →
The supported document formats available within the respective image files such as E01, DD, LEF and DMG, can now be examined and analyzed. It also support for GPT Disk image for E01 and LEF Processed L01 file and Zip Archived file. This extended support to disk image files does not impose any sort of limitation on the file size. Learn More →
OCR capabilities makes the MailXaminer software one of the most advanced email forensic tools in the digital forensics market today. Additional features include the ability to analyze scanned documents, images, computerized receipts, bank statements, passports, and other types of unreadable paper records. Learn More →
On the basis of filters, rules and patterns, at the time of scanning of the evidence file, the available items can be automatically tagged as per the available categories such as Spoofed Docs, Shared Links and PII number.
Reporting feature of the tool has now been made smarter to preview and export the reports of case, keywords, tags, bookmark etc. It is now possible to export the senders report, recipients report, domain wise report, domain wise senders report, domain wise recipients report in HTML, PDF & CSV file formats. Learn More →
Now the tool has the provision to preview and analyze the calendars of Outlook PST files, OST files, Exchange EDB mailboxes, and Lotus Notes NSF files.Extend support to examine Calendar Recipients and Calendar Sent & Received Date as “Search Criteria” on “Search” tab and meetings and appointments of the suspected user for further investigation. Learn More →
User can create their own Custom Search Filters based on scenarios required. Some cultivated search facility includes Regular Expression, Fuzzy, & other logical search operators to give the accurate results. Also provide support for Nested “Evidence File(s)” list in Search Filter and Various (Korean, Japanese, Chinese, French, Spanish) Languages. Learn More →
We have now introduced dongle based licensing to make it easier for the investigators to run the full version of the software on multiple machines. Users only need to plugin the software attuned dongle provided to them while purchasing the tool on a machine having demo version & it will get activated as full version. Learn More →
The software is equipped with Dashboard View feature that provides feature that provides visual representation visual representation of the mailbox data being scanned. The Pie Chart and Bar Graph enable users to analyze the data from various angles. Learn More →
Analyze the evidence storing Encase LEF files and its variants. The examination of Guidance EnCase Logical Evidence Files is featured as widening the prospect of eDiscovery via examination of varied data file. The software scans through both .Lx01 and .L01 files for examination purpose.
Custodians can examine OLM files accomplishing the scope for analyzing an Outlook 2011 for Mac profile to get to the root evidence available in the form of Email folders, Address Book, Appointments, and more components for evidence processing and discovery.
Examination of Outlook 2011 for Mac data files via scanned Apple Disk Image file supported. The toolkit understands and parses through both OLM and DMG file - individually and in combination. Combined examination process for OLM via DMG is featured due to Apple being a common source between.
MailXaminer is designed in compliance with section 508 to provide wider approachability. The application can also be easily accessed through keyboard shortcuts, which makes it operable for all users regardless of disabilities.
The software is compatible to analyze all kinds of evidences from 64 bit applications. It efficiently extracts the artifacts from such applications without encountering any kind of software incompatibility issue.
The software supports bates numbering for PDF format while exporting any generated evidence or report. It facilitates to customize PDF page numbering with respect to number format, date stamping, and preferred font style.
MailXaminer supports to analyze the E01 and DD image files from multiple disk partitions. It maintains the folder hierarchy of analyzed evidences in the form of the respective partitions for all E01 and DD files.
The evidence export feature is further extended to export any number of analyzed folders into the required format. The forensics investigator can selectively choose the required folders and export them all together into a single file.
MailXaminer also supports the detailed analysis of Skype database. It extracts all calls, chats and SMS from the Skype data, which serves as a boon for the investigators to trace the communication network of the suspect.
The investigators can choose to export the recovered evidences into PST or CSV files by splitting them into smaller parts. The resultant files can be limited to a particular file size for better manageability and performance.
The tool facilitates to perform search within various subsets so that the investigation procedure can be simplified and fastened. The analyzed data can be easily filtered from the subsets including keywords, bookmarks, tags, reports and capablity to export “Searched Criteria Report” also.
The export to PDF settings can be easily customized according to the user’s requirement. The forensic expert can choose to perform export of selective attributes of the evidence, which helps in maintaining confidentiality of the analyzed information.
MailXaminer facilitates the export of analyzed evidence into CSV format in a customized manner. The selected attributes of the emails can be included into the CSV header depending upon user’s requirement.
A number of naming conventions have been added, which lets investigator select the required convention for the exported evidence. An appropriate set of conventions for emails, calendars, documents are provided for individual choice.
The tool is equipped with time line analysis feature to provide better visualization of the evidences. It allows viewing the statistics of emails, calls, chats, calendar, documents etc searched via graphical representation for a decade. "Custom Color" settings also available
Link analysis feature helps to detect the relationship among the users within the searched results. It provides a major support to investigators in understanding the established links of users with the sender of the mail.