Email Examiner Tool to Analyze evidence of Digital Forensic Investigations

Simplify Email Forensic Investigation

Management of Cases

Email Investigation tool provides an advanced case management facility & easy options to create new cases at will.
Assign the cases to individual investigators, or contribute the findings together in the Teams version of the Digital Forensics utility.
It automatically makes a new case repository on a prespecified location of the workstation. Inside each case, there are 8 tabs for fulfilling various requirements that arise during evidence examination.
Including Dashboard, Case Info, Custodian, Search, Evidence, Analysis, Export and Settings.
All these make it easy to perform the investigation efficiently.

different emails client support by forensic email header analysis

Support Email Clients

A multitude of Email clients and file formats are available to add and analyze inside the digital forensics utility.
Email investigation tool can dissect the contents of both Desktop and Web-based email sources. This includes eM Client, Zoho, hMailServer, Kerio Connect, KMail, Maildir, Zimbra, Dovecot, Zimbra, MDaemon Server, etc.

Email list

Search Suspected Keywords

Email Analyzer Tool provides a facility to make Custom Search Filters based on the suspected keyword. These are available on top of the already robust General search bar. Use any of the following refined search facilities.
Regular Expression Search: Deploy patterns for complex text matching.
Wild Card Search: Use wildcards (*) or (?) for variations in a word.
Fuzzy Search: Finds similar words even with typos or misspellings.
Proximity Search: Locates terms appearing close together (e.g., phrases).
Stem Search: Identifies different forms of the same word (e.g., play, playing).

timeline analysis of email analyzer tool

Get Visualization Dashboard

Get a visualization dashboard to view and analyze evidence with ease. Use this advanced capability to get an in-depth understanding of what data was analyzed and what all it contained. Find key data points in a graphical format that includes, pie charts, histograms, and more.

link analysis option of email analyzer tool

Provides Link Analysis Search

Email examiner software gives an option of Link analysis that helps to identify the relationship between the users within the searched outcomes, IP, and domains. It gives a major support to the investigators in accepting the established links of the users with the sender of mail.

team collaboration in email forensics tool

Team Collaboration Feature

Email Investigation Tool comes up with an advance feature of Team Collaboration facility. It allows multiple investigators to work over the same case concurrently. It helps to increase the processing time for investigation procedure as various tools can be utilized for the investigation purpose.

Digital Forensic Analysis Available For

email examiner software support 20 plus email clients

Cloud Clients

Email Forensic Tool is designed by keeping all investigator’s requirement in mind. It supports all Web-based email applications such as Gmail, Google Apps, iCloud, Office 365, Zoho Mail, Yahoo, Hotmail, Live Exchange, Rackspace, etc.

Email Clients

A wide range of desktop-based email clients that includes Outlook PST, Exchange Offline Storage OST, Mozilla Thunderbird, Eudora, IncrediMail IMM, MBOX, EDB, EML, EMLX & more supported via Email examiner software.

forensic analysis of digital image files

forensic analysis of web-mail clients

Image Clients

email forensics tool supports image format

Email Analysis Tool designed in such a way that it supports all the image supported file format such as DD, DMG, E01, LEF, etc. It makes easy for users to find the evidence from the image content in a precise manner.

Added Benefits of Email Investigation Tool

Hash Value generation is supported inside the tool. Use it to digitally catalog data with universally acceptable algorithms. During evidence addition mark one or more Hash options including MD5, SHA1, and SHA256 as per need.
Analyse digital evidence from more than 30 different languages. Change the index language setting inside the Add Evidence page. Choose one from a wide range of available languages arranged in an alphabetical order inside a drop-down menu.

Find out what is written inside images, documents, and other evidence with the help of the Optical Character Recognition feature of the tool. Use it alongside the Image Analysis metric and get all insights out of evidence. Note: OCR is limited to “English”
Add email data and attachments separately if need be. The option to do this is available for enablement during the evidence configuration itself. Apply it to cases where evidence accumulation is still ongoing during the analysis of a previous batch.

Create log files to keep track of all activities performed on the evidence during its examination via this tool. The capacity to make logs for unprocessed items also exists. These log files can be stored alongside the case data itself.
Get real-time updates on the evidence collection inside the tool with the help of an interactive dashboard. Divided into four sections the evidence page segregates the items by their current situation. The specific items may be in one of three tabs. Pending(noted but not started), Processing(items that are currently being pulled from the source), and Completed( items that are ready for further analysis). The All section presents the summarised version of the entire task.

Add evidence in bulk with the help of the CSV option. Create a CSV file with all the evidence file paths and add it to the tool. The tool then navigates each path to bring in all the evidence for analysis. Otherwise, the default evidence addition option is also there.
The main search page contains some unique options to make the evidence analysis easier. The first one is a search tab to directly search for a particular item. On its right, there is a small calendar icon. The Global date filter. It can be used to define the time frame of the evidence presented. Then there is the custodian btton. Toggle it & get access to the custodian folder structure, tags, keywords, standard & media filters. Use filtering option to add/apply filters.