Puneet Varma (Editor)

MailXaminer

Updated on
Edit
Like
Comment
Share on FacebookTweet on TwitterShare on LinkedInShare on Reddit
Developer(s)
  
SysTools Inc

Operating system
  
Development status
  
Active

Available in
  
English

Initial release
  
December 2013; 3 years ago (December 2013)

Stable release
  
4.8.3.0 / November 11, 2016; 4 months ago (November 11, 2016)

MailXaminer is a digital forensic program built to allow the examination of email messages from both web & application based email clients. The application is being developed by SysTools Inc, with the slogan ‘Simplifying Email Forensics’. MailXaminer first loads messages from the chosen email storage source and arranges them hierarchically for the purpose of evidence analysis and extraction. The product name derived from a combination of ‘Mail’ and ‘Examiner’, denoting it as a platform to examine emails. The programming of the application provides carving out of deleted evidence or evidence from damaged sources in cases of evidence spoliation. Post analysis, the software serves output generation in court admissible digital formats (e.g. Concordance, Adobe PDF).

Contents

Overview

SysTools is the official developer of MailXaminer that launched its first release on December 1st, 2013. Subsequent allotment of official product licensing for constant screening of MailXaminer was given to SysTools Inc. At present, the most stable release of the product is version 4.6 and was launched in the year 2014 with added capabilities serving skin tone analysis, link analysis, and more. The program helped achieve a level of refurbishment (act of improvement) in the process of email examination procedure since its launch. Support for forensic disk image format was also added to the application since one of its upgrades. The support is limited only for email storage formats, imaged within the file, owing to the email examination theme of the application. Currently the application is serving legal departments, law enforcement agencies, government sectors, and more such sectors with the requirement of the investigation of email messages.

Key Skills

•Examination of Outlook for Mac OLM file supported.

•The analysis of EnCase LEF files - .Lx01 & .L01 featured.

•Outlook for Mac Identity folder examination from DMG.

•Examination of direct/indirect links between emails discovered in search results.

Skype database analysis to examine chats, calls, & other conversation records.

•Scanning & analysis of search results (emails, chats, documents) by time range.

•Section 508 compliance to support complete keyboard operation on MailXaminer.

•Message Rebuilding: Extracts omitted messages from desktop-based email storage formats.

•Detailed Analysis: Serves multiple views for looking into the anatomy of email messages.

•Skin Tone Analysis: Offers detection of obscene / pornographic image media from emails / attachments.

•Court Admissible Output: Generates evidence storage output in court admissible formats.

•Evidence Lookup: Gives away search parameters and types to lookup evidence with accuracy.

•Universal Email Support: Examines email storage for web and desktop based services.

•Comprehensive Reporting: Performs reporting of complete investigation activities.

•Case Management: Builds case repository for collection of correlated / single case email storage.

•Export Restriction Applicable: Offers to apply privilege over emails for evidence export restriction.

Additional improvements are in pipeline and soon to be released in the next possible release.

References

MailXaminer Wikipedia