MailXaminer

Allows importing email data from a wide array of sources, including various desktop email clients, cloud platforms, offline mail clients, disk images, and even messenger databases (e.g., Skype DB files for chat/call data).

Processes and analyzes an extensive list of email formats like PST, OST, EML, MSG, MBOX, NSF, EDB, OLM, and supports webmail servers based on IMAP for comprehensive processing.

Ensures compatibility with a vast range of email content types and structures.

Can directly load disk image files (like E01 and DD) to process mail containers within them.

Scans added email evidence and uses advanced Optical Character Recognition (OCR) to extract text and keywords from image content and attachments.

Provides various views for examining emails, including Message View, Properties View, Header View, MIME View, HTML View, RTF View, and HEX View for in-depth analysis.

Conveniently previews attachments directly within the software.

Allows users to manage and customize columns based on parameters like subject, from, to, sent, received, size, and MD5 hash for tailored viewing.

Offers a holistic view of email evidence in various formats.

Provides a comprehensive option to thoroughly analyze email header details to uncover crucial metadata.

Displays email frequency by year, month, and day, along with detailed timelines for specific time periods, providing a graphical representation of communication patterns.

Generates a link map to visualize connections and relationships between multiple emails, users, and IP addresses involved in communications.

Visually represents the most frequently discussed words in emails, with word size indicating frequency, for quick topic identification.

Tracks the location of images by extracting geolocation information (Latitude, Longitude, Altitude) if available.

Helps to find and analyze location-based entities (e.g., countries, states) within emails, along with their usage frequency.

Supports the analysis of IP addresses associated with various emails added as evidence.

Features an advanced URL analysis to check the safety and reputation of URLs found in emails (available in Yearly Subscription).

Ability to preview and analyze calendar data from Outlook PST/OST, Exchange EDB, and Lotus Notes NSF files, including meetings and appointments.

Capability to work with and recover data from corrupted or damaged email files.

Can analyze Live Exchange mailboxes without requiring dismounting of EDB files.

Designed to efficiently search massive volumes of email data for facts and insights.

Offers various search methods including General, Fuzzy, Proximity, Wildcard, Regular Expression (Regex), and Stem searches.

Refines searches using Standard Filters, Tag Filters, Custodian Filters, and Keyword Filters.

Allows searching evidence in multiple languages and creating distinct cases for each language.

Renders a robust search mechanism using various search options and logical operators.

Users can create their own custom search filters based on specific scenarios.

Provides fast initial scanning and analysis of data.

Allows creating new search instances in separate tabs to keep activities segregated.

Enables advanced filtering for selective extraction of multiple files and folders, ensuring only relevant data is exported.

Users can implement custom export processes with precision based on their needs.

Extracts email evidence in over 20 various formats, including EML, MSG, TIFF, PDF, HTML, PST, CSV, DAT, and Concordance.

Generates evidence reports in multiple universally accepted and approved formats (PDF, HTML, CSV).

Simplifies data management by offering various reporting formats.

Allows customizing reports based on bookmarks, keywords, tags, subjects, and other fields.

Investigation reports can be saved in both PDF and CSV file formats.

Maintains and allows review/export of forensic logs detailing activities like scanning, searching, reporting, tagging, and bookmarking.

Preserves folder structure when saving evidence.

Ability to mark certain emails as "Privilege" to restrict their sharing if they contain confidential information.

Allows adding unlimited users to investigate a single case through a user-managed dashboard.

Provides administrative control over cases and client-level access for team members.

Facilitates collaborative work across different investigator workstations.

Enables efficient distribution of investigation tasks among team members.

Includes tools for assigning and managing tasks within a team.

Enables real-time syncing of research, uploaded files, and case progress among team members.

Offers granular role-based access control (RBAC), allowing full or restricted case access depending on user roles and complexity.

Allows remote team members to work associatively on the same network to analyze and review evidence.

SysTools is committed to child safety, with MailXaminer designed to aid in the detection and investigation of Child Sexual Abuse Material (CSAM) across multiple digital platforms.

Ensures data integrity is not compromised during the analysis process.

Utilizes MD5 and SHA1 hash values to ensure the integrity and authenticity of digital evidence, critical for legal admissibility.

Automatically logs every action performed during the investigation to ensure evidence integrity for legal compliance.

Provides operational convenience, making the software easy to use for technical and semi-technical users.

Delivers faster yet accurate output for email examination.

Advanced search, quick scan, and accurate analysis features designed to save investigators time.

Widely adopted by investigators globally, including law enforcement agencies.

Allows external investigators to review selected evidence.

Provides an intuitive dashboard with widgets for an overview of case data.

Supports searching, discovering, and coordinating real-time monitoring of cases to obtain court-admissible explicit evidence.

Aids in managing, collaborating, and building strong admissible proof for eDiscovery and litigation processes.

Helps identify and respond to company policy violations, combat infringement, and corporate espionage.

Suitable for educational and research purposes in digital forensics.

Aims to increase overall revenue by potentially cutting down on staff, specialized equipment, and training costs.