We are excited to announce Forensic Email Collector v3.52! Here is what’s new:
S/MIME Support
With the proliferation of business email compromise and privacy concerns around providers’ handling of user data, email encryption is gaining momentum. We wanted to add S/MIME decryption support to FEC to make the decryption process a breeze. Also, transparent decryption during the acquisition allows you to acquire Google Drive attachments and revisions of encrypted emails, which is typically not possible after the fact.
When designing FEC’s S/MIME support, we paid close attention to make the process as seamless as possible. You get both the encrypted and decrypted copies for forensic authentication, you can load multiple certificates for decryption or use the computer’s certificate store, and set up batch acquisitions with S/MIME decryption support by pre-loading all the necessary certificates ahead of time!
Drive Acquisition & Google Calendar
We have also extended FEC’s Google Drive attachment and revision support to cover Google Calendar items. This includes attachments that were referenced manually in the description of a Calendar item, as well as items that were explicitly attached via the “Add attachment” (i.e., paperclip) button.
This new version also contains numerous smaller improvements such as the ability to query IMAP servers by the \Seen IMAP flag (i.e., “read” vs. “unread” messages), improvements to Drive attachment detection, improved in-place search preview performance, and more.
You can check out the changelog for more information.
Enjoy the rest of your week and please don’t hesitate to get in touch with any questions!
Arman Gungor
Founder at Metaspike
