Forensic Email Collector

Forensic Email Collector is software from Metaspike for preserving email evidence. It connects to mail accounts and collects only the messages that matter. Output is designed to drop straight into digital forensics and eDiscovery work.

What Forensic Email Collector offers

• In-place search — searches mailboxes on the server before acquisition and preserves only the results.
• Keyword lists — loads terms from a file and gives a hit count per line.
• Cloud attachments — detects and collects linked Google Drive, OneDrive and SharePoint files with their parent emails.
• Broad connectivity — works with Gmail, Exchange, Microsoft 365 and IMAP servers such as Yahoo, iCloud and Zoho.
• Extra data — also handles calendars, contacts and notes.

Who it works with

It is meant for forensic examiners and eDiscovery teams who cannot take a whole mailbox because of privacy or timeframe limits.

Key facts

• Developer: Metaspike
• Connection methods: Gmail API and Exchange Web Services