MailXaminer

Email is evidence in a large share of investigations, and it arrives in many formats from many mail programs. Built by SysTools, MailXaminer is a forensic program for examining email. It is meant for law enforcement agencies, government bodies, academic institutions and corporate teams, and the maker says it was built under the guidance of digital forensic experts so that technical and semi-technical users can work with it.

What it can open and search

The software supports more than twenty email formats and applications, and the site speaks of examining over eighty email clients. It also reaches web-based mail services and remote accounts through IMAP, so an examiner is not tied to one mailbox type. Data from several platforms can be loaded, previewed together and searched, and the vendor says the search function works across terabytes of email, with advanced search and quick scanning designed to cut examination time.

Evidence that stands up

SysTools describes reports that are compact, in formats accepted widely, and suitable for court. It says the software follows the benchmarks of the EDRM model for electronic discovery, and that verifiable MD5 hash values act as a digital seal on the evidence. Reports can be produced in several formats according to what the case requires.

Two editions

An individual edition runs on a single machine for a forensic expert who studies evidence and writes reports alone. The team edition runs across multiple machines, with administrator and client control, so a group of investigators can plan, collaborate and share synced results. The site also announces a new subscription plan.

Typical uses

The maker lists eDiscovery and case file management during litigation, forensic email analysis for investigators, identifying company policy violations, and tracing the source of trade secret leaks or corporate espionage. It also notes that it showed the product at Police Expo 2022, calls itself the number one choice for email examination, and says it has a CSAM compliance statement reflecting its commitment to child safety. The first two are the company's own claims.

MailXaminer is digital forensic software for examining email. SysTools developed it, and it supports investigators who need to search large mail databases and present findings as evidence.

Main features

• Email analysis: inspection of messages from many email applications and web mail accounts, including via IMAP.
• Wide format support: more than 20 email formats.
• Search: queries across very large volumes of email data.
• Team collaboration: an edition for groups of investigators, with administrator and client control, working on several machines.
• Evidence reports: reports in multiple formats, with hash verification of evidence.
• Single-user edition: for individual forensic examiners.

Clients

Law enforcement, government bodies, academic institutions and corporate teams looking into policy breaches or leaks of trade secrets.

Key facts

• Developer: SysTools
• Standards: said to follow the EDRM model
• Trade show: shown at Police Expo 2022