Forensic Email Collector by Metaspike is a specialized tool designed to forensically preserve email evidence with precision and efficiency.

• In-Place Search: Perform instant, server-side searches on mailboxes before acquisition, allowing you to preserve only the relevant search results without altering the target mailbox.
• Google Drive Attachments Acquisition: Automatically detect and acquire Google Drive attachments and revisions linked within emails, ensuring comprehensive preservation of all related content.
• Flexible Authentication Options: Supports modern authentication methods, including OAuth 2.0, remote authentication via FEC Remote Authenticator, and enterprise-level access using administrator credentials, facilitating secure and versatile access to target mailboxes.
• Comprehensive Connectivity: Connects seamlessly to various email services such as Gmail, G Suite, Office 365, Exchange servers, and IMAP/POP3 servers, providing broad compatibility for diverse acquisition needs.
• Automatic Retries and Resume Capability: In the event of network or server errors, FEC automatically retries acquisitions and allows you to resume incomplete projects, ensuring uninterrupted and efficient data collection.
• Detailed Reporting: Generates comprehensive acquisition and exception reports, documenting each step of the process to support transparency and accountability in forensic investigations.
• Flexible Output Formats: Preserved emails can be exported simultaneously in MIME (EML), MSG, and PST formats, ensuring compatibility with various eDiscovery and digital forensics platforms.
• S/MIME Decryption: Detects and automatically decrypts S/MIME-encrypted emails during acquisition, outputting both the original encrypted and decrypted versions for thorough analysis.
• Server Metadata Capture: Captures essential server metadata, including IMAP UIDs, Gmail message and thread IDs, and various MAPI properties, providing valuable context for forensic analysis.
• Support for Calendars, Contacts, and Notes: Beyond emails, FEC can acquire events from Google Calendars, as well as appointments, contacts, and notes from Exchange servers, offering a holistic approach to data preservation.