Email is the primary form of communication for business and individuals and is a primary source of evidence in many digital forensic investigations as well as in eDiscovery. Knowing how to process the different email archives and get the most valuable information from the active archive as well as the recycling bin and beyond is paramount for your tool.
E3:EMAIL complete email support from processing,
searching, and reporting.
The E3 Forensic Platform seamlessly adds a large variety of evidence into a single interface to be able to search, parse, review and report on the digital data from most digital sources.
Email processing can be done with just local archives with E3:EMX or just network archives with E3:NEMX or bundle them together.
Local Email Archives
There is a huge variety of email types available for people to use and with that comes a variety of processing needs. Each mailbox type in the E3 Forensic Platform is processed natively to ensure the maximum amount of data recovery.
PST - OST
When dealing with these common Microsoft mail formats it is critical to make sure that they are processed as native mail archives for data corruption repair and to ensure the most amount of deleted data recovery.
Mailbox Variety
With the support of hundreds of different email formats the options are endless when it comes to processing local email stores with the E3 Forensic Platform. Supported email archives include:
Local email supported:
Microsoft Outlook (PST & OST)
Windows 10 Mail
Office365 Email
Microsoft Outlook Express
Windows Mail Email
The Bat!
America Online (AOL)
Mozilla Thunderbird
Eudora
Email Files (EML)
Maildir Database
750+ Mime Formats
Office365
Easily use the Office365 functions in the MS Azure environment to select the custom options for processing individual mail stores or full companies in the Office365 environment.
Email Servers
When dealing with any investigation in a corporate environment understanding the needs and issues of the network mail store is crucial and can make or break an investigation. Paraben’s E3 Forensic Platform has been dealing with network email stores since 2002. The unique functions to capture data from even the deepest reaches of the deleted data are only in the E3 Forensic Platform.
Lotus Notes
Lotus Notes as a legacy mail archive can be tricky and the E3 Forensic Platform has made it as easy as possible with the ability to process the archive with the key file and convert the data to PST.
MS Exchange
Microsoft Exchange can be hectic and time consuming to deal with. Common problems with corruption and data loss can stop an investigation cold. The E3 Forensic Platform has been designed with that in mind with built-in data corruption repair functions that get you up and running.
GroupWise
This legacy format is one of the more complicated of the network mail archives. The E3 Forensic Platform takes the review of GroupWise as a comprehensive post office and allows the breakdown of the individual mailstores.
eDiscovery
As with many investigations email processing is common in the eDiscovery process. The ability to bring in a variety of email data sources, deduplicate, search, and export an optimized data form are the keys to the eDiscovery process in the E3 Forensic Platform when dealing with email.
Header Processing
The full RFC header is available for review when processing through email archives in the E3 Forensic Platform. This comprehensive level of processing allows you to view the email in full context.
Searching
There are endless options for searching inside of the E3 Forensic Platform and that can help you refine the data you are dealing with in eDiscovery. From simple searches, index search, word list searches, Boolean, and GREP everything you need to optimize the data is available in the E3 Forensic Platform.
PST Data Conversion
As PST files have emerged as the most popular mail archive type to produce in eDiscovery the incorporation of this function has been built into the E3 Forensic Platform. MS Exchange, Lotus Notes, GroupWise and more can be converted to a PST file for review by other parties.
Reporting & Review
There is nothing more important than showing off all the hard work that goes into the investigation. The reporting options in the E3 Forensic Platform are top of the class when it comes to being clear, concise, and kick ass. There are different report types depending on what type of data you have to share so take a look at the options.
Data review is easy with the E3 Forensic Platform with E3:Viewer you get all the analytic powers of E3 built into a read-only viewer. You even get all the reporting options. Work in scaled teams and with others easily with E3. The E3 Viewer is sold separately or included with E3:Universal.
