Announcements

New updates and improvements to Forensic Email Collector

  1. 3.81.1.0

    FEC Release

    This release contains the first phase of improvements to address Yahoo / AOL authentication issues.

    ✔️Added modern authentication (OAuth 2) support for Yahoo and AOL. Currently, the user brings their own Yahoo / AOL API credentials.

    ✔️Extended FEC's custom token import functionality to cover Yahoo / AOL—making it possible to use external authentication tokens.

    ✔️Output PST split preference and size are now retained on the output settings page during back-and-forth navigation.

    ✔️Numerous minor user interface and performance improvements.

  2. 3.80.3.1

    FEC Release

    ✔️Added support for Exchange/M365 Public Folders in EWS acquisitions.

    ✔️It is now possible to customize FEC's output PST naming scheme using templates on FEC's preferences page.

    3

    Customizable Output PST Names

    Make it possible to enter a custom PST base name—instead of the target email address—during acquisition setup.

    Arman Gungor
    Released

    3

    ✔️Updated Microsoft's public key for .Net Framework 4.7.2 so that FEC can verify its signature during installation—only applies if that dependency is missing.

    Like

  3. 3.80.2.11

    FEC Release

    Maintenance release that addresses an OAuth timeout issue in EWS acquisitions.

    Like

  4. 3.80.2.9

    FEC Release

    Read release notes

    🆕 Introduced Inline Search — a new mechanism to filter emails during acquisition.

    🔥Added granular throttling mitigation to various areas in the acquisition pipeline to improve performance. The enhancement is especially felt during Drive acquisitions and folder snapshots in heavily-throttled Exchange/M365 acquisitions.

    ✔️Improved handling of special characters in Drive paths during modern attachment acquisition.

    ✔️Batch acquisitions no longer attempt to start an acquisition if the acquisition was previously closed (i.e., credentials cleared).

    ✔️Improvements to PST output performance.

    ✔️The "Use Impersonation" setting in EWS acquisitions is now recorded in Acquisition Log.

    ✔️Switched to .Net Framework 4.7.2.

    ✔️Permission errors encountered during the acquisition of Drive revision lists are now considered permanent.

    ✔️Improved Federal Information Processing Standards (FIPS) compliance.

    ✔️Numerous performance and user experience improvements.

    2

  5. 3.75.1.13

    FEC Release

    ✔️ Switched default servers for Yahoo and AOL to work around limits imposed by these providers.

    ✔️ Added a new built-in acquisition profile for DreamHost.

    4

  6. 3.75.1.12

    FEC Release

    ✔️Support for acquiring the Audit Log during EWS acquisitions in response to recent changes from Microsoft.

    ✔️Support for additional EWS item subclasses.

    Like

  7. 3.75.1.10

    FEC Release

    ✔️Maintenance release that addresses an issue where an extra slash at the end of the project path could be perceived as a deviation from the original project path and prevent FEC from manually resuming a project.

    Like

  8. 3.75.1.9

    FEC Release

    Read release notes

    🆕 Introduced Credential Manager

    1

    Credential Manager

    Allow management of credentials in existing acquisition projects to support the following workflows: Replace a Remote Authenticator token with a new one This can be useful if the authentication token is accidentally invalidated by the end-user during the acquisition and has to be replaced without starting the acquisition over. Change the target account password/app password Similarly, for acquisitions involving legacy username/password authentication, make it possible to change the password in an acquisition project in case the end-user accidentally revokes the app password that was provided. Clear Credentials Make it possible to clear the credential cache in an acquisition project at any time, preventing FEC from being able to authenticate with the target mailbox in the future. Automatically Close Acquisition Projects When an acquisition finishes successfully (i.e., there are no remaining items that could be acquired), automatically clear the credential cache of the acquisition project.

    Arman Gungor
    Released

    0

    🔥Support for Resource Key locked Drive attachments

    ✔️Added option to automatically detect low disk space and send an optional notification email when disk space is critically low

    ✔️Output PST EntryID capture

    1

    Reflect Output PST EntryIDs in Downloaded Items Log

    When the PST output option is selected, include the EntryID of each item written to the output PST in the Downloaded Items Log. This will help correlate items within an output PST with the list of items in Downloaded Items log for metadata overlays, mailbox remediation with Obliterator, etc.

    Arman Gungor
    Released

    0

    🔥Improved Post-Acquisition Actions page

    ✔️It is now possible to clear permanent error flags from items with permanent errors

    ✔️Hash preference on the output page is now retained during navigation

    ✔️Improved logging during Drive attachment & revision acquisition

    ✔️Added UTC label to Date column in the Gmail API in-place search preview window

    ✔️An additional file is no longer created when FEC has to fall back to a secondary Drive attachment acquisition strategy

    ✔️Acquisitions in which no items were identified for collection are now clearly identified in email notifications and end of acquisition messages.

    ✔️An additional safety check is now performed to ensure that the original output path in an acquisition project matches the active path when a project is resumed after the fact.

    ✔️Numerous minor performance and user interface improvements

    Like

  9. 3.70.1.8

    FEC Release

    This is a maintenance release that addresses a very rare case that could prevent a Gmail API in-place search from being executed due to an unexpected Gmail API response.

  10. 3.70.1.5

    FEC Release

    ✔ Introduced differential acquisitions.

    ✔ Added Access Role to data points captured during Google Calendar acquisitions.

    ✔ Added Permissions to data points captured during Google Drive acquisitions.

    ✔ Added option to generate a storage quota report for the target user for Gmail / Google Workspace acquisitions.

    ✔ Switched to .Net Framework 4.6.2.

    ✔ Improved support for phrase searches in Graph API.

    ✔ Numerous other performance and user interface improvements.

    Like