Feature Ideas

Trending
  1. Relative Paths in Project File

    Make the output paths in an FEC project relative so that the project can continue to work even if itโ€™s moved to a different location. Example: You start an acquisition with the output path โ€œX:\Client Files\12314.123\Emails\1234โ€ and then move the project to โ€œZ:\New Project Pathโ€. The project, in its new location on the Z: drive, remains fully operational/resumable.

    Arman Gungor
    #Improvement ๐Ÿ‘๐Ÿป

    3

  2. Customizable Output PST Names

    Make it possible to enter a custom PST base nameโ€”instead of the target email addressโ€”during acquisition setup.

    Arman Gungor

    2

  3. Option to Output Inside a Container

    Provide an option to have FEC output the acquired items inside a container file such as a virtual hard disk (VHD), AFF4 image, logical evidence file (L01), ZIP archive, 7-Zip archive, etc. If you are interested in this feature, please upvote and/or reply below and let us know which output format you would prefer.

    Arman Gungor
    #Improvement ๐Ÿ‘๐Ÿป

    1

  4. Expand FEC to include MS OneDrive, Sharepoint, Azure AD.. etc

    As consultants we are asked to collect all of these items in addition to a mailbox. Currently one can do so using Axiom; however Axiom doesn't come anywhere close to the efficiency and capability of FEC.

    Jason C
    #Integrations ๐Ÿ”—

    0

  5. Containerize entire output

    Currently the containerize VHDX is a great option, but I would also like it to include the Logs, Drive attachments as well making it an even better option. Can we make this happen? :)

    Kirk C

    1

  6. Search Preview Across Multiple Mailboxes

    You said "FECโ€™s in-place search preview features to run a query or even run a list of search expressions and get hit counts, but this works at the individual mailbox level, not across the board." It would be very useful in both eDiscovery and forensic investigation cases to do a pre-search and identify a subset of accounts that may have relevant hits. Both in the triage of accounts to collect or to identify other relevant email users in an organization

    Peter G
    #Improvement ๐Ÿ‘๐Ÿป#Misc ๐Ÿคท

    1

  7. Reflect Output PST EntryIDs in Downloaded Items Log

    When the PST output option is selected, include the EntryID of each item written to the output PST in the Downloaded Items Log. This will help correlate items within an output PST with the list of items in Downloaded Items log for metadata overlays, mailbox remediation with Obliterator, etc.

    Arman Gungor
    #Improvement ๐Ÿ‘๐Ÿป

    0

  8. Credential Manager

    Allow management of credentials in existing acquisition projects to support the following workflows: Replace a Remote Authenticator token with a new one This can be useful if the authentication token is accidentally invalidated by the end-user during the acquisition and has to be replaced without starting the acquisition over. Change the target account password/app password Similarly, for acquisitions involving legacy username/password authentication, make it possible to change the password in an acquisition project in case the end-user accidentally revokes the app password that was provided. Clear Credentials Make it possible to clear the credential cache in an acquisition project at any time, preventing FEC from being able to authenticate with the target mailbox in the future. Automatically Close Acquisition Projects When an acquisition finishes successfully (i.e., there are no remaining items that could be acquired), automatically clear the credential cache of the acquisition project.

    Arman Gungor
    #Improvement ๐Ÿ‘๐Ÿป

    0

  9. Improve Bulk Acquisition Functionality with GUI

    FEC currently allows users to bulk-create acquisitions from a list of targets and then run them one after the other from the command line or using a batch file output by FEC. Improve on this functionality by adding a Queue Manager GUI for a more streamlined workflow.

    Arman Gungor
    #Improvement ๐Ÿ‘๐Ÿป

    0