+
+

Related Products

  • Digital WarRoom
    55 Ratings
    Visit Website
  • PostScan Mail
    137 Ratings
    Visit Website
  • ManageEngine ADManager Plus
    716 Ratings
    Visit Website
  • Monk
    8 Ratings
    Visit Website
  • InboxAlly
    136 Ratings
    Visit Website
  • Vehicle Acquisition Network (VAN)
    54 Ratings
    Visit Website
  • Maropost Marketing Cloud
    152 Ratings
    Visit Website
  • HubSpot AEO
    151 Ratings
    Visit Website
  • AthenaHQ
    50 Ratings
    Visit Website
  • ScalaHosting
    2,388 Ratings
    Visit Website

About

Expertly preserve email evidence without breaking a sweat. Get plug & play output for digital forensic investigations and eDiscovery. We all run into cases where collecting a mailbox as a whole is not an option, often due to privacy or timeframe concerns. On the other hand, eDiscovery and digital forensics workflows often involve a full collection, followed by post-acquisition searches. Forensic Email Collector solves this problem in a creative way. You can perform instant in-place searches on mailboxes on the server before the acquisition and forensically preserve only the search results. No need to create labels, tag documents, or make any changes to the target mailbox. Files attached to emails as hyperlinks to a cloud storage system can throw a monkey wrench into your forensic preservation. The linked attachments often require authentication and are inaccessible unless handled as part of the initial acquisition.

About

Sherlock Forensics Disk Imager is a Windows desktop tool for creating forensic images of physical drives for digital evidence acquisition. It writes raw DD images, including segmented files, and EWF E01 images that can be opened by forensic analysis tools. The imager records case, evidence and examiner details in a manifest and E01 metadata, computes SHA-256 hashes, and supports SHA-1 and MD5. Its verification workflow reads the source and completed image to check data integrity; additional functions include bad-sector logging, a live acquisition console, and a safeguard against saving an image to the same physical drive being read. Intended for digital forensic examiners, law enforcement, incident responders and corporate investigators, it supports dead-disk and Windows live-acquisition workflows on 64-bit Windows 10 and 11. The standalone executable runs locally without an installer or runtime dependencies.

Platforms Supported

Windows Supported
Mac Not Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Not Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Security teams and organizations seeking a solution to preserve email evidence

Audience

Digital forensic examiners, law enforcement, legal teams, incident responders and corporate investigators.

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

No images available

Pricing

$499 one-time payment
Free Version Not Supported
Free Trial Not Supported

Pricing

$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Metaspike
Founded: 2017
United States
www.metaspike.com/forensic-email-collector/

Company Information

Sherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-disk-imager.html

Alternatives

Aid4Mail

Aid4Mail

Fookes Software Ltd

Alternatives

Sherlock Forensics Recover

Sherlock Forensics Recover

Sherlock Forensics
MailArchiva

MailArchiva

Stimulus Software
Android Acquirer

Android Acquirer

Sherlock Forensics
DigiScope

DigiScope

Lucid8
LLIMAGER

LLIMAGER

e-Forensics Inc

Categories

eDiscovery Supported
Email Archiving Supported

Categories

Disk Imaging Supported

Email Archiving Features

Access Control Not Supported
Backup Management Not Supported
Compliance Management Not Supported
Data Deduplication Not Supported
Data Export Supported
eDiscovery Supported
Encryption Not Supported
Retention Management Not Supported
Storage Management Not Supported
Threat Protection Not Supported

eDiscovery Features

Case Analytics Not Supported
Compliance Management Not Supported
Discussion Threads Not Supported
Document Indexing Not Supported
Document Tracking Supported
Full Text Extraction Not Supported
Keyword Search Supported
Metadata Extraction Not Supported
Topic Clustering Not Supported

Integrations

No info available.

Integrations

No info available.
Claim Forensic Email Collector and update features and information
Claim Forensic Email Collector and update features and information
Claim Sherlock Forensics Disk Imager and update features and information
Claim Sherlock Forensics Disk Imager and update features and information