Forensic Email CollectorMetaspike
|
Sherlock Forensics Disk ImagerSherlock Forensics
|
|||||
Related Products
|
||||||
About
Expertly preserve email evidence without breaking a sweat. Get plug & play output for digital forensic investigations and eDiscovery. We all run into cases where collecting a mailbox as a whole is not an option, often due to privacy or timeframe concerns. On the other hand, eDiscovery and digital forensics workflows often involve a full collection, followed by post-acquisition searches. Forensic Email Collector solves this problem in a creative way. You can perform instant in-place searches on mailboxes on the server before the acquisition and forensically preserve only the search results. No need to create labels, tag documents, or make any changes to the target mailbox. Files attached to emails as hyperlinks to a cloud storage system can throw a monkey wrench into your forensic preservation. The linked attachments often require authentication and are inaccessible unless handled as part of the initial acquisition.
|
About
Sherlock Forensics Disk Imager is a Windows desktop tool for creating forensic images of physical drives for digital evidence acquisition. It writes raw DD images, including segmented files, and EWF E01 images that can be opened by forensic analysis tools. The imager records case, evidence and examiner details in a manifest and E01 metadata, computes SHA-256 hashes, and supports SHA-1 and MD5. Its verification workflow reads the source and completed image to check data integrity; additional functions include bad-sector logging, a live acquisition console, and a safeguard against saving an image to the same physical drive being read. Intended for digital forensic examiners, law enforcement, incident responders and corporate investigators, it supports dead-disk and Windows live-acquisition workflows on 64-bit Windows 10 and 11. The standalone executable runs locally without an installer or runtime dependencies.
|
|||||
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Not Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Not Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
Security teams and organizations seeking a solution to preserve email evidence
|
Audience
Digital forensic examiners, law enforcement, legal teams, incident responders and corporate investigators.
|
|||||
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Supported
24/7 Live Support
Not Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Not Supported
|
|||||
Screenshots and Videos |
Screenshots and VideosNo images available
|
|||||
Pricing
$499 one-time payment
Free Version
Not Supported
Free Trial
Not Supported
|
Pricing
$0
Free to download and use, with no trial period, feature restrictions or license fee.
Free Version
Supported
Free Trial
Not Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Training
Documentation
Supported
Webinars
Supported
Live Online
Supported
In Person
Supported
|
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
|||||
Company InformationMetaspike
Founded: 2017
United States
www.metaspike.com/forensic-email-collector/
|
Company InformationSherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-disk-imager.html
|
|||||
Alternatives |
Alternatives |
|||||
|
|
||||||
|
|
|
|||||
|
|
|
|||||
|
|
|
|||||
Categories |
Categories |
|||||
Email Archiving Features
Access Control
Not Supported
Backup Management
Not Supported
Compliance Management
Not Supported
Data Deduplication
Not Supported
Data Export
Supported
eDiscovery
Supported
Encryption
Not Supported
Retention Management
Not Supported
Storage Management
Not Supported
Threat Protection
Not Supported
eDiscovery Features
Case Analytics
Not Supported
Compliance Management
Not Supported
Discussion Threads
Not Supported
Document Indexing
Not Supported
Document Tracking
Supported
Full Text Extraction
Not Supported
Keyword Search
Supported
Metadata Extraction
Not Supported
Topic Clustering
Not Supported
|
||||||
Integrations
No info available.
|
Integrations
No info available.
|
|||||
|
|
|