Announcements

New updates and improvements to Forensic Email Intelligence

  1. 2.2.130

    Release

          Read Release Notes 

    🔥Added the option to compare MAPI properties of MAPI items side by side—including differential analysis.

    🔥It is now possible to batch export MAPI properties of items on the Evidence Grid.

    ✔️Added description for PR_LAST_VERB_EXECUTED.

    ✔️MAPI View now allows exporting the MAPI properties of an individual item.

    ✔️Added support for timestamps represented in Ticks.

    ✔️Export manifest now includes item flags.

    ✔️Performance improvements when displaying very large MAPI properties.

    ✔️Numerous other performance and user experience improvements.

     

    🌐Project Compatibility Level: 2.1.14.6

    ⬆️Upgrade Compatibility Level: 2.1.7.0

     

    Like

  2. 2.1.14.12

    Release

    🔥When opening older projects, FEI now offers the option to upgrade the project structure to that of the current version that is opening the project.

     

    🌐Project Compatibility Level: 2.1.14.6

    ⬆️Upgrade Compatibility Level: 2.1.7.0

    Like

  3. 2.1.14.8

    Release

    ✔️Improvements to S/MIME signature verification for MAPI messages.

    ✔️Improvements to PST export.

    ✔️Adjusted the visibility of the search query history button in dark mode.

     

    🌐Project Compatibility Level: 2.1.14.6

    Like

  4. 2.1.14.6

    Release

    🔥Added aggregate data panels to display and query domains and IP addresses at the project level.

    ✔️Added two new index fields to enable searching of the X-Originating-IP and X-Mailer headers directly.

    ✔️Improved support for ingesting PST/OST files with the read-only file system attribute set.

    ✔️Numerous other performance and user experience enhancements.

     

    🌐Project Compatibility Level: 2.1.14.6

    Like

  5. 2.1.13.3

    Release

    🔥Added support for S/MIME and OpenPGP decryption and signature verification.

    ✔️Extended export options to include exporting decrypted versions of emails where applicable.

    ✔️Timestamps View has been extended to include timestamps from digital signature certificates.

    ✔️Insights have been extended to cover decryption and digital signature verification.

    ✔️Renamed the "Red Flags" column to "Markers" and added markers to include the signature and encryption status of emails.

    ✔️Improvements to the display of extended participant information.

    ✔️Numerous other performance and user experience enhancements.

     

    🌐Project Compatibility Level: 2.1.7.0

    Like

  6. 2.1.12.2

    Release

    ✔️Added option to normalize accented characters during indexing.

    ✔️Added Expand All and Collapse All options to the folder tree.

    ✔️Other minor improvements.

     

    🌐Project Compatibility Level: 2.1.7.0

    Like

  7. 2.1.12.1

    Release

     Read release notes 

    🔥Added a new option to display extended participant information on rendered emails and printouts for "sent on behalf of" and "received representing" scenarios.

    🔥Item flags are now displayed on the Evidence Grid and can be queried from there directly.

    ✔️Extended SuperCache definitions with new DKIM & ARC public keys.

    ✔️Added custom JumpLists to FEI taskbar icon.

    ✔️Improved resilience of the Render View when the active item is changed rapidly.

    ✔️Added Insights for read and delivery receipts.

    ✔️Added Insights for MAPI retention date and period.

    ✔️Improvements to displaying SMTP addresses of MAPI recipients when available.

    ✔️Improved detection of OST mail stores.

    ✔️Added /NewProject, /OpenProject, and /Viewer command line arguments.

    ✔️Numerous other user interface and performance improvements.

     

    🌐Project Compatibility Level: 2.1.7.0

  8. 2.1.11.3

    Release

     Read release notes 

    🔥Internal Attachment Metadata — FEI's Attachments View now contains a menu item that displays the internal metadata of attachments. Internal attachment metadata is also factored into timelining, Insights, and scoring.

    🔥PDF Deep Scan — FEI now supports extracting multiple XMP metadata streams from PDFs as well as numerous other timestamps such as embedded PDF attachment timestamps, annotation timestamps, etc.

    🔥Image Deep Scan — FEI now supports extracting Exif, IPTC, and XMP metadata from images.

    🔥Built-in Attachment Viewers — It is now possible to directly view popular attachment types (e.g., PDFs, Word and Excel documents, text files, etc.) directly within FEI without using an external viewer.

    ✔️Extended MAPI property definitions.

    ✔️Significant user interface performance improvements.

    ✔️Numerous other performance and user experience enhancements.

     

    🌐Project Compatibility Level: 2.1.7.0

  9. 2.1.10.6

    Release

    ✔️Added Expected Body Hash to failed DKIM signature reporting.

    ✔️Added the ItemId field to bulk timeline exports.

    ✔️Improved character encoding detection in MIME emails.

    ✔️Improved pagination during individual and bulk PDF exports.

    ✔️Increased details captured during exception logging.

    ✔️Improved support for multiple FEI Viewer window instances.

    ✔️Added definitions for more MIME headers.

    ✔️Fixed a rare race condition that could cause an unexpected error during ingestion.

    ✔️Numerous minor performance and user experience improvements.

     

    🌐Project Compatibility Level: 2.1.7.0

  10. 2.1.9.5

    Release

     Read release notes 

    🔥Bulk PDF Export — You can now export a subset of the items on the Evidence Grid in PDF format. The result is very similar to the individual PDF export from FEI Viewer, but performed on multiple items automatically.

    1

    Export to PDF after indexing.

    Ingesting a PST into FEI, then running index searches for relative evidence items- to then have the ability to export the grid into a PDF build. But also to export the emails inside the grid as PDF also.

    J E
    Released

    1

    🔥Multiple Viewer Instances — A new right-click context menu has been added to the Evidence Grid that allows multiple emails to be opened in their own FEI Viewer instances. This makes it much easier to examine emails comparatively.

    🔥Timeline Export — In addition to being able to export the timestamps of an individual email from FEI's Timestamps View, you can now export the timestamps in an entire FEI project in timeline format. For instance, you can ingest a PST file and get a dump of all datetime type MAPI properties! Perfect for performing timeline analysis externally.

    3

    Bulk Export Timeline

    This idea expands on the Timestamps view in FEI Viewer. For a set of items within the Evidence Grid, provide a right-click command (similar to the commands for data export) to export a combined timeline for all emails within the view. The exported timeline will be a tabular file (e.g., CSV) which will lend itself well to traditional timeline analysis.

    Arman Gungor
    Released

    1

    🔥Control Numbers — Along with the new export improvements, FEI now supports assigning document-level control numbers (aka Bates numbers) to exported items. The filenames of the exported items reflect their control numbers. The ControlNumber column of the Export Manifest can also be used to reference which control number was assigned to each file.

    ✔️Added the option to export files and PDFs into a flat folder structure.

    ✔️Improved support for Message-IDs corrected by Google MTAs.

    ✔️Miscellaneous performance and usability improvements.

     

    🌐Project Compatibility Level: 2.1.7.0

    Like