email-forensics

What problem does it solve?

Email forensics empowers investigators to parse and analyze mailbox data, headers, and artifacts to uncover evidence in security incidents.

Core Features & Use Cases

• Mailbox Parsing: Extract messages and folder structures from PST, OST, MBOX, EML, and MSG formats.
• Header Analysis & Artifacts: Inspect routing headers, authentication results, and metadata to identify anomalies.
• Phishing & Spoofing Detection: Detect phishing signals, spoofing attempts, and impersonation patterns.
• Timeline & Thread Reconstruction: Build timelines and reconstruct email conversations for investigation.
• Attachment & IoCs: Analyze attachments and extract Indicators of Compromise where present.

Quick Start

Start by parsing a mailbox and running a basic header analysis to surface key artifacts.