Supported Provider Types
Forensic Email Collector (FEC) currently has the following connectivity options:
Exchange Web Services (EWS)
Section titled “Exchange Web Services (EWS)”Exchange Web Services is used to connect to Microsoft 365 (M365) as well as on-premises Exchange servers and Exchange servers hosted by other providers. Exchange 2007 SP-1 and later are supported.
Microsoft Graph API
Section titled “Microsoft Graph API”Microsoft Graph API can be used to connect to M365 as well as Microsoft’s consumer accounts such as Hotmail, Outlook.com, MSN, Live, etc. FEC uses Graph API for email acquisitions as well as OneDrive and SharePoint forensic preservation.
Google APIs
Section titled “Google APIs”FEC uses Gmail API, Google Drive API, and Google Calendar API for forensic preservation of Google user data. Both free/personal Gmail accounts and Google Workspace (formerly G Suite) accounts are supported.
Google Vault and Google Takeout
Section titled “Google Vault and Google Takeout”FEC uses existing Google Vault and Google Takeout exports as a starting point. This is particularly valuable for handling hyperlinked Drive attachments in Vault exports.
Internet Message Access Protocol (IMAP)
Section titled “Internet Message Access Protocol (IMAP)”IMAP is used to connect to numerous IMAP-compatible servers such as those of iCloud, Yahoo, Zoho, AOL, GoDaddy, etc. IMAP can also be used to connect to Gmail / Google Workspace and M365 as an alternative.
Post Office Protocol 3 (POP3)
Section titled “Post Office Protocol 3 (POP3)”POP3 is supported as a last resort option to connect to legacy servers that do not support other connection options.