Resuming Past Projects

Forensic Email Collector (FEC) allows you to resume past projects. This can be extremely helpful if the acquisition session got interrupted (e.g., you experienced a power or network failure) and you have to resume at a later time. You can accomplish this by clicking the "click to resume a previous project" hyperlink on the main screen and selecting and FEC project file (*.FECproj).

Please note that active email accounts can change quite frequently. New emails may arrive, older emails in the "Spam" folders may be discarded. Since resuming a project forces FEC to use a mailbox snapshot taken at the time of the initial acquisition, we strongly recommend that you resume past projects as soon as possible to minimize changes to the mailbox.

The amount of time that is reasonable for resuming a past project depends on how active a mailbox is. Generally speaking, resuming the same day or even the next might be fine. If you find yourself resuming a project a few days or a week later, it would likely be better to start a new acquisition instead.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.