Concurrent Access Protection

In order to ensure that only one instance of Forensic Email Collector (FEC) acts on an FEC project simultaneously, FEC creates a hidden lock file next to the project file named as follows:

<target_email>.FECProj.lck

When you open an FEC project that is in use, you would receive an error message as follows:

Project in use by '<COMPUTER_NAME>\<user_name>'. Activity start: '<timestamp>'.

If you receive such a message, you should check the <user_name> account on the <COMPUTER_NAME> device and wait for its use of the FEC project to finish before you open the project.

If FEC is closed abruptly during an acquisition due to an unexpected event, such as a computer failure or loss of power, the lock file may remain in place. In such scenarios, we recommend doing the following:

1. Check the <user_name> account on the <COMPUTER_NAME> device to ensure that no active FEC instance is working on that project.
2. If the above is true, you can rename the <target_email>.FECProj.lck file to <target_email>.FECProj.lck.old to allow FEC to act on that project.