Aid4Mail 6.2 Launched: Adds Full Python Scripting and Expanded AI Platform Support
We’re excited to announce the release of Aid4Mail 6.2, a major update that puts powerful automation directly into the hands of forensic investigators, eDiscovery professionals, and compliance teams. This release introduces a completely redesigned Python scripting framework, a library of production-ready investigation scripts, and an AI assistant that writes custom scripts for you—alongside expanded AI platform support and smarter email classification.
Whether you write your own code or have never touched a script, Aid4Mail 6.2 makes advanced automation accessible to everyone.
A Redesigned Python Scripting Framework
The Python scripting framework has been rebuilt from the ground up. The new architecture is simpler to learn, more capable, and deeply integrated with Aid4Mail’s processing pipeline and AI features.
Key improvements include:
- Unified variable namespace—All scripting variables now use a single, consistent
a4m_prefix, replacing the previous split between filter and modifier variable sets. Scripts are easier to write, review, and maintain. - Event-driven execution model—Scripts can respond to distinct processing events (Initialize, Folder, MIME, and Finalize), enabling workflows such as session-level setup, folder tracking, per-email logic, and final reporting.
- Persistent session memory—New session-level variables allow scripts to retain state across emails throughout a run. This enables cross-email analysis, aggregation, and statistical tracking that was previously difficult to implement.
- Expanded convenience variables—Frequently used email properties—sender, recipients, subject, message body, attachment presence, size, direction, and encryption status—are directly accessible, eliminating manual MIME parsing in most scripts.
- External configuration support—Scripts can read user-adjustable values from a shared
ScriptSettings.inifile, separating configuration from logic and making scripts easier to deploy across cases. - AI-aware scripting—Python scripts can access AI classification and analysis results directly, combining deterministic scripting logic with AI-generated insights in a single workflow.
- Performance optimizations—When both filtering and modifier scripts are active, expensive operations like MIME parsing and file extraction are performed only once per email and reused, improving throughput on large datasets.
- Improved error handling—Scripts can log warnings without interrupting processing or raise controlled errors when needed, improving robustness during long or complex runs.
For full details, examples, and migration guidance, refer to the Aid4Mail AI Integration User Guide.
10 Bundled Investigation Scripts—Ready to Use
Aid4Mail 6.2 ships with a curated set of production-ready Python scripts designed for common forensic, eDiscovery, security, and compliance workflows. Each script includes a dedicated PDF user guide accessible directly from Aid4Mail, and behavior can be configured through the shared ScriptSettings.ini file—no coding required.
The bundled scripts include:
- Attachment Risk Scoring—Calculates weighted risk scores based on attachment characteristics associated with malware, phishing, or policy violations.
- Concordance Load File Generator—Generates industry-standard DAT and OPT load files for importing email data into Concordance, Summation, and compatible litigation review platforms.
- Email Authentication Verification—Analyzes SPF, DKIM, and DMARC results to assess email authenticity and identify potentially spoofed messages.
- Email Content Sanitizer—Removes or anonymizes sensitive content for disclosure, privacy compliance, or controlled evidence sharing while maintaining auditability.
- Evidence Integrity Verification—Produces cryptographic integrity manifests with hashes, timestamps, and optional signatures for chain-of-custody documentation.
- Structured Entity Extraction—Identifies and catalogs structured entities (financial identifiers, personal data, technical indicators) within email content, with optional folder organization by entity type.
- Language and Region Tagger—Detects the primary language of each email and organizes messages into language-specific folders, with optional regional variant detection.
- Language Anomaly Detection—Flags emails exhibiting linguistic patterns commonly associated with phishing, BEC, or social-engineering attacks using weighted heuristic scoring.
- Relationship Mapper—Generates graph data representing communication networks, suitable for import into visualization and link-analysis tools.
- Timeline Activity Summary—Produces aggregated reports revealing temporal communication patterns, anomalies, after-hours activity, and dataset composition during early case assessment.
These scripts provide immediate, configurable automation for many investigative scenarios. They also serve as reference implementations for users building their own custom workflows.
AI-Assisted Script Creation for Non-Programmers
You don’t need to be a programmer to create custom scripts. Aid4Mail 6.2 introduces an AI assistant built on OpenAI’s ChatGPT platform, trained specifically on Aid4Mail’s Python scripting framework, variable syntax, and forensic requirements.
Describe what you need in plain language—a filtering rule, a data extraction task, a custom report—and receive a production-ready Python script that works immediately in Aid4Mail. This makes case-specific automation accessible to investigators, legal professionals, and compliance teams, while still meeting the technical and evidentiary standards required for forensic work.
Try the AI script assistant here: Python Scripts for Aid4Mail on ChatGPT
Redesigned AI Configuration System
Aid4Mail’s AI integration has been overhauled with a new modular configuration system that makes it significantly easier to set up and manage both cloud-based enterprise AI platforms and locally hosted models.
AI providers and models are now defined using self-contained configuration files with clear override rules. This simplifies setup, improves reliability, and ensures existing or retired models continue to function without disruption. The user interface adapts automatically to each provider’s requirements.
Aid4Mail 6.2 adds ready-to-use configurations for Amazon Bedrock, Google Vertex, Microsoft Foundry, and offline models via Ollama and LM Studio.
In parallel, the built-in system prompts have been refined to improve AI analysis accuracy and prompt validation. All 212 bundled AI prompts have been reviewed and improved for clarity, consistency, and output quality across analysis, classification, and filtering tasks.
Smarter Personal Email Detection
The Type:Personal filter has been significantly enhanced. Aid4Mail now more accurately distinguishes genuine personal correspondence from automated messages, bulk communications, marketing, notifications, and no-reply addresses.
To include only personal mail in your filter query:
Type:Personal
To exclude personal mail:
NOT Type:Personal
In internal testing on a business account, the Type:Personal query alone filtered out 91.7% of non-personal emails—a major time-saver during early case assessment and review.
Windows Sleep and Restart Protection
Aid4Mail now notifies Windows when active processing tasks are running, preventing the system from entering sleep or hibernation and from automatically rebooting after Windows Updates. This reduces the risk of interrupted collections and ensures greater reliability during long-running or unattended jobs.
This protection applies only while individual processing sessions are running. When no session is active, Windows resumes normal power management behavior.
Component Updates and Security
Aid4Mail 6.2 also includes updated third-party components:
- Aspose.Email for .NET updated to version 26.1
- PCRE2 updated to version 10.47, with enhanced recursive subpattern support
- Xpdf command line tool updated to version 4.06 for improved PDF support
- ExifTool updated to version 13.49 for the latest metadata standards
On the security front, Aid4Mail has completed Google’s CASA Tier 2 recertification, including independent SAST scanning and security assessment review. This annual certification validates Aid4Mail’s adherence to Google’s security standards for applications accessing restricted Gmail and Google Drive API scopes.
Aid4Mail 6.2 is our most automation-focused release yet. From a powerful new scripting framework and ready-to-use investigation scripts to AI-assisted script creation and expanded AI platform support, it equips professionals with the tools to work faster, smarter, and more thoroughly.
Try Aid4Mail 6.2 today and see how Python scripting and AI-powered automation can transform your forensic and eDiscovery workflows.
by Eric Fookes
Founder & CEO
Eric Fookes is the founder and CEO of Fookes Software Ltd, and the creator of Aid4Mail. With over 25 years of experience in email forensics and data recovery, Eric has helped thousands of organizations worldwide with their email investigation and migration needs.
Connect on LinkedInRelated Posts
Aid4Mail 6: A Revolution in Digital Forensics and eDiscovery
Discover how Aid4Mail 6 transforms email investigations with integrated AI analysis and comprehensive cloud attachment support, delivering faster and more accurate results for digital forensics professionals.
Aid4Mail 6.1 Launched: Adds Portable Email Viewer for Reviewing Curated Email Sets
Aid4Mail 6.1 introduces a secure, portable Email Viewer for reviewing curated email sets—no installation required, with advanced search, tagging, and support for 100,000+ emails.
Advanced Aid4Mail Features That Most Users Miss
Discover powerful Aid4Mail capabilities for email forensics including native pre-acquisition filtering, advanced search, email recovery, and workflow automation that can significantly improve your investigation efficiency.