Skip to main content
Release Notes

What’s New in Aid4Mail 6

Revolutionizing email forensics with AI-powered analysis, cloud attachment collection, and enhanced investigation tools. Explore the groundbreaking features that make Aid4Mail 6 the most powerful email forensics platform available.

Version 6.2.0

LATEST
Released: February 12, 2026
1

Major Python Scripting Framework Overhaul

Aid4Mail 6.2 introduces a comprehensive redesign of the Python scripting framework, significantly expanding its capabilities, flexibility, and usability for digital forensics and eDiscovery workflows.

The new architecture simplifies script development, improves performance, and provides deeper integration with Aid4Mail’s processing pipeline and AI features. All scripts now share a unified variable model, making them easier to write, understand, and maintain across both the filtering and modifier stages.

  • Unified variable namespace – All scripting variables now use a single, consistent a4m_ prefix, replacing the previous split between filter and modifier variable sets.
  • Event-driven execution model – Scripts can respond to distinct processing events (Initialize, Folder, MIME, and Finalize), enabling advanced workflows such as session-level initialization, folder tracking, per-email logic, and final summary or reporting tasks.
  • Persistent session memory – New session-level memory variables allow scripts to retain state across emails throughout a run. This enables cross-email analysis, aggregation, statistical tracking, and other advanced investigative logic.
  • Expanded convenience variables – Frequently used email properties such as sender, recipients, subject, message body (plain text and HTML), attachment presence, size, direction, and encryption status are now directly available.
  • External configuration support – Scripts can read user-adjustable values from a shared ScriptSettings.ini file, separating configuration from logic.
  • AI-aware scripting – Python scripts can directly access AI classification and analysis results, allowing investigators to combine deterministic scripting logic with AI-generated insights.
  • Performance optimizations – When both filtering and modifier scripts are enabled, expensive operations such as MIME parsing and file extraction are performed only once per email and reused across scripts.
  • Improved error handling and diagnostics – Scripts can now log warnings without interrupting processing or raise controlled errors when necessary, improving robustness and auditability.
2

Bundled Configurable Python Investigation Scripts

Aid4Mail now bundles a curated set of production-ready Python scripts designed for common forensic, eDiscovery, security, and compliance workflows. These scripts leverage the redesigned Python scripting framework and can be used immediately without additional development.

Each bundled script includes a dedicated PDF user guide, accessible directly from Aid4Mail by selecting the script in the Python modifier script or Custom script filtering list and clicking the Info button. Script behavior can be adjusted through a shared ScriptSettings.ini file.

Attachment Risk Scoring

Calculates weighted risk scores based on attachment characteristics associated with malware, phishing, or policy violations.

Concordance Load File Generator

Generates industry-standard DAT and OPT load files for importing into Concordance, Summation, and compatible platforms.

Email Authentication Verification

Analyzes SPF, DKIM, and DMARC results to assess email authenticity and identify potentially spoofed messages.

Email Content Sanitizer

Programmatically removes or anonymizes sensitive content for disclosure, privacy compliance, or controlled evidence sharing.

Evidence Integrity Verification

Produces cryptographic integrity manifests with hashes, timestamps, and optional signatures for chain-of-custody.

Structured Entity Extraction

Identifies and catalogs structured entities (financial identifiers, personal data, technical indicators) found within email content.

Language and Region Tagger

Detects the primary language and organizes messages into language-specific folders with optional regional variant detection.

Language Anomaly Detection

Flags emails exhibiting linguistic patterns associated with phishing, BEC, or social-engineering attacks.

Relationship Mapper

Generates graph data representing communication networks for import into visualization and link-analysis tools.

Timeline Activity Summary

Produces aggregated reports revealing temporal communication patterns, anomalies, and after-hours activity.

These scripts provide immediate, configurable automation for many investigative scenarios, while also serving as reference implementations for users who wish to develop their own custom Python workflows.

3

AI-Assisted Script Creation for Non-Programmers

Aid4Mail significantly lowers the barrier to entry for Python scripting. Users without prior programming experience can now create custom scripts using Fookes Software’s public GPT, available through OpenAI’s ChatGPT platform:

This AI assistant is trained specifically on Aid4Mail’s Python scripting framework, variable syntax, and forensic requirements. Users can describe their needs in plain language—such as filtering logic, data extraction tasks, or custom reporting—and receive production-ready Python scripts that are immediately usable in Aid4Mail.

This capability makes advanced, case-specific automation accessible to a much broader audience, while still meeting the technical and evidentiary standards required for forensic and eDiscovery work.

For full details, examples, and migration guidance, refer to the updated Python scripts section in the Aid4Mail User Guide.

4

Redesigned AI Configuration System

Aid4Mail introduces a new modular AI configuration system that makes it significantly easier to configure and maintain cloud-based enterprise AI platforms as well as offline and locally hosted models.

AI providers and models are now defined using self-contained configuration files, with clear and predictable override rules. This design simplifies setup, improves reliability, and ensures that existing and retired models continue to function without disruption. The new system also enables cleaner configuration of regional endpoints, custom APIs, and endpoint-based local AI deployments, with the user interface adapting automatically to each provider’s requirements.

Aid4Mail adds ready-to-use configurations for Amazon Bedrock, Google Vertex, Microsoft Foundry, and offline models via Ollama and LM Studio.

In parallel, the built-in system prompts have been fine-tuned to improve the accuracy of AI analysis and the validation of user-defined prompts. We have also reviewed and refined all 212 bundled AI prompts, improving clarity, consistency, and output quality across analysis, classification, and filtering tasks.

5

Improved Personal Email Detection

Significantly enhanced detection of personal emails through the Personal flag, used in conjunction with the Type search operator. An email is considered personal when it is neither automated nor system-generated (e.g., notifications, receipts, confirmations), nor bulk-distributed (e.g., marketing, newsletters, social media alerts, product or policy updates, spam, malware), and does not originate from a no-reply address.

To include only personal mail in your filter query:

Type:Personal

To exclude personal mail:

NOT Type:Personal

In internal testing on a business account, the Type:Personal query alone filtered out 91.7% of non-personal emails.

6

Added Windows Sleep and Restart Controls

Aid4Mail now explicitly notifies Windows when it is running active processing tasks. This prevents the system from entering sleep or hibernation modes and from automatically rebooting after Windows Updates until all Aid4Mail sessions have completed. This improvement reduces the risk of interrupted collections and ensures greater reliability during long-running or unattended processing jobs.

Note: This protection applies only while individual processing sessions are running. When no session is active, or in the brief interval between consecutive sessions, Windows may still enter sleep or hibernation according to system power settings.

7

Component Updates

  • Updated Aspose.Email for .NET to version 26.1
  • Updated PCRE2 to version 10.47, which introduces a significant enhancement to recursive subpatterns.
  • Updated Xpdf command line tool to version 4.06 for enhanced PDF file format support.
  • Updated ExifTool to version 13.49, ensuring support for the latest metadata standards.
8

Minor Fixes and Improvements

Resolved minor issues and implemented several improvements to the UI and consoles.

9

Security & Compliance

Aid4Mail has successfully completed Google’s CASA Tier 2 recertification, including independent SAST scanning and security assessment review. This annual certification is required for applications accessing restricted Google API scopes (Gmail and Google Drive) and validates Aid4Mail’s adherence to Google’s security standards.

Version 6.1.7

Released: November 25, 2025
1

AI Information in Progress Log

Aid4Mail now records detailed AI-related information—including task type, model name, and prompt—directly in the session progress log whenever AI is used. These additions strengthen auditability and chain of custody, ensuring clear, defensible documentation of AI-assisted processing for legal, regulatory, and investigative workflows.

2

Enhanced Progress Reporting

Improved progress tracking, speed calculation, and duration estimates, particularly when using pre-acquisition filtering. These refinements make job monitoring more accurate and responsive, especially in large-scale or long-running collections.

3

Updated Python DLL Wrapper

The internal Python DLL wrapper has been updated for full compatibility with the latest Python releases.

4

Updated ExifTool Utility

Updated the bundled ExifTool.exe to the latest version, providing improved metadata extraction and broader file format support across all processing and export workflows.

5

Updated HTTPS and TLS Libraries

Updated internal third-party libraries that underpin Aid4Mail's HTTPS communication layer, delivering improved performance and enhanced support for TLS 1.3. These upgrades strengthen security, increase protocol compatibility, and ensure robust, standards-aligned network communication during email collection and cloud service access.

Version 6.1.6

Released: November 6, 2025
1

New AI Models

Expanded support for the latest AI models including Claude Sonnet 4.5, Grok 4, and GPT-5, enhancing flexibility for classification, filtering, and analysis. This update ensures Aid4Mail remains compatible with current releases from major AI providers.

2

Improved Anthropic Model Handling

Improved retrieval of classification responses from Anthropic models, ensuring more consistent and reliable AI output during automated analysis and filtering tasks.

3

Fixed Anthropic Model Visibility Regression

Resolved a regression that caused Anthropic models to be hidden from the Classify and Analyze drop-down lists under Project Settings ▸ AI. All compatible models now display correctly.

4

Fixed AI API Key Saving Regression

Corrected a regression that prevented Aid4Mail from saving AI API keys in newly created session settings. This fix ensures AI configurations are properly stored and applied across all sessions.

5

Fixed mbox File Creation Regression

Fixed a regression affecting the creation of mbox files. These were previously saved as individual message files instead of being added to the target mbox file. This correction restores proper mbox file generation and ensures full compatibility with standard mbox-based workflows.

Version 6.1.5

Released: September 22, 2025
1

IMAP Rate Limit Handling

Improved IMAP collection when encountering a server-imposed rate limit. Aid4Mail now automatically retries multiple times within an hour. If the rate limit is still in effect after that period, Aid4Mail aborts processing to prevent indefinite hangs.

2

Yahoo/AOL Large Folder Fix

Resolved an issue affecting Yahoo and AOL folders with more than 100,000 emails. Under certain conditions, Aid4Mail could stall while retrieving email IDs during the pre-collection phase. This issue has been corrected, ensuring smooth processing of very large folders.

3

HTML Email Viewer Fixes

Two important fixes for the HTML Email Viewer:

  • Fixed a regression in the Tag search operator, which was no longer working.
  • Corrected a sorting bug where sorting was lost after selecting a folder from the drop-down list.
4

Minor Fixes and Improvements

Resolved a rare issue that could affect email collection from specific IMAP servers. Also includes several other minor fixes and improvements to the UI.

Version 6.1.4

Released: September 5, 2025
1

Email Recovery Enhancements

Added the ability to recover unpurged (double-deleted) emails directly from PST (without Outlook) and OST files—expanding recovery options for forensic and investigative workflows.

2

Component Updates

Security Fix: Updated PCRE2 to version 10.46, including a security fix (CVE-2025-58050) that prevents a potential read-past-the-end memory error.

The issue requires an attacker-controlled regex pattern and cannot be triggered through crafted subject text. It specifically affects patterns that use (*ACCEPT) and (*scs:) together—patterns that have never been used within Aid4Mail.

  • Updated 7-Zip DLLs to version 25.01 for enhanced archive handling and security.
  • Updated ExifTool to version 13.34, ensuring support for the latest metadata standards.
3

Updated User Guide

The Aid4Mail User Guide has been revised to reflect these new features and updates.

Version 6.1.3

Released: July 29, 2025
1

UI Improvements

Refinements to the user interface for a more polished and intuitive experience. Updates include more harmonious color themes, improved label clarity in the Filter section, and general usability enhancements.

2

Minor Fixes

Various small bug fixes to improve overall stability and performance.

3

Updated User Guide

The Aid4Mail User Guide has been updated to reflect recent feature enhancements.

Version 6.1.2

Released: July 1, 2025
1

Multi-User Execution Fix

Resolved a recent regression that prevented Aid4Mail from running under multiple Windows accounts on the same server, PC, or virtual machine. This fix restores full multi-user compatibility in shared environments.

2

Yahoo/AOL Search Cap Limit Fix

Addressed an issue with Yahoo! Mail and AOL accounts that limited native pre-acquisition filtering to a maximum of 1,000 results per folder. Aid4Mail now dynamically adjusts the search range to retrieve additional emails—ensuring more complete collections during investigations.

3

Folder Mapping Fix for Google Takeout

Fixed an issue affecting folder mapping during migrations from Google Takeout to a live account when the "Map folders" option is enabled. Folder structures are now preserved correctly in the destination environment.

4

AI Prompt Enhancements

Added further refinements to Aid4Mail’s built-in AI prompts for filtering, classification, and analysis. Improvements include clearer phrasing, tighter structure, and better examples.

Version 6.1.1

Released: June 12, 2025
1

Aid4Mail Email Viewer

The Email Viewer now supports fielded search syntax, enabling precise, targeted searches across specific email properties.

Example searches:

from:alice | to:legal@company.com | date:2025-06 | from:john subject:invoice -has:attachment

A new sandbox toggle gives you control over email preview security based on your trust level with the content. The viewer displays clear visual warnings when sandboxing is off and remembers your preference for each email collection.

2

AI Prompts

Refined and expanded the collection of built-in AI prompts. Prompts have been rewritten for clarity, harmonized for consistency, and enriched with new examples—helping you get faster, more accurate results when classifying, filtering, or analyzing emails using AI.

Version 6.1.0

Released: June 6, 2025
1

New HTML Email Viewer

Aid4Mail 6.1 introduces the powerful new Aid4Mail Email Viewer—a modern, browser-based solution for reviewing exported emails. Designed for digital forensics, eDiscovery, and litigation professionals.

Key Features:

  • • Supports 50,000+ emails
  • • Virtual scrolling & instant search
  • • Fully responsive design
  • • Dark mode & keyboard navigation

Tagging System:

  • • Mark for follow-up or privilege
  • • Custom workflow tags
  • • Export/import tags
  • • Collaborative review
2

Microsoft 365 App-Only Access

IT administrators and investigators can grant Aid4Mail access to all mailboxes within an organization’s Microsoft 365 tenant—without needing per-user credentials or user interaction. This enables secure, centralized collection of email data at scale, ideal for enterprise investigations, compliance monitoring, and litigation holds.

3

Korean Hangul Support

Search content in .hwp and .hwpx formats created with Korean Hangul Word Processor.

4

Extended AI Models

Expanded support for AI providers including OpenAI, Vertex AI, and offline models like Qwen3.

5

Yahoo/AOL Bypass

Bypasses the 100,000-folder listing limit for complete data collection.

6

Enhanced MIH+

Extended EDRM Message Identification Hash with automatic generation for missing Message-IDs.

Version 6.0.0 - Major Release

The AI Revolution in Email Forensics

Released: March 17, 2025

1.AI Analysis - Industry First

Aid4Mail Investigator and Enterprise now harness advanced AI from leading providers like OpenAI, Anthropic, Google, and Mistral AI. This integration fundamentally enhances email analysis, allowing you to filter, classify, and analyze data faster and with greater accuracy than ever before.

Filtering

"Filter out spam, phishing attempts, and malware indicators"

Classification

"Classify by relevance to money laundering: Structuring, Layering, Suspicious"

Analysis

"Summarize key points, translate content, extract specific data"

Cost-Effective: Analyze a 5 GB mailbox (50,900 emails) in under 8 hours for less than $12

Offline AI Available: Run AI analysis entirely offline using locally hosted models for maximum security.

2.Cloud Attachments

Aid4Mail Investigator and Enterprise now support downloading linked attachments, including document revisions, from Google Drive and Microsoft OneDrive (Personal, Business, and SharePoint). All associated file metadata is stored and searchable.

Has:CloudAttachment | Has:GoogleDrive | Has:OneDrive | Has:SharePoint

3.OAuth Verification

Completed Google’s OAuth app verification for seamless Gmail and Google Drive integration.

4.JSON Export

New JSON format optimized for AI analysis with ChatGPT, Claude, and Gemini.

5.Email Migration

Converter and Investigator now support IMAP, Outlook Profile, and Gmail API as target formats.

6.Sample Search Lists

Pre-built search lists for common investigations: compliance, corruption, IP theft, harassment, and more.

Information for Aid4Mail 5 Users

Compatibility

Aid4Mail version 6 is backward-compatible with version 5.

Installation

Install version 6 alongside version 5 on the same machine without conflict.

Activation

Use your existing valid version 5 license credentials.

License Terms

Version 5 EULA terms apply when using v5 credentials.

Experience the Power of Aid4Mail 6

Start your free trial today and revolutionize your email forensics workflow with AI-powered analysis.