We released the initial version of Obliterator in 2019 to help one of our clients with a mailbox remediation project. We updated it several times after that, but ultimately, Obliterator 1 fell behind compared to what Forensic Email Collector (FEC) has been able to do on the forensic preservation side.
We are excited to announce Obliterator v3, geared toward enterprise remediation. During the design of v3, our goal was to go beyond mailbox remediation, and also cover the remediation of cloud files such as those in Google Drive, OneDrive, and SharePoint. With v3, Obliterator is virtually on par with FEC in terms of provider support, and is designed from the ground up for resilient and scalable remediation and detailed reporting. And, it’s still free to boot!
What’s New
Here are the highlights by category:
Architecture
- Obliterator 3 is driven from the command line, and lends itself very well to automation.
- It is designed for batch remediation with multiple targets.
- Similar to FEC, Obliterator now maintains a project database to keep track of the remediation, and resume it at any time.
- Detailed protocol logs are output for IMAP and EWS remediations.
- Distributed as a single file executable with no installation.
- Built-in remediation verification, and detection of items that were already absent during remediation.
- (Very) detailed reporting.
Authentication
Similar to FEC, Obliterator now supports Google domain-wide delegation of authority, M365 App-only Authentication (including certificate-based authentication), Exchange impersonation, and modern authentication for major IMAP providers such as Yahoo / AOL.
Provider Support
Obliterator now supports the following:
- Microsoft Graph API (emails, OneDrive, SharePoint)
- EWS (on-prem Exchange & M365)
- IMAP
- Gmail API
- Google Drive API
- Azure Sovereign Clouds such as GCC High
Where to Start
If you are interested in using Obliterator, we recommend starting with its documentation. You can find its changelog here to keep up to date with releases, and send us feature requests. As always, do not hesitate to contact us with questions and comments.