Software · BECRIP
Microsoft 365 email fraud forensics, on your desk.
BECRIP is forensic software for Microsoft 365 business email compromise. It turns Microsoft 365 evidence into a clear, QA-checked record of attacker activity in hours, not weeks. It runs locally on Windows and macOS, so your case data stays with you.
Platform
Desktop app for Windows and macOS
Focus
Microsoft 365 email fraud
Your data
Processed locally, never uploaded
Built by
Authene incident responders
Why we built it
Email fraud investigations take too long.
Working out what an attacker did inside a mailbox means reviewing large volumes of Microsoft 365 records by hand. It’s slow, easy to get wrong and hard to explain. BECRIP gives the same investigation a consistent, checkable result, faster.
What it does
From raw records to a clear answer.
Six capabilities that work together on every case.
Audit log analysis
Brings Microsoft 365 activity records together into one consistent view.
Threat detection
Flags activity that matches common email fraud patterns.
Sign-in analysis
Separates unusual sign-ins from everyday use.
Email analysis
Identifies suspicious messages and the conversations they touched.
Timeline
Builds a clear chronology of attacker activity.
Evidence record
Produces a QA-checked record you can report from and stand behind.
How a case runs
Evidence in, record out.
Ingest
Load the Microsoft 365 evidence for the case.
Detect
Surface activity that matches email fraud patterns.
Analyse
Review sign-ins, messages and mailbox activity together.
Scope
Separate attacker activity from normal use.
Report
Produce a QA-checked evidence record.
Who uses it
Built for investigators.
- Internal security teams
- Managed service providers
- Digital forensics and incident response firms
- Authene’s own responders
What you get
Output you can stand behind.
- A chronology of attacker activity
- A clear view of affected mailboxes and messages
- A QA-checked evidence record
- Output you can report from
More about BECRIP
Next steps.
BECRIP
See it on a sample case.
We’ll walk you through a sample investigation and answer your questions about fit and setup.