24/7/365 · 15-minute response

· Australia & New Zealand

Responders on call now

Software · BECRIP

Microsoft 365 email fraud forensics, on your desk.

BECRIP is forensic software for Microsoft 365 business email compromise. It turns Microsoft 365 evidence into a clear, QA-checked record of attacker activity in hours, not weeks. It runs locally on Windows and macOS, so your case data stays with you.

Request a demoHow it handles your data

Platform

Desktop app for Windows and macOS

Focus

Microsoft 365 email fraud

Your data

Processed locally, never uploaded

Built by

Authene incident responders

Why we built it

Email fraud investigations take too long.

Working out what an attacker did inside a mailbox means reviewing large volumes of Microsoft 365 records by hand. It’s slow, easy to get wrong and hard to explain. BECRIP gives the same investigation a consistent, checkable result, faster.

What it does

From raw records to a clear answer.

Six capabilities that work together on every case.

Audit log analysis

Brings Microsoft 365 activity records together into one consistent view.

Threat detection

Flags activity that matches common email fraud patterns.

Sign-in analysis

Separates unusual sign-ins from everyday use.

Email analysis

Identifies suspicious messages and the conversations they touched.

Timeline

Builds a clear chronology of attacker activity.

Evidence record

Produces a QA-checked record you can report from and stand behind.

How a case runs

Evidence in, record out.

Ingest

Load the Microsoft 365 evidence for the case.

Detect

Surface activity that matches email fraud patterns.

Analyse

Review sign-ins, messages and mailbox activity together.

Scope

Separate attacker activity from normal use.

Report

Produce a QA-checked evidence record.

Who uses it

Built for investigators.

  • Internal security teams
  • Managed service providers
  • Digital forensics and incident response firms
  • Authene’s own responders

What you get

Output you can stand behind.

  • A chronology of attacker activity
  • A clear view of affected mailboxes and messages
  • A QA-checked evidence record
  • Output you can report from

BECRIP

See it on a sample case.

We’ll walk you through a sample investigation and answer your questions about fit and setup.

Request a demoEmail us