Get macfor Pro

Pro plugin

Apple Mail

Collects Apple Mail.app artifacts including message metadata, EMLX files, account configuration, and AI categorization

mail.applePromacOS 10.12+v1.0.0communicationuseremail

Run this plugin

Trigger collection for Apple Mail on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin mail.apple --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin mail.apple --dry-run

Compatibility

  • macOS 10.12+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Artifacts (4 collected)

Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optionalartifacts are often absent, and their absence isn't recorded as an error. Plannedartifacts are documented locations the plugin doesn't collect yet. Where a path shows a version range, macfor only tries it when the source's macOS or application version is in that range.

email

ArtifactFormatPathNotes
Envelope Index Database
envelope_index
sqlite~/Library/Mail/V10/MailData/Envelope IndexmacOS 10.15+
+4 more
  • ~/Library/Mail/V6/MailData/Envelope IndexmacOS 10.14–10.14
  • ~/Library/Mail/V5/MailData/Envelope IndexmacOS 10.13–10.13
  • ~/Library/Mail/V3/MailData/Envelope IndexmacOS 10.11–10.12
  • ~/Library/Mail/V2/MailData/Envelope IndexmacOS 10.7–10.10
—
EMLX Message Files
emlx_messagesOptional
text~/Library/Mail/V*/**/*.emlx—
Accounts Database
accounts_databaseOptional
sqlite~/Library/Accounts/Accounts4.sqlite—
Apple Intelligence Categorization
intelligenceOptional
sqlite~/Library/Mail/V10/MailData/Envelope IndexmacOS 15.0+—