Forensic Focus - General Discussion - MS Outlook connected e-mail accounts

Posted: Fri Dec 16, 2011 5:13 am
Author: forgery Location: London
Hi Guys,

Unsure if this is really obvious but I've been unsuccessful so far in my search.

In Encase I have an XP machine with Outlook installed and I want to find out what e-mail accounts it has connected to receive from.

Could anybody point me in the right direction?

Many Thanks

Re: MS Outlook connected e-mail accounts

Posted: Fri Dec 16, 2011 8:06 am
Author: douglasbrush Location: New York, NY
What version of Office/Outlook?

Re: MS Outlook connected e-mail accounts

Posted: Mon Dec 19, 2011 3:12 am
Author: shep47 Location: Ely
VM it with some combination like LiveView and VMWare and look in the settings of Outlook?

Re: MS Outlook connected e-mail accounts

Posted: Mon Dec 19, 2011 8:46 am
Author: forgery Location: London
I has considered using VM, it just seemed a bit of an obvious approach and I figured those settings are obviously stored somewhere, searching just didn't find anything.

Re: MS Outlook connected e-mail accounts

Posted: Mon Dec 19, 2011 9:31 am
Author: douglasbrush Location: New York, NY

- douglasbrush

What version of Office/Outlook?

It matters....

Re: MS Outlook connected e-mail accounts

Posted: Tue Dec 20, 2011 2:07 pm
Author: forgery Location: London
Hey, sorry for the slow reply regarding this. Outlook 2000

Re: MS Outlook connected e-mail accounts

Posted: Tue Dec 20, 2011 6:15 pm
Author: BitHead Location: Western - US
HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\

HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\Windows Message
Subsystem\Profiles\<subjectprofilename>

will both contain some of the account information for Outlook 2000.

All times are GMT - 6 Hours
Page 1 of 1
http://www.forensicfocus.com/