±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36632
New Yesterday: 7 Visitors: 144

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Collection - Exchange Database (Windows Backup File)

Discussion of legislation relating to computer forensics.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Kenmo
Member
 

Collection - Exchange Database (Windows Backup File)

Post Posted: May 07, 07 19:13

All - we've been asked to perform a data collection from an Exchange database that has been backed up to a Windows backup file. There are (2) 50 GB backup files that we'll need to restore and be able to perform keyword, boolean searches with date ranges and possibly few custodians. Is there a way, without restoring an entire Exchange environment with AD etc, to get into this database and search for emails related to our case?

Kris  
 
  

chris2792
Member
 

Re: Collection - Exchange Database (Windows Backup File)

Post Posted: May 07, 07 21:06

I've never tried it but Encase v6 should be able to read the *.edb files.  
 
  

mark777
Senior Member
 

Re: Collection - Exchange Database (Windows Backup File)

Post Posted: May 07, 07 22:01

We use paraben network e mail examiner. Just load the EDB files and your thwere.
_________________
Mark 
 

Page 1 of 1