±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 35980
New Yesterday: 5 Visitors: 168

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Deleted Outlook accounts

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

wotsits
Senior Member
 

Deleted Outlook accounts

Post Posted: Jun 20, 15 16:04

If you have Windows Outlook installed on a computer and several email accounts set up receiving mail for a while then some of the email accounts get deleted, what effect will this have on the emails that had been downloaded? Would they also be deleted and if so what effect would this have on their data recovery?  
 
  

paraben
Member
 

Re: Deleted Outlook accounts

Post Posted: Jun 20, 15 20:21

It depends on how they had it configured. If every account was downloading into one PST file, you have a good chance of data recovery for a lot of the email using tools that recover deleted email from within PST files. When the accounts are deleted, if they are going into one PST file, the emails associated with those accounts are not deleted unless the user manually deleted them.

If they were all being downloaded to individual PST files, you will want to look for those PST files. If they were deleted, you would want to try to recover the entire PST files.  
 
  

Zul22
Senior Member
 

Re: Deleted Outlook accounts

Post Posted: Jun 23, 15 17:54

If they were deleted, you would want to try to recover the entire PST files.
That's true. Furthermore, every time that the mailbox was compressed, a new PST file is created and the previous one stays at desallocated space on the hard drive, until it is overwritten by something else. This means that each mailbox compression that occured gives you an additional chance to recover emails.  
 

Page 1 of 1