Has anyone been able to find a quick way to parse out this information.
Its visible using encase as text but isn't laid out in a fashion that will make viewing or parsing out easy.
This file essentially replaces the .stg of previous versions. (best of my understanding)
Thanks
Hi,
Yes, I have a program that will extract the contents of the contacts.edb file, please email me at info@simplecarver.com if you would like a copy to play with.
It's due for release in SC Suite v3.4 along with a number of other new tools including
* Windows Vista Photo Gallery parser (Pictures.pd4)
* Media Player Player extractor (.wmdb)
* Windows 7 Sticky Notes Viewer/Extractor (*.snt)
More info
Regards,
Tim
Sounds interesting.
Email to you.
Warlock - did you get a copy of the program and did it work?
Tim, can I have a copy too? lol
Kajan
Tim when SC v 3.4 will be released?
I think EnCase can "View File Structure" on .edb
Not sure if this is the right foramt/version that is supported…
Not for these unfortunately nik, it'll "do" it, but will just add a subfolder of unallocated and no info.
That's unfortunate. I know it only supports a sub-set of the edb's and the ntds.dit.
On the other hand now we know that the header is consistent with an EDB
I'm out of ideas now, good luck
Hi brede
Version 3.4 will be released in July, I will send you an email on the day of release.
Thanks,
Tim
Hi,
The contacts.edb extractor has been released as part of SC Suite
For your information all tools on the site are sold for $95 per license. I also offer discounts to LE, Gov and CCE/IACIS members, you are welcome to email or PM for more information.
Thanks