i have a case that someone changed company bank account with fake mail and trasfered to fake bank account. we have 2 suspect person and we acquired their laptops. my problem laptops was formatted i recover them r-studio because in my opinion is best r-studio found 54 pst files with 50gb file size from other partitions and raw recovery vs.
problem is parse them
i tried kernel pst recovery very good at parse corrupted files but when there is big data it is very slow and so bad for reporting
i tried paraben email examiner good for reporting slightly good at corrupted files and frequently crashing
is there another solution about this situations
Nightworker,
A couple of options for you
1. OSForensics by Passmark (http//osforensics.com/) @ $499.00
OSForensics has a fully functioning email review tool built in that can index and search Outlook PST files
2. ProofFinder by Nuix (http//
ProofFinder can index and search Outlook PST files. Each case is limited to 15GB (uncompressed) so you would have to break up your project into many multiple different databases.
thaks for feedback
i tried os forensics recent activity tab is so great. timeline made my job efficent i want to say thanks passmark i havent tried email parse yet.
i will consider that softwares
Hey nightworker,
OS Forensics email viewer is indeed a suitable tool as per your requirement . It will help you to index and search within PSTs. Although , you can also try out Mailxaminer(interesting email forensic examination tool) . You can request them for a demo & also do brief them about your case. I believe it helps to extract data from corrupt PSTs , index and perform general/regular expression searches (I tested on 800 GB PST + EDB data files , worked just fine..). Also, it has a reporting platform for case specific/evidence specific report generation..
*Note This is just a Suggestion , you should personally evaluate the forensic utility first and then use it for your case..
Feel free to revert back for further queries.
~Shourjo