Email recover parse...
Clear all

Email recover parse report

Active Member

i have a case that someone changed company bank account with fake mail and trasfered to fake bank account. we have 2 suspect person and we acquired their laptops. my problem laptops was formatted i recover them r-studio because in my opinion is best r-studio found 54 pst files with 50gb file size from other partitions and raw recovery vs.

problem is parse them
i tried kernel pst recovery very good at parse corrupted files but when there is big data it is very slow and so bad for reporting

i tried paraben email examiner good for reporting slightly good at corrupted files and frequently crashing

is there another solution about this situations

Topic starter Posted : 29/07/2015 5:00 pm
Senior Member


A couple of options for you

1. OSForensics by Passmark (http// @ $499.00

OSForensics has a fully functioning email review tool built in that can index and search Outlook PST files

2. ProofFinder by Nuix (http// @ $100.00

ProofFinder can index and search Outlook PST files. Each case is limited to 15GB (uncompressed) so you would have to break up your project into many multiple different databases.

Posted : 29/07/2015 9:40 pm
Active Member

thaks for feedback

i tried os forensics recent activity tab is so great. timeline made my job efficent i want to say thanks passmark i havent tried email parse yet.

i will consider that softwares

Topic starter Posted : 30/07/2015 2:06 pm
New Member

Hey nightworker,

OS Forensics email viewer is indeed a suitable tool as per your requirement . It will help you to index and search within PSTs. Although , you can also try out Mailxaminer(interesting email forensic examination tool) . You can request them for a demo & also do brief them about your case. I believe it helps to extract data from corrupt PSTs , index and perform general/regular expression searches (I tested on 800 GB PST + EDB data files , worked just fine..). Also, it has a reporting platform for case specific/evidence specific report generation..

*Note This is just a Suggestion , you should personally evaluate the forensic utility first and then use it for your case..

Feel free to revert back for further queries.


Posted : 24/08/2015 1:13 pm