Email recover parse...
 
Notifications
Clear all

Email recover parse report

4 Posts
3 Users
0 Likes
213 Views
nightworker
(@nightworker)
Posts: 134
Estimable Member
Topic starter
 

i have a case that someone changed company bank account with fake mail and trasfered to fake bank account. we have 2 suspect person and we acquired their laptops. my problem laptops was formatted i recover them r-studio because in my opinion is best r-studio found 54 pst files with 50gb file size from other partitions and raw recovery vs.

problem is parse them
i tried kernel pst recovery very good at parse corrupted files but when there is big data it is very slow and so bad for reporting

i tried paraben email examiner good for reporting slightly good at corrupted files and frequently crashing

is there another solution about this situations

 
Posted : 29/07/2015 4:00 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

Nightworker,

A couple of options for you

1. OSForensics by Passmark (http//osforensics.com/) @ $499.00

OSForensics has a fully functioning email review tool built in that can index and search Outlook PST files

2. ProofFinder by Nuix (http//www.prooffinder.com/) @ $100.00

ProofFinder can index and search Outlook PST files. Each case is limited to 15GB (uncompressed) so you would have to break up your project into many multiple different databases.

 
Posted : 29/07/2015 8:40 pm
nightworker
(@nightworker)
Posts: 134
Estimable Member
Topic starter
 

thaks for feedback

i tried os forensics recent activity tab is so great. timeline made my job efficent i want to say thanks passmark i havent tried email parse yet.

i will consider that softwares

 
Posted : 30/07/2015 1:06 pm
Shourjo
(@shourjo)
Posts: 14
Active Member
 

Hey nightworker,

OS Forensics email viewer is indeed a suitable tool as per your requirement . It will help you to index and search within PSTs. Although , you can also try out Mailxaminer(interesting email forensic examination tool) . You can request them for a demo & also do brief them about your case. I believe it helps to extract data from corrupt PSTs , index and perform general/regular expression searches (I tested on 800 GB PST + EDB data files , worked just fine..). Also, it has a reporting platform for case specific/evidence specific report generation..

*Note This is just a Suggestion , you should personally evaluate the forensic utility first and then use it for your case..

Feel free to revert back for further queries.

~Shourjo

 
Posted : 24/08/2015 12:13 pm
Share: