I'm using EnCase version 6.15. Does anyone know how to carve out GMail from either allocated or unallocated?
Thanks
Webmail/Browser based? Email Client? OS?
Need a bit more info…..
Greetings,
Gmail is very hard, nearly impossible, to carve out if it was being used via the web interface.
-David
Maybe this link will help
Try this http//
I was just trying to find out exactly the same thing! (I think that program assumes that you can find and export the messages as htm files)
You are correct about the gmailparser application. We had an instance where for whatever reason the browser had stored various artifacts on the hard disk.
Try Internet Evidence Finder (http//
One more vote for Jad's software, Internet Evidence Finder. If you want the previous version to test it out, PM me.