Paraben Email Exami...
 
Notifications
Clear all

Paraben Email Examiner

3 Posts
3 Users
0 Reactions
655 Views
(@pbeardmore)
Reputable Member
Joined: 18 years ago
Posts: 289
Topic starter  

Has anyone experienced problems with this software missing attachments within PST files?
We have a case where both FTK1 and software from GetData has found around 10 attachments from deleted e-mails which are key to the case but Email Examiner reports no attachments from any of the emails.


   
Quote
(@douglasbrush)
Prominent Member
Joined: 16 years ago
Posts: 812
 

I have had it not read PST properly or not at all where EnCase does.

What is the environment? VM, exported pst's, mounted image, were they deleted PST files?

Try to run PST repair (document your steps!) http//office.microsoft.com/en-us/outlook/ha010563001033.aspx

Run EE on the files - export your EML's with attachments. Run the pstrepair, run EE again and export EML's and attachments again. De-dupe and check for items that are missed. If it still does not work it can just be something that EE might be having a problem parsing. What other programs have you run on the PSTs?


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
 

You should email Paraben with that issue.

I have not had any issues like you are describing.


   
ReplyQuote
Share: