Join Us!

Paraben Email Exami...
 
Notifications
Clear all

Paraben Email Examiner  

  RSS
pbeardmore
(@pbeardmore)
Active Member

Has anyone experienced problems with this software missing attachments within PST files?
We have a case where both FTK1 and software from GetData has found around 10 attachments from deleted e-mails which are key to the case but Email Examiner reports no attachments from any of the emails.

Quote
Posted : 15/01/2010 5:19 pm
douglasbrush
(@douglasbrush)
Senior Member

I have had it not read PST properly or not at all where EnCase does.

What is the environment? VM, exported pst's, mounted image, were they deleted PST files?

Try to run PST repair (document your steps!) http//office.microsoft.com/en-us/outlook/ha010563001033.aspx

Run EE on the files - export your EML's with attachments. Run the pstrepair, run EE again and export EML's and attachments again. De-dupe and check for items that are missed. If it still does not work it can just be something that EE might be having a problem parsing. What other programs have you run on the PSTs?

ReplyQuote
Posted : 15/01/2010 7:04 pm
forensicakb
(@forensicakb)
Active Member

You should email Paraben with that issue.

I have not had any issues like you are describing.

ReplyQuote
Posted : 15/01/2010 9:29 pm
Share: