Paraben Email Exami...
 
Notifications
Clear all

Paraben Email Examiner

3 Posts
3 Users
0 Likes
454 Views
(@pbeardmore)
Posts: 289
Reputable Member
Topic starter
 

Has anyone experienced problems with this software missing attachments within PST files?
We have a case where both FTK1 and software from GetData has found around 10 attachments from deleted e-mails which are key to the case but Email Examiner reports no attachments from any of the emails.

 
Posted : 15/01/2010 6:19 pm
(@douglasbrush)
Posts: 812
Prominent Member
 

I have had it not read PST properly or not at all where EnCase does.

What is the environment? VM, exported pst's, mounted image, were they deleted PST files?

Try to run PST repair (document your steps!) http//office.microsoft.com/en-us/outlook/ha010563001033.aspx

Run EE on the files - export your EML's with attachments. Run the pstrepair, run EE again and export EML's and attachments again. De-dupe and check for items that are missed. If it still does not work it can just be something that EE might be having a problem parsing. What other programs have you run on the PSTs?

 
Posted : 15/01/2010 8:04 pm
(@forensicakb)
Posts: 316
Reputable Member
 

You should email Paraben with that issue.

I have not had any issues like you are describing.

 
Posted : 15/01/2010 10:29 pm
Share: