Hi All,
I have worked both on FTK 2.0 and 2.2 and I have noticed very important thing!
I was loading a PST file in FTK 2.0 and the search results were accurate (it looked inside .msg files).
The same way I loaded the same PST’s in FTK2.2 and it dint look inside the PST for emails! Initially I thought that it might not look into it if I don’t create an image. So I loaded the PST's image file, but again the same problem. FTK 2.2 dint look for the emails in the PST.
Can anyone tell me why this happens?? Or where I went wrong??
Thanks in Advance
Sudha )
Hi Sudha,
Its probably a good idea to post this to the AccessData forums as well as on here (http//forums.accessdata.com). I saw something similar on there yesterday where the individual mail messages in a PST were not getting hashed in 2.2 - there is no answers as yet but the AD people there might be able to help.
Sudha,
Make sure you select "Expand Compound Files" under additional analysis. That may be causing your issue