Is there a way to retrive AIM messages? (for someone who does not have an AOL account… only AIM).
Just to let you guys know (if you didnt already) in EnCase 6 once you have run the email script if you check each highlighted email and then right click and "Export to*.msg" this will export all the emails recovered and you can then view them as plain text like an outlook message. I eventually went this route after trying the "copy the three relevant folders" option to no avail. 😯
Yes, I wrote all this before Encase had the capability for AOL email. It's still good to remember how to do things the old way though. Even now I'm working on a case where Encase is not parsing the AOL mail properly.
Hallo Everyone
Craig Wilson across at Digital Detective has software he has written for extracting AOL email messages from a PFC file and directly from Encase images.
I have been part of his beta testing team and it does a good job in recovering AOL email messages from all over an image including deleted messages from unallocated clusters. It is very good to be able to point it directly at an evidence file and have it recover all the messages. It also does Outlook Express emails as well and does a great task at placing all the attachments back together.
I think it is still being beta tested but the last time I emailed Graig he said it would be available soon.
He has also somehow managed to extract the fill date/time data from sent messages as well. Something some of the other tools do not seem to manage.
Kind regards Lars
Hi,
The best software to extract aol mails from disk including unallocated space is Netanalysis, email examiner (paraben) or hotpepper ?
Is EmlXtract belong to Netanalysis suite ?
BR
Sam