Hi All,
I was wondering if one of you could point me in the right direction with this problem I am having with the windows.edb file.
I have found some keyword hits within this file that relate to a web address of importance. I have used some of the tools available to interpret this database such as "simplecarver suite", "EseDbViwer", "Windows Search Index Analyser". Once I have got the results in a csv file I have searched them for this web address but have found no hits at all.
Is it possible it is not showing as they maybe deleted records? Also is there any way to manually parse these entries within the windows.edb file?
I hope I have not confused anyone with this, if you need any further details, please ask?
Your help will be much appreciated!
Thanks
Try the libesedb project as it performs raw binary parsing of the ESE format, where as the tools you have mentioned use the API to extract data.
http//
Thanks Woany, will give that a bash!