Email messages can be a goldmine of digital evidence both in criminal and corporate investigations. Oxygen Forensic® Detective enables email data extraction from mobile devices, computers, and from the cloud. Overall, utilizing various extraction methods, investigators can extract the following email apps:
- Microsoft Outlook
- Mozilla Thunderbird
- Google Mail
- SecMail
- ProtonMail
- QQ Mail
- sz
Learn more about supported email services in Oxygen Forensic® Detective.
Oxygen Forensic® Detective v.15.1 added support for a new email data source. Now investigators can import and analyze Microsoft Outlook Data Files of .pst and .ost formats.
Table of Contents
- Type of Microsoft Outlook Data Files
- Analysis of Microsoft Outlook Data Files in Oxygen Forensic® Detective
Type of Microsoft Outlook Data Files
Microsoft Outlook stores a local copy of downloaded and synchronized emails on a user’s computer. POP accounts store their information in Outlook Data Files (.pst files) while Outlook 365 accounts, Exchange accounts, IMAP accounts, and Outlook.com accounts store it in Offline Outlook Data Files (.ost files).
Outlook Data Files (.pst) created by Outlook 2013 or Outlook 2016 are in the DocumentsOutlook Files folder. If a user upgraded to Outlook on a computer that already had data files that were created in Microsoft Office Outlook 2007 or earlier, these files are saved in a hidden folder UsersuserAppDataLocalMicrosoftOutlook. Outlook Data Files contain messages as well as contacts, calendar data, and tasks.
Offline Outlook Data Files (.ost) are located at: drive:UsersuserAppDataLocalMicrosoftOutlook.
Most data may remain on the server, so investigators will have only synchronized items in an Offline Outlook Data File.
Analysis of Microsoft Outlook Data Files in Oxygen Forensic® Detective
To import Microsoft Outlook Data Files, click the relevant option under “Desktop data” on the software Home screen and follow the instructions of the “Import Wizard”.
Once data is parsed, investigators will be able to analyze it in Oxygen Forensic® Detective.
Get more from Oxygen Forensic® Detective
At Oxygen Forensics our solution is updated multiple times every year. We offer training courses and webinars that will help you learn the ins and outs of Oxygen Forensic® Detective and stay up to date on new features and tools needed for your investigation. Returning customer? Sign up for our newsletter to stay in the loop.
Don’t have Oxygen Forensic® Detective and want to try it out? Request a free-trial.