Tool Refines Searching Criteria
Microsoft Outlook Forensics software delivers variety of searching techniques to forensic investigators for accumulating law proves from suspected PST file. If simple searching process does not gives a precised result then, software equips certain criterion for refining and filtering information, as per demand. The product offers a Super Grid data filtering option to implement specific keyword searching without using the search option of software. Besides this, different searching provisions are equipped by PST analysis tool like time line analysis of search result, searching within subset, link findings of search result, etc. These techniques help in streamlining the result more close towards the accurate searches.
Analyze PST With Different Views
In order to make the case more stronger, Outlook forensic software extracts each mail with their metadata properties, header part, content, and its format from a mass of PST file emails, loaded in variety of forensic views.
1. Conversation View : Two switching modes i.e., normal and conversation, are provided by this PST analysis tool. All the emails will listed in normal mode and in conversation mode, messages will be managed for making email context easy to understand
2. Preview An Email : Right-click on an individual email message and select preview option to analyze suspected mail in different modes like Hex, header, HTML, RTF, etc. Attachments of each email can also be tracked with this MS Outlook forensic tool.
PST File Forensics in Bulk Mode
The application enables investigation team to simultaneously browse multiple Outlook storage files to perform forensic upon them. One just need to add source files under Bulk Mode and then, can either add one PST file or a complete folder (having multiple PST files) within it. Outlook forensic software is strong enough to manage numerous .pst files and deeply performing scanning on them. It renders tracing of present inculpatory evidences and hence, originating smoking guns for investigators. Another interesting fact of this tool is that it supports corrupted as well as damaged PST files for collecting law proves. Apart from this, permanently deleted emails / folders can also be recovered, which might prove themselves essential while analysis.
Equips Variety of Export Options
The major aspect of eDiscovery procedure is the Production phase because it involves presentation of gathered evidences in the court. Therefore, this Outlook.pst forensic software provides its clients with an alternative to import evidence emails into anyone of the rendered file formats i.e., PDF, HTML, HTML, EML, MSG, PST, TIFF, etc. The tool does not requires Outlook installation for exporting messages and provides an option to separately save email header part in CSV file format. Apart from this, users can take out the hard copy of email message for documentation purpose, by using Print option provided in our PST forensic tool. It is 100% assured that email integrity will be maintained throughout the file saving procedure.
You have to create a new case file either by clicking on New Case option or going to File >> New Case
Fill up all the required details on current New case window and then, click on Add button
The case will successfully be added into directory click on OK to start the investigation
Click on Add Evidence button to browse the Outlook file on which investigation is to be performed.
Select the Microsoft Outlook (*.pst) option from the File tab
Hit on Browse button for adding one or more source PST files
Software offers following three options in bulk mode:
You can equip our Outlook Forensics software with login information for the password-protected files. If they are not encrypted then, generate your login credential with security credentials
At last, click on Add button to load start the scanning of PST files
You will now be able to track the current email file status with attributes like Mail count, file count, and file size in GB
Add a searching string to fetch information, which is suitable for keywords that are to be searched with logical operators and on basis of certain criteria.
You can utilize all logical operators like AND, OR, and NOT to filter the searching procedure:
Make use of more advance searching options provided in this Outlook forensics tool where you can customize the process by doing searching in between Subject and To attribute of emails.
In general, the mentioned keyword will be searched under specified criteria. Whereas, you can use any one of the two wildcard scenarios i.e., Asterisk (*) and Question Mark (?).
Based upon the combination of certain formats, you are free to perform general searching in our PST forensics software
This product is equipping an advance search type i.e., Stem search. This will be useful for those investigators who are not sure about few words
g) Outlook PST file forensics requires a deep researching of each and every email, till its root end. Therefore, another searching type named as Fuzzy search is rendered to encounter all the searching results, which are approximate and nearest to the provided data.
In order to make modifications in created case, you can utilize Edit Case option for making changes
Select all those emails from preview wizard, which you want to export and then perform right-click operation
Choose anyone of the listed export options and then, click on Browse button
Determine the location where you want to store exported files and hit on OK
Click on Change button from Export options wizard and then, select Naming Convention tab to alter the name of resultant files
After making all the desired settings, click on OK button and then view live exporting status in front of you
Once the procedure gets finished, a pop-up message window will appear in which you have to click on OK button for confirmation
An Export window will appear where you will find total number of exported items with their Success count and failed count. If you want to save this report then, click on Export to CSV button
Browse towards the location where you want to save .csv file, mention the name of that file, and click on Save button
A confirmation message window will appear from which you will come to know that CSV file is successfully created
"The performance of Outlook.pst forensics tool and its features are really stunning. It can be considered as an all-in-one product where all facilities to accomplish investigation is performed. The searching techniques are brilliant and talking about interface then, it is very easy to understand the working of product without any hassle."
-- Tommy Tucker, Saudi Arabia
"It used to be a challenge for me to perform forensics on PST file, manually. One of my teammate recommended me to operate this product and I did the same. The software is really of great help! What I found the best in it is the searching techniques. Thanks a lot to the developers who created such intelligent Outlook forensics software in the market!"
-- Mamie Thompson, Japan