Email Files

---

Local storage archives are any archives that have an independent archive format from a mail server.

• e.g.,
  • .pst (Outlook)
  • .ost (Offline Outlook Storage)
  • .mbx or .dbx (Outlook Express)
  • .mbx (Eudora)
  • .emi (common to several email clients)
• this can be used as a separate set of email messages loaded in Outlook
  • criminal can load these only when commuting crimes
  • Viewing Outlook won’t show these if they’re not loaded
  • need to open the .pst data file in Outlook from the file system
• tools can be used to convert one email format to another
  • Transend Migrator
• email forensics tools
  • Paraben’s Email Examiner
  • Encase
  • Forensic Toolkit (FTK)
  • OSForensics
  • LibPST Package