Forensic Evidence Recovery

1
Guide to Forensic Evidence Recovery
MailXaminer Email Investigation Tool Forensic
Recovery Utility

• Get Evidence from Corrupted Email Formats

2
Objective

• Digital Evidence Recovery
• How Forensic Toolkit Recover Email
• Investigate Email Evidence
• Forensic Toolkit - Export Email Evidence

3
Factors in which Forensic email Recovery depends

• Email evidence recovery depends on type of email
  environment used
• Email evidence are corrupted or healthy
• Individual email platform available or not
• How to investigate email evidence?
• How to manage email evidences?
• How to search cyber crime evidence scenes?
• Where to store cases?
• Which forensic recovery toolkit is best for
  digital evidence recovery?

4
Email Evidence Recovery Options

• Recover Multiple Platform Emails
• Support Outlook, Eudora, Thunderbird, Sea Monkey,
  The Bat
• Also support 10 Email Applications Mac Emails,
  Sea Monkey, The BAT, Exchange Emails etc
• File Type supported Outlook (PST, OST), OLM,
  EDB, MBOX, EML, TBB and MBX

5
Analysis Forensic Email With Different Format

• Normal View Represent an email normally
• Hex View Corresponding Hex code of email
• Properties View Brief view is given in this
  view
• Message Header View Complete header
  representation of email
• MIME View Shows MIME view of email
• HTML View HTML script of email for email
  recovery purpose.
• RTF View If RTF is included in mail setting
  during sending of email then it is represented in
  this view.
• Attachments If the attachment is included in any
  email then it is shown here.

6
Export Email Evidence

• This Forensic Recovery Software is able to export
• email evidences in following file formats.
• PDF
• MSG
• EML
• HTML

7
Download Free Version of Forensic Toolkit

• For viewing the functionality of MailXaminer you
  can download the demo version from the following
  site
• http//www.mailxaminer.com/download.html