pen-test
[Top] [All Lists]

Re: recover deleted emails from a pst

To: "Kush Wadhwa" <kush.wadhwa@niiconsulting.com>
Subject: Re: recover deleted emails from a pst
From: p1g <killfactory@gmail.com>
Date: Sat, 21 Jul 2007 15:55:26 -0400
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=crlKIYWcMjBDVD7gBd5tvONemac/5hvbX4QiCMrFONWthLtVzxlhAXDddRYXqvkClvAeGT6FbfZQFD9CKXkgqAHQT9n0/T/xzP08TNA5tI4UxCtNq5f9XYv6fA6FjMvsdJfwCQt/LqiqYLo8/ZP5bQV2rJAdIgSDtkCyr7QV9cU=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=OUaaGaieACtvPgrFQewzVpDAbgyZNGB++nFXBVx4DPVH80WUoF8iybBhBlekbDUEUsHKoWN4UoSlO+SvImGLTNjTe4z24mMA4zHbfHeBoikE2ktmgjz2KJ6bqfJ3XKdq4c0vRt2VsQDw2gtyTvdXd0IP8KAqdYshSwcwsvl49Dk=
In-reply-to: <46A1A1B1.4070103@niiconsulting.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <46A1A1B1.4070103@niiconsulting.com>
Resent-date: Mon, 23 Jul 2007 03:52:53 -0600 (MDT)
Resent-from: pen-test-return-1078484661@securityfocus.com
Resent-message-id: <20070723095253.19C0214AC56@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Accessdata.com

FTK will do that.

Are you refering to emails that were in a .pst archive before they were deleted?

On 7/21/07, Kush Wadhwa <kush.wadhwa@niiconsulting.com> wrote:
Hello Jim,

You have particularly asked for recovering deleted emails. Scanpst.exe will repair the 
corrupted .pst files but will not recover the deleted emails. So for recovering the 
deleted emails you can use "RecoverMyEmail" from GetData. This is the best tool 
which I had come across in my forensics carrier. I have used this tool to recover the 
deleted emails. Might be some of the mails which are recovered are not readable but most 
of them will be readable. Hope  you will be able to recover all deleted emails from pst 
files.

You can also read the articles of digital forensics at 
http://www.niiconsulting.com/checkmate.

Cheers,
Kush Wadhwa

--
Thanks & Regards,

Kush Wadhwa - CCE,RHCE, CEH
Forensic Analyst - NII Consulting
NII Consulting
Web: http://www.niiconsulting.com
http://www.niiconsilting.com/checkmate
Mobile (India): +919819135494
Tel: +91-22-2839 2628


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




--
-p1g
SnortCP
 ,,__
o"     )~  oink oink
  ' ' ' '

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>