Microsoft Outlook Forensic Analysis Tool

An array of hidden information:

• whole letters
• contacts
• attached files
• meetings
• reminders
• tasks
• notes
• calendar
• magazines

Or partly restored objects or service information from objects as well:

• service headers of letters
• text fragments
• parts of files
• parts, fragments, or blocks of letters
• nested objects

The principle of the program is to search for blocks with data that are not provided in Microsoft Outlook. Such hidden blocks with user data can appear when running Microsoft Outlook when optimizing data storage or after user data.

For example, the user received an unwanted email or the content of the message is confidential and must be removed. In this scenario, the Microsoft Outlook user presses the Delete button, and the email stops in the mail program. When the Delete button is destroyed, Outlook deletes the letter / contact / journal or other objects from the object list. But blocks with deleted message data remain in Microsoft Outlook storage (in PST / OST files). Outlook Forensic Toolbox finds such data blocks, analyzes their content, and, using complex forensic analysis algorithms, recreates the object in whole or in part.

Requirements:

• Windows 98/Me/2000/XP/Vista/7/8/10/11 or Windows Server 2003/2008/2012/2016 and above

Notes:

In some cases, it is not possible to completely recreate the object, since all 100% of the blocks with information about the object are not always enough for any reason (overwritten in the file with other data, the link to the nested object is lost, etc.). In case of incomplete recovery of a deleted object, separate files are saved with what was identified and reconstructed.

Screenshots:

• 1
• 2
• 3
• 4
• 5

How it Works:

Customer's reviews and ratings: