Import Microsoft Outlook Data Files Into Oxygen Forensic® Detective

Email messages can be a goldmine of digital evidence both in criminal and corporate investigations. Oxygen Forensic® Detective enables email data extraction from mobile devices, computers, and from the cloud. Overall, utilizing various extraction methods, investigators can extract the following email apps:

      • Microsoft Outlook
      • Mozilla Thunderbird
      • Google Mail
      • SecMail
      • ProtonMail
      • QQ Mail
      • sz

 

Learn more about supported email services in Oxygen Forensic® Detective.

Oxygen Forensic® Detective v.15.1 added support for a new email data source. Now investigators can import and analyze Microsoft Outlook Data Files of .pst and .ost formats.

 

Table of Contents

 

Type of Microsoft Outlook Data Files

Microsoft Outlook stores a local copy of downloaded and synchronized emails on a user’s computer. POP accounts store their information in Outlook Data Files (.pst files) while Outlook 365 accounts, Exchange accounts, IMAP accounts, and Outlook.com accounts store it in Offline Outlook Data Files (.ost files).

Outlook Data Files (.pst) created by Outlook 2013 or Outlook 2016 are in the Documents\Outlook Files folder. If a user upgraded to Outlook on a computer that already had data files that were created in Microsoft Office Outlook 2007 or earlier, these files are saved in a hidden folder \Users\user\AppData\Local\Microsoft\Outlook. Outlook Data Files contain messages as well as contacts, calendar data, and tasks.

Offline Outlook Data Files (.ost) are located at: drive:\Users\user\AppData\Local\Microsoft\Outlook.

Most data may remain on the server, so investigators will have only synchronized items in an Offline Outlook Data File.
 

Analysis of Microsoft Outlook Data Files in Oxygen Forensic® Detective

To import Microsoft Outlook Data Files, click the relevant option under “Desktop data” on the software Home screen and follow the instructions of the “Import Wizard”.

 

Screenshot of the import options in Oxygen Forensic® Detective”Desktop data” selected

 

Once data is parsed, investigators will be able to analyze it in Oxygen Forensic® Detective.

 

Screenshot of imported data from Microsoft Outlook Data File into Oxygen Forensic® Detective\
 

 

Get more from Oxygen Forensic® Detective

At Oxygen Forensics our solution is updated multiple times every year. We offer training courses and webinars that will help you learn the ins and outs of Oxygen Forensic® Detective and stay up to date on new features and tools needed for your investigation. Returning customer? Sign up for our newsletter to stay in the loop.

Don’t have Oxygen Forensic® Detective and want to try it out? Request a free-trial</

Leave a Reply

Your email address will not be published. Required fields are marked *