Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
January 10th, 2013, 23:51
Customer dropped of hard drive that needs emails recovered from an Entourage DB. They deleted their account from the application and only the sent Items remain. The inbox and all other folders are empty. The DB is almost 10gb. I can see the emails in hex but I can’t figure out how to extract them from the DB. Tried a couple software packages and tried creating a second identity and the change the DB to the new identity. Nothing has worked so far. I have also tried exporting using emailchemy but I recieve the same result, only the sent items remain. I am working from a forensic image 100% of sectors copied. From my understanding FTK will not parse the DB as well. Can anyone confirm this for me? FTK Support was not able to answer the question. I have FTK available to me but would hate to tie up my friends workstation for no reason. Any suggestions?
January 11th, 2013, 0:00
Forgot to mention it is 2008 Entourage.
Powered by phpBB © phpBB Group.