Jump to content

Unallocated Mail

Recommended Posts

I have a case where the client has found no hits in relation to an email address they were interested in using the Intella Connect platform.


I've done a search for the email address and found numerous hits within the unallocated clusters.


Now I need to get this material out of the unallocated and get it hosted on the platform somehow.


Any thoughts on how I can go about parsing the unallocated from these emails?  They all seem to be html content, which isn't going to help.


I've got the data loaded within EnCase.


Any help is appreciated.

Link to comment
Share on other sites

You could try isolating and exporting the deleted emails with EnCase as PDF or some other document type, then index those new files with Intella to make them available.


It's been a few years since I used EnCase so not sure on the process you could use, but I can tell you how to do it with Xways :)

Link to comment
Share on other sites



I think Adam is on the right track suggesting to use EnCase. I have not used the latest version of EnCase but earlier versions had a 'file finder' function. You may be able to search for the file signature of the message and carve the messages out that way.





Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...