Jump to content

Priv1.edb file


Recommended Posts

The client has given us a set of keywords to search for as they have had no success finding the records of interest.

 

I've conducted a search for an email address using EnCase and have had hits within the priv1.edb file for the records.

 

The same can not be said for the same data within Intella, the same data has been processed, but when I search for the email address we are not seeing the same results.

 

Is Intella not parsing data correctly, is it not showing raw data possibly? 

Link to comment
Share on other sites

It's also worth trying to extract the mail boxes to PST from the EDB with something like Systools or Kernel for exchange, then indexing the PST's within Intella.

 

I haven't tried parsing any EDB files with 1.9.1 yet as I know they have improved support for EDB, but historically it was problematic.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
 Share

×
×
  • Create New...