fuzed Posted May 31, 2016 Report Share Posted May 31, 2016 I have a case where the client says he has emails, which were said to have been sent to another, we do not have any of the original emails, just an email address, using EnCase we can see some hits for the email addresses, although little or no email appears to have come back.I've processed the exhibit with Intella, but not had any hits, any advise in relation to how to process AOL files? I can see the data within EnCase, although it's not a simple or easy process to view the messages/emails. I'd like to be able to show/provide the client with any emails that match the search hits, without spending hours and hours on manually processing the data. Link to comment Share on other sites More sharing options...
arjohn Posted May 31, 2016 Report Share Posted May 31, 2016 Hi fuzed, Emailchemy can read various AOL file formats and convert these to EML files, which can then be processed by Intella: http://www.weirdkid.com/products/emailchemy/ Link to comment Share on other sites More sharing options...
fuzed Posted May 31, 2016 Author Report Share Posted May 31, 2016 Thanks, I've tried it, but for some reason it's not reading the files or converting them, the file header reads 'AOLVM100'. the app appears to be AOL9. EnCase parses the data, and the messages, although it's been a manual process to get the data out. Link to comment Share on other sites More sharing options...
fuzed Posted May 31, 2016 Author Report Share Posted May 31, 2016 found the issue, thanks, it appears the folder that was exported was exported as EnCase parsed email files, I exported the raw data and re-ran and it worked. Link to comment Share on other sites More sharing options...
ŁukaszBachman Posted June 7, 2016 Report Share Posted June 7, 2016 Thanks for an update fuzed. I'm glad you were able to figure it out. Link to comment Share on other sites More sharing options...
Recommended Posts