Does Autopsy support .EDB exchange database files?

Any Autopsy specific discussions, events, module releases, that don't fall into the other categories.

Moderator: carrier

Does Autopsy support .EDB exchange database files?

Postby mattj7 » Wed Jun 21, 2017 4:22 pm

I am currently preparing to search some disk images using Autopsy, and I haven't been able to confirm if Autopsy supports searching the contents of Exchange EDB files.

Can anyone help me answer this question, or point me to a list of supported files for searching?

Thanks in advance for any help!
mattj7
 
Posts: 3
Joined: Wed Jun 21, 2017 4:06 pm

Re: Does Autopsy support .EDB exchange database files?

Postby Hoyt » Thu Jul 20, 2017 2:29 pm

Not unless there's something in the latest release that I'm not aware of. Currently, only MBOX and PST files are supported. That said, though, there are tools available to convert EDB to PST, which you can then add as a new data source to your existing case. Some of these converters are free, but ymmv, so beware and validate as always. You can start with a web search for EDB to PST and see where that takes you.
Hoyt Harness, CFCE
Hoyt
 
Posts: 74
Joined: Thu Dec 11, 2014 4:02 am
Location: Little Rock, AR


Return to Autopsy General

Who is online

Users browsing this forum: No registered users and 0 guests