# Email extraction from pst file

**URL:** <https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486>\
**Category:** Autopsy Help\
**Created:** [November 21, 2022, 1:29pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486 "2022-11-21T13:29:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![RDB](https://avatars.discourse-cdn.com/v4/letter/r/8baadc/32.png) [@RDB](https://sleuthkit.discourse.group/u/RDB)\
**Post date:** [November 21, 2022, 1:29pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486/1 "2022-11-21T13:29:12Z")

</div>

I can’t seem to extract individual emails from a pst file in 4.19. I can tag the email of interest as a result from the list window but when I try and run a report the actual email isn’t extracted. What am I missing?

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [November 21, 2022, 2:44pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486/2 "2022-11-21T14:44:21Z")

</div>

No this is a way to currently do this. If you DM me here I can try and work on a solution for you.

Mark

---

<div class="post-metadata">

**Author:** ![RDB](https://avatars.discourse-cdn.com/v4/letter/r/8baadc/32.png) [@RDB](https://sleuthkit.discourse.group/u/RDB)\
**Post date:** [November 21, 2022, 3:12pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486/3 "2022-11-21T15:12:48Z")

</div>

I have done it with another commercial tool but not with Autopsy. That would be something that maybe could be developed.

---

<div class="post-metadata">

**Author:** ![crash0ver1d3](https://avatars.discourse-cdn.com/v4/letter/c/a6a055/32.png) [@crash0ver1d3](https://sleuthkit.discourse.group/u/crash0ver1d3)\
**Post date:** [November 26, 2022, 4:47pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486/4 "2022-11-26T16:47:00Z")

</div>

You need to filter on the marked items, then right click and export them to directory of your choice.

---

<div class="post-metadata">

**Author:** ![RDB](https://avatars.discourse-cdn.com/v4/letter/r/8baadc/32.png) [@RDB](https://sleuthkit.discourse.group/u/RDB)\
**Post date:** [November 26, 2022, 7:28pm UTC](https://sleuthkit.discourse.group/t/email-extraction-from-pst-file/3486/5 "2022-11-26T19:28:33Z")

</div>

That doesn’t work for individual emails embedded in a pst file