Hello All,
I have a scenario whereby I have ingested a small disk image for the purposes of creating a training module on email forensics. I load the disk OK, and the ingest modules run - including the email parser. No errors are observed. The emails appear to be in a PST file from Outlook Express. I can view all emails OK.
My challenge is, the “Headers” tab in the bottom results pane is ghosted out. I am unable to view the email headers. I have re-run the ingest module and looked all over for a setting that might turn this off - but to date I am unable to find it.
Have I missed something? Is this a bug? Is this a switch I have missed?
Any help would be gratefully appreciated
Windows 10 Pro
Autopsy 4.19.1