I would like to extract the email message (msg) files with the keyword hits.
Currently, we have to extract the entire OST/PST file and then find out particular email by loading it to email software.
Appreciate if this feature can be considered.
When extracting some file, please ensure not to change any of the file metadata, example last modified date/time is usually changed to extracted date/time.
I’ve a similar scenario with Thunderbird MBOX examination (using email-parser and keyword search ingestion tools)
At the end of the ingestion process i select a keyword hit but I can only easily identify the MBOX that “holds” the specific keyword.
Is there a way also to jump directly to the email message (plaintext + attached files) “holding” the specific keyword ?
Using “View file in Directory” jumps only to the MBOX containter (with many e-mail inside…)
P.S : I’m using Windows Autopsy V4.13