Find particular email message & extract when a keyword hits a PST/OST file data

Autopsy Help
1
  1. Is there a way to identify relevant email (msg file) when a keyword hits data in an email PST or OST file. I just want to extract a particular msg file with the keyword hit.

Ex.

2_pics

  1. If the same PST/OST hits two keywords and tagged in two different tags (one separate tag for each keyword), will this appear correctly in the reports? Do I have to delete the incorrect tag that automatically comes from the previous keyword tagged with the OST/PST file?

Thanks for your thoughts.

2

You can try the EmailSlicer plugin: https://github.com/labcif/EmailSlicer
For now it only supports PST files and exports to EML (the same format used by Thunderbird)