Hi,
This is my first case with pst files. win 7 and autopsy 4.10.0
I´m trying to recover pst user file from Documents/Outlook/ or AppData/…/windows/outlook after formatting the HD but Autopsy only shows some backed pst files from Desktop and the new pst created after formatting.
I did the full module scanning and also a custom scanning.
The result of the file search result by pst extension is the following
I have two questions;
Is the OrphanFile a corrupted pst file??
Is it possible that Autopsy does not see pst files cut from the hard disk to a usb?
Thans in advance.