Investigating Microsoft Outlook Mailstorage
Posted by Jack H. Ward, Last modified by Jack H. Ward on 06 February 2018 03:11 AM
Microsoft Outlook mailstorage is stored in *.pst or *.ost files (offline mailstorage).|
Attachments in deleted messages in Microsoft Outlook mailstorages aren't restored and can't be viewed. Deleted messages that had attachments have a special icon in the Attachments column.
Mailstorage default location:
Offline mailstorage default location:
The Application Data folder (AppData in Windows 7, 8, 8.1, and 10) is hidden by default.
To investigate the Microsoft Outlook mailstorage, do the following:
7. The mailstorage structure is displayed in the Case Content pane (to the left), messages stored in the mailbox are displayed in the Data View pane (to the right).
8. The restored deleted messages can be viewed in the Outlook storage root node.
9. Select the message in the Data View pane. Its contents are displayed in the E-mail Data pane (at the bottom).
10. You can view the message contents in different formats and/or view the attachments.