MSExchange.org: E-mail Forensics in a Corporate Exchange Environment (Part 4)

In the previous part of our article series, we finished with extracting data using Exchange features, namely Mailbox and Administrator Auditing. In these next and final two parts, we will look at extracting data directly from Outlook or from a PST file.



from Exchange News Full Article