mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-06 21:00:22 +00:00
31 lines
870 B
Plaintext
Executable File
31 lines
870 B
Plaintext
Executable File
/*! \page email_parser_page Email Parser Module
|
|
|
|
What Does It Do
|
|
========
|
|
|
|
The Email Parser module identifies Thunderbird MBOX files and PST format files based on file signatures, extracting the e-mails from them, adding the results to the Blackboard. This module skips known files and creates a Blackboard artifact for each message. It adds email attachments as derived files.
|
|
|
|
This allows the user to identify email-based communications from the system being analyzed.
|
|
|
|
Configuration
|
|
=======
|
|
|
|
There is no configuration required.
|
|
|
|
|
|
Using the Module
|
|
======
|
|
Explore the "Results", "E-Mail Messages" portion of the tree to review the results of this module.
|
|
|
|
Ingest Settings
|
|
------
|
|
There are no runtime ingest settings required.
|
|
|
|
Seeing Results
|
|
------
|
|
The results of this show up in the "Results", "E-Mail Messages" portion of the tree.
|
|
|
|
\image html email_results.PNG
|
|
|
|
*/
|