mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-06 21:00:22 +00:00
37 lines
1.2 KiB
Plaintext
37 lines
1.2 KiB
Plaintext
/*! \page email_parser_page Email Parser Module
|
|
|
|
What Does It Do
|
|
========
|
|
|
|
The Email Parser module identifies MBOX, EML and PST format files based on file signatures, extracting the e-mails from them, adding the results to the Blackboard. This module skips known files and creates a Blackboard artifact for each message. It adds email attachments as derived files.
|
|
|
|
This allows the user to identify email-based communications from the system being analyzed.
|
|
|
|
Configuration
|
|
=======
|
|
|
|
There is no configuration required.
|
|
|
|
|
|
Using the Module
|
|
======
|
|
Explore the "Results", "E-Mail Messages" portion of the tree to review the results of this module.
|
|
|
|
Ingest Settings
|
|
------
|
|
There are no runtime ingest settings required.
|
|
|
|
Seeing Results
|
|
------
|
|
The results of this show up in the "Results", "E-Mail Messages" portion of the \ref tree_viewer_page.
|
|
|
|
\image html email_results.PNG
|
|
|
|
If an e-email has an attachment, the "Attachments" tab in the \ref content_viewer_page will be active.
|
|
|
|
\image html email_attachments.png
|
|
|
|
You can right click and select "View File in Directory" to navigate to the attached file. You can also switch to the "Thumbnails" tab to see a preview of any image attachments.
|
|
|
|
*/
|