OUTLOOK

Crime and Outlook

Investigative techniques

HTCIA.org

"The High Technology Crime Investigation Association (HTCIA) is designed to encourage, promote, aid and effect the voluntary interchange of data, information, experience, ideas and knowledge about methods, processes, and techniques relating to investigations and security in advanced technologies among its membership."

"How does a modern cyber investigator cope? This two-part article will provide
you some methodologies to follow in either environment. In this issue, we'll
focus our attention on a little trick for recovering e-mail "removed" from the
deleted bin inside Outlook.
How many times have you had to explain to someone that once the "deleted items
bin" in Outlook has been emptied that the files are gone forever? Well, there
actually is a way to recover such files.
What's the trick? Just intentionally corrupt the mail storage area and then utilize
a common repair tool to fix what you corrupted. I have found this trick to work
rather well. "

Contributed by Randall Shane,
Certified Fraud Examiner and PhD candidate, Palm Coast, Florida

Mining clues from E-mail
And
Mining clues - Part 2

Also see:
TechRepublic.com.com
Recovering Deleted E-mail

"The accidental deletion of e-mail is a common mistake encountered by system administrators. There are various techniques for recovering Outlook messages or surviving an Exchange Server crash. Learn more about recovering deleted mail messages with these resources."