Top Email Forensics Tools For Investigating Different Email Clients and Extensions.

The digital forensics investigator has to face different email clients and email formats in their day to day life hence to make things convenient we are listing some of free software that will aid in email forensic investigation.

Tool for Outlook Forensics

OST Viewer

This tool will help whenever you found ost file attached with Outlook or orphaned and will aid in viewing all the email related information.

Applicable for MS Outlook

Read More →



PST Viewer

This tool will help the investigator to read the content within the pst file such as emails, attachments and header information.

Applicable for MS Outlook

Read More →


Tool for Window Live Mail Forensics

EML Viewer

Window Live mail uses eml format to stored emails locally though this is not the only application that uses this format in fact any email client that is designed as per RFC 5322 (eml standard) will produce an eml file.

Applicable for Microsoft Outlook Express Novell GroupWise Lotus notes Windows Mail Mozilla Thunderbird Postbox

Read More →


Exchange Server Forensics Tools

EDB Viewer

Easy to use and does not requires Exchange Environment. All information related to user mailbox will be available here. Great tool to view edb emails offline.

Applicable for MS Exchange Server

Read More →



ESEDB Viewer

This data format is also associated with exchange server and contains crucial information that might help the Email forensic investigator.

Applicable for MS Exchange Server

Read More →


Mozilla Thunderbird Forensics

MBOX Viewer

This email format is used by many email clients such as Mozilla Thunderbird, Microsoft Entourage and Qualcomm Eudora. This format can be easily viewed by the MBOX Viewer.

Applicable for Opera Mail Entourage Eudora Postbox Apple Mail

Read More →



Opera MBS Viewer

MBS Files are generally generated by Opera mail client which store and send users emails. In some situation you may also find .mbx in Opera email client.

Applicable for Opera Mail

Read More →


Tool for Outlook Express Forensics

DBX Viewer

If you have dbx format which is of Outlook Express origin then you can use the tool to view email, head information as well as attachments.

Applicable for MS Outlook Express

Read More →



WAB Viewer

WAB Viewer: the Outlook Express store contact details in WAB format so if you are looking for contact information stored in WAB format you can use the tool for the stated purpose.

Applicable for MS Outlook Express

Read More →


Zimbra ZDB File Forensics

ZDB Viewer (Outlook Connected)

Many organizations connect their Zimbra Server with the Outlook email client using the Zimbra Add-on and this creates a zdb file which holds all the information. You can use the application to view all the information that resides in it including the email head information.

Applicable for Outlook Email Client

Read More →