Extract Evidence from MBOX File & Variants
MBOX Forensic Tool analyzes files and offers the preview function that allows you to obtain an in depth image of the facts contained in the .mbox file, as well as .mbs & and .sbd folders. This MBOX email analysis software extracts all the relevant data as well as deleted data from messages and displays all the content in a panel for the purposes of forensic analysis / and evaluation. From the forensic point of view the MBOX Forensics Wizard is a great way to dig deeper into an email and gather crucial facts. It This utility allows you to extract the MBOX file & all its variants created in multiple email clients like Mozilla Thunderbird, Apple Mail / Mac mail, Operamail, Netscape and many others.
Carve Out data from MBOX Files / SBD Folders
With this MBOX data forensics software, user can select their preferred file / folder and move MBOX file to any other file format in a few easy and simple clicks. For browsing .mbox file two options are available :
- Choose Files : This options allows users to browse the MBOX file with extension (.mbox)
- Choose Folders : This choice allows users to browing the folder containing MBOX file in bulk (Thunderbird Profile Folder / Thunderbird .sdb folder)
Supports Multiple Extraction Options
The MBOX Forensics Tool provides an option to extract required data from MBOX File. You can apply the following extraction filters:
- Extract only Email Addresses: It allows you to save only email address from MBOX files and folders in Text File (.txt). Also you get additional filters like extract email address from attachments, select field to extract from email address (From, To, Cc, Subject, Message Body, and Message Header)
- Extract only Attachments : Allows you to extract attachments present in MBOX File in their respective format.
- Extract only Phone Number: Allows you to extract only phone number MBOX Files in the Text file. This option displays phone numbers before exporting.
- Extract Associated Email & Phone Numbers: Allows you to extract associated emails and respective phone numbers in the CSV file type. This option displays the Associated Emails & and Phone Numbers before exporting.
Store Digital Evidence in Multiple Destinations
Depending on the user's choice, this feature of the MBOX forensics tool allows users / investigators to switch their data from one platform to another at a given time. You can select from numerous export types such as:
- Email Files: Save data in EML , MBOX , PST (individual file for each folder / single PST for all ) file format . For these export option you get additional exports as : Create Empty Folders , delete Old Folders, Include email folders
- Document Files: allows you to save MBOX emails in PDF, HTML, TXT format. For these export option you get additional exports as : Create Empty Folders , delete Old Folders, Include email folders , Include Properties. For PDF (Show Page Numbers, Save attachments in folder)
- Directly to Email Services (Gmail, Office 365, IMAP)- For this option you need to provide details like: Backup Folder Name , Backup email address , Password . For IMAP , additionally, you need to enter Server Address & Server Port Number for destination Mail client(eg: Yahoo, Gmail )
Complete Mail Messages Preview
The MBOX Email Forensics wizard has an inbuilt message viewer that displays entire messages email folders and their data items, as well as formatting important messages, attachments, email headers and meta-properties. To preview this, the tool provides four panes: Content, Message Header, Hex, and Raw Message.
- In the Content View: Users can easily see all the important properties of email, such as sender, cc, bcc, subject, attachment name, etc.
- Message Header View: Displays X-Mozilla-Status, Delivered-To:, Received:by , MIME-Version: etc.
- Hex View: Display data in hexadecimal format.
- Raw message View: Displays other details of the email message like Return-Path, DKIM-Signature, Content-Type, and Message-Id: etc.
Advanced Search with Multiple Filters
The MBOX analysis software incorporates a powerful search mechanism that allows investigators to inspect MBOX emails by keyword, by date, by name efficiently. Further, this complements the investigative abilities of the software program as it allows investigators to effectively review MBOX emails.
Save All MBOX Email & Attachments
It is one of the best MBOX forensics tool, which keeps track of all the attachments of each email. You can right-click on an attachment to open and save it. This tool allows you to easily access all the mail data including message header, subject, address, start address, date, time, cc, cc, or many more. If an email contains more than one attachments, you can select the Save All option to save them.
Provides Easy Flexible User Interface
With the help of this MBOX Forensics Wizard software, users can easily manage multiple email files and convert MBOX files to various formats as shown in the tool. The tool offers an easy-to-use graphical user interface, which allows even a beginner easily operate the software to perform the required tasks.