Export attachments in their native format

Oct 13, 2025 by wbrum.org 7 views

Introduction

In today's digital age, email has become an essential means of communication for both personal and professional purposes. However, with the increasing use of email, the risk of email-related crimes and cyber threats has also risen. As a result, the need for a reliable and comprehensive email examination tool has become more pressing than ever. Paraben's E-mail Examiner is one such tool that has been designed to meet the demands of forensic email analysis. In this article, we will delve into the features and capabilities of E-mail Examiner, highlighting its strengths and benefits in the field of digital forensics.

Key Features of E-mail Examiner

Supported File Types

E-mail Examiner supports a wide range of email file types, including:

America On-line (AOL): E-mail Examiner can recover and analyze email data from AOL accounts.
Microsoft Outlook (PST): E-mail Examiner can recover deleted emails from PST files, including emails deleted from the deleted items folder.
Microsoft Outlook Offline Storage (OST): E-mail Examiner can recover email data from OST files, including emails deleted from the deleted items folder.
The Bat! (version 3.x and higher): E-mail Examiner can recover email data from The Bat! email client.
Thunderbird: E-mail Examiner can recover email data from Thunderbird email client.
Outlook Express: E-mail Examiner can recover email data from Outlook Express email client.
Eudora: E-mail Examiner can recover email data from Eudora email client.
E-mail file (EML): E-mail Examiner can recover email data from EML files.
Windows mail databases: E-mail Examiner can recover email data from Windows mail databases.

Support for MIME Types and File Extensions

E-mail Examiner supports over 750 MIME types and related file extensions, making it a comprehensive tool for email analysis.

Plain Text Mail

E-mail Examiner can recover and analyze plain text email data, including emails deleted from the deleted items folder.

Recovers Deleted Email

E-mail Examiner can recover deleted email data from various email clients, including:

Outlook (PST): E-mail Examiner can recover deleted emails from PST files, including emails deleted from the deleted items folder.
Thunderbird: E-mail Examiner can recover deleted emails from Thunderbird email client.
The Bat!: E-mail Examiner can recover deleted emails from The Bat! email client.

Viewing Mail Storage

E-mail Examiner allows users to view the entire email mail storage structure, including restored folders. Users can also view messages, including deleted email, in different formats, such as:

RFC Header: E-mail Examiner can display email headers in RFC format.
Text: E-mail Examiner can display email data in plain text format.
RTF: E-mail Examiner can display email data in Rich Text Format (RTF).
HTML: E-mail Examiner can display email data in HyperText Markup Language (HTML).
Raw HTML: E-mail Examiner can display email data in raw HTML format.

Viewing and Analyzing Attachments

E-mail Examiner allows users to view and analyze attachments in their original file format, as well as in text or hex view.

Advanced Boolean Searching

E-mail Examiner provides advanced Boolean searching capabilities, allowing users to search for email data in various fields, including:

Text body: E-mail Examiner can search for email data in the text body of emails.
Text headers: E-mail Examiner can search for email data in the text headers of emails.
Sender: E-mail Examiner can search for email data based on the sender's email address.
Receiver: E-mail Examiner can search for email data based on the receiver's email address.
Date: E-mail Examiner can search for email data based on the date the email was sent or received.

Search in Attachments

E-mail Examiner allows users to search for email data within attachments.

Print Attachments

E-mail Examiner allows users to print attachments in their original file format.

Sort Attachments by File Type

E-mail Examiner provides a feature to sort attachments by file type, making it easier to analyze and manage email data.

Exporting

E-mail Examiner provides various exporting options, including:

Export mail storage contents to EML, EMX, PST, MHTML, and MSG formats: E-mail Examiner can export email data in various formats, including EML, EMX, PST, MHTML, and MSG.
Export attachments in their native format: E-mail Examiner can export attachments in their original file format.
Batch search and export without adding mail storages as evidence to EMX: E-mail Examiner can perform batch searches and exports without adding mail storages as evidence to EMX.
Export from search results and bookmarked data: E-mail Examiner can export email data from search results and bookmarked data.
Batch "scripting": E-mail Examiner provides a feature to perform batch scripting, making it easier to automate email analysis tasks.

Comprehensive Bookmarking

E-mail Examiner provides comprehensive bookmarking capabilities, allowing users to bookmark email data for further analysis.

Advanced Reporting

E-mail Examiner provides advanced reporting capabilities, allowing users to generate reports in various formats, including:

HTML: E-mail Examiner can generate reports in HTML format.
CSV: E-mail Examiner can generate reports in Comma Separated Values (CSV) format.
Text: E-mail Examiner can generate reports in plain text format.

Conclusion

Q: What is E-mail Examiner?

A: E-mail Examiner is a comprehensive tool for forensic email analysis, designed to help investigators recover and analyze email data.

Q: What types of email files does E-mail Examiner support?

A: E-mail Examiner supports a wide range of email file types, including America On-line (AOL), Microsoft Outlook (PST), Microsoft Outlook Offline Storage (OST), The Bat! (version 3.x and higher), Thunderbird, Outlook Express, Eudora, E-mail file (EML), and Windows mail databases.

Q: Can E-mail Examiner recover deleted email data?

A: Yes, E-mail Examiner can recover deleted email data from various email clients, including Outlook (PST), Thunderbird, and The Bat!.

Q: What formats can E-mail Examiner export email data in?

A: E-mail Examiner can export email data in various formats, including EML, EMX, PST, MHTML, and MSG.

Q: Can E-mail Examiner search for email data within attachments?

A: Yes, E-mail Examiner provides advanced Boolean searching capabilities, allowing users to search for email data within attachments.

Q: What types of reports can E-mail Examiner generate?

A: E-mail Examiner can generate reports in various formats, including HTML, CSV, and Text.

Q: Is E-mail Examiner user-friendly?

A: Yes, E-mail Examiner has a familiar and easy-to-use interface, making it accessible to users of all skill levels.

Q: Can E-mail Examiner be integrated with other tools?

A: Yes, E-mail Examiner has been integrated into the P2 Commander interface, providing comprehensive analysis features, easy bookmarking and reporting, advanced Boolean searching, searching within attachments, full unicode language support, and a familiar and easy-to-use interface.

Q: What is the cost of E-mail Examiner?

A: The cost of E-mail Examiner varies depending on the version and licensing options. Please contact Paraben for more information on pricing and licensing.

Q: Is E-mail Examiner compatible with Windows?

A: Yes, E-mail Examiner is compatible with Windows operating systems.

Q: Can I try E-mail Examiner before purchasing?

A: Yes, Paraben offers a free trial version of E-mail Examiner, allowing users to test the software before purchasing.

Q: What kind of support does Paraben offer for E-mail Examiner?

A: Paraben provides comprehensive support for E-mail Examiner, including online documentation, user manuals, and technical support.

Q: Can I customize E-mail Examiner to meet my specific needs?

A: Yes, E-mail Examiner provides a range of customization options, allowing users to tailor the software to meet their specific needs.

Q: Is E-mail Examiner a standalone tool or can it be used in conjunction with other tools?

A: E-mail Examiner can be used as a standalone tool or in conjunction with other tools, such as P2 Commander, to provide comprehensive digital forensics capabilities.

Conclusion

In conclusion, E-mail Examiner is a powerful tool for forensic email analysis, providing a wide range of features and capabilities to help investigators recover and analyze email data. With its advanced Boolean searching, viewing and analyzing attachments, and exporting options, E-mail Examiner is an essential tool for any digital forensics investigation. If you have any further questions or would like to learn more about E-mail Examiner, please contact Paraben for more information.