jess LAND
       www.jessland.net
        Sponsored by:       
One eSecurity
www.one-esecurity.com
JISK Knowledgebase >>    About    News    Essentials    Architecture    FWs    IDS/IPS    Honeypots    Malware    Forensics   
  +  JSS Home    Projects    JSS Community    Events    News    Docs    About    Contact .

JISK > Forensics > Areas > MS Exchange Forensics Section Map

MS Exchange Forensics

Content Leader: Jess Garcia - Last Updated: January 19, 2007


OST Files Recovery

  • OST: MS Exchange Offline STorage format.
  • An OST file is a replica of the Exchange mailbox stored locally in the client that helps speeding up exchanges while logged on to the server. If, because of any type of incident, a user's email account is deleted or corrupted at the Exchange server, the local .OST file can be used to recover Email, Contacts, Notes, Tasks, etc.

Recovery Procedure

  • Control Panel -> Mail -> E-Mail Accounts -> Add a new e-mail accountI
    • Microsoft Exchange Server
    • Server: 127.0.0.1
    • User Name: <The Username>
  • Click More Settings -> Cancel (on the login box)
  • When Started -> Manual Control -> Work Offline
    • Advanced -> Offline Folder File Settings -> Browse <Select> -> OK -> OK
  • You can also use the tools mentioned below to convert from OST to Outlook PST file format.

References

Tools

EDB & STM Files Recovery

  • You can use the tools below to recover from corrupted MS Exchange Server Databases, .edb & .stm.

Tools


Copyright © 2000-2008 Jessland - Jess Garcia's Website - All rights reserved.