Analysis Villanova University Department of Computing Sciences D. Justin Price Spring 2014

Size: px
Start display at page:

Download "Analysis Villanova University Department of Computing Sciences D. Justin Price Spring 2014"

Transcription

1 Analysis Villanova University Department of Computing Sciences D. Justin Price Spring 2014

2 ANALYSIS With the increase in scams and fraud attempts with phishing or spoofing Investigators need to know how to examine and interpret the unique content of messages Phishing s are in HTML format Which allows creating links to text on a Web page One of the most noteworthy scams was 419, or the Nigerian Scam Spoofing can be used to commit fraud Similar to other types of investigations Goals Find who is behind the crime Collect the evidence Present your findings Build a case

3 ANALYSIS Who? Addresses IP Address When? Header Timestamps Timestamps Each Mail Transfer Agent (MTA) will append a timestamp to the header Where? IP Addresses Domains

4 ANALYSIS Additional Artifacts Message Body Written by sender Signature Lines Analysis is accomplish by: Keyword Search Terms Manual Review Attachments Accounts for ~80% of data Attachments must be encoded MIME / base64 Common Infection Point for Viruses Address Books Calendar Entries Tasks Notes

5 HEADER ANALYSIS Header Envelope used by messages to reach destination. Transaction log of the message. Traditional Information From To CC BCC Subject Date More Specific Information Message ID Unique ID assigned by the originating mail server Logged by each receiving mail servers Effective search term to use when analyzing servers to prove if an was sent or received.

6 HEADER ANALYSIS Header More Specific Information Received Trace the message s path by analyzing the Received entries. The bottom-most entry is from the originating server. Documents server s IP address, server name, timestamps and time zone. X-Originating-IP (X-IP) - Optional IP address of the device used to send the Can be spoofed is user has access to the original MTA X-Mailer - Optional Documents the client used to send the message. Helps determine if created from client or web-based.

7 HEADER ANALYSIS

8 HEADER ANALYSIS

9 HEADER ANALYSIS

10 HEADER ANALYSIS

11 HEADER ANALYSIS

12 HEADER ANALYSIS

13 THREADING References or In-Reply-To Fields: Contains the Message-ID assigned to the original message. Used by advance tools (forensic & e-discovery) tools to thread related messages.

14 ANALYSIS Send and receive in different environments Host-based s Webmail Mobile Client/server architecture OS and software differs from those on the client side Protected accounts Require usernames and passwords

15 ANALYSIS Name conventions Corporate: Public: Everything belongs to the domain name Tracing corporate s is easier Because accounts use standard names the administrator establishes

16 HOST BASED Microsoft Outlook! Win XP C:\Documents and Settings\<USERNAME>\Local Settings \Application Data\Microsoft\Outlook\! Win Vista/7/8 C:\Users\<USERNAME>\AppData\Local\Microsoft\Outlook\! Personal Storage Table (*.pst) Default name is Outlook.pst Messages, Contacts, Calendar Entries, Tasks, Notes, etc. Can find multiple archive files Registry key that identifies what PST is being used NTUSER.DAT \Software\Microsoft\WindowsNT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

17 HOST BASED Microsoft Outlook Kernel Outlook PST Viewer ( The software is absolutely free to download and helps in viewing the contents of PST files. The user can open PST files without using MS Office Outlook, that is, MS Office Outlook does not needs to be installed on the computer system. The user can open files easily created using any available version of MS Outlook. The utility displays all the folders such as Inbox, Drafts, Outbox, Sent Items, and so on in the same way as seen in MS Outlook. The software is easy-to-use, easy-to-understand and self-descriptive and provides user-friendly graphical user interface such that no technical expertise is required for operating the software. The tool lets users to view the content of files having minor corruptions. Allows users for viewing the password-protected files even if the password is not known to the user. Helps in opening files that got corrupted due to 2GB size issue.

18 HOST BASED Microsoft Outlook Exchange Offline Folder Files Cached Exchange Mode *.OST File Extension Once user has an active connection to the Exchange server, the user s data is synchronized. 12 months of user data is kept by default. OST files cannot be imported into Outlook for processing. Kernel OST Viewer ( ost2pst.exe will convert OST to PST format for processing. Most forensic suites support OST processing.

19 How Microsoft Outlook Saves, Deletes and Compresses

20 Microsoft Outlook stores messages within a single file. The Outlook file will have a.pst extension. Inbox Message 1 Message 2 Message 3 Sent Items Message 4 Message 5 Deleted Items Outlook.pst

21 User deletes Message 2 and Message 5. Outlook moves the messages to the Deleted Items folder. Inbox Message 1 Message 3 Sent Items Message 4 Deleted Items Message 2 Message 5 Outlook.pst

22 User empties his or her Deleted Items folder. Outlook flags the messages as being removed. Normal user cannot recover the messages. The Outlook file does not get smaller. Inbox Message 1 Message 3 Sent Items Message 4 Deleted Items *Message 2 *Message 5 Outlook.pst

23 User receives Messages 6 and 7. User sends another message (Message 8). The Outlook file gets larger in size. Inbox Message 1 Message 3 Message 6 Message 7 Sent Items Message 4 Message 8 Deleted Items *Message 2 *Message 5 Outlook.pst

24 User deletes Message 6 and Message 8. Outlook moves the messages to the Deleted Items folder. Inbox Message 1 Message 3 Message 7 Sent Items Message 4 Deleted Items *Message 2 *Message 5 Message 6 Message 8 Outlook.pst

25 User empties his or her Deleted Items folder. Outlook flags the messages as being removed. A normal user cannot recover the messages. The Outlook file does not get smaller. Inbox Message 1 Message 3 Message 7 Sent Items Message 4 Deleted Items *Message 2 *Message 5 *Message 6 *Message 8 Outlook.pst

26 User compacts his or her Outlook file. All active messages are moved to the beginning of the file. All messages flagged as being removed are truncated. The Outlook file reduces in size. The removed messages are now located in the unallocated space of the hard drive. Inbox Message 1 Message 3 Message 7 Sent Items Message 4 Deleted Items Outlook.pst *Message 2 *Message 5 *Message 6 *Message 8 Unallocated Space

27 Microsoft Outlook Express Default client prior to Windows Vista/7/8. Uses file extension *.DBX File Location:! Win XP! HOST BASED C:\Documents and Settings\<USERNAME>\Local Settings \Application Data\Identities\<GUID>\Microsoft\Outlook Express Deleted messages are flagged as deleted and not removed from the DBX file until compacted. Cleanup.log records the last date of compaction. Replaced by Windows Mail (Vista/7/8) (*.EML) Processing Most forensic suites supports processing DBX MiTec Mail Viewer

28 SERVERS Computer loaded with software that uses protocols for its services POP (Post Office Protocol) By default, is downloaded to local computer and deleted on server. IMAP (Internet Message Access Protocol) By default, is kept on the server. storage Database Flat file Logs Default or manual Continuous and circular

29 SERVERS Deployed by most corporate environments Could be physically offsite Acquisition could be difficult Massive amount of data Downtime can be an issue to consider. Log information content Sending IP address Receiving and reading date and time System-specific information Contact suspect s network administrator as soon as possible s can recover deleted s Similar to deletion of files on a hard drive

30 MICROSOFT SERVER Microsoft Exchange (Exchange) Leader in the server market Most often a standalone server Container holding individual mailboxes Messages, Attachments, Contacts, Notes, Tasks, Calendar Entires, etc. Information Store files Database files *.edb (Extensible Storage Engine) Proprietary Microsoft Database priv1.edb is the default database name. Database files *.stm (Prior to Exchange 2007) Streaming file that contains multimedia data formatted as MIME data.

31 MICROSOFT SERVER Microsoft Exchange Exchange Log Files (*.log) Very important to acquire along with the EDB files. All transactions for the server are written to the log prior to being committed to the Exchange database. Deletion Process Similar to PST files Deleted Items Folder Exchange Dumpster s are retained for 14 days Accounts are retained for 30 days Acquisition Options Physical / Logical Image Logical Export of the Exchange Files Exchange services must be stopped. Administrators can export individual mailboxes to PST files.

32 Understanding How Is Sent and Received

33 A ! File File B District Office Staff C Headquarters Staff! IMAP Users Internet D I H G Mobile Staff E F

34 POP Client to POP Client Message

35 User A sends an to User B. The is transferred to the server via an Internet connection. File A B C Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

36 The is now located in User B s Inbox on the server and User A s Sent Items on the local file server. File A B C User B s Inbox User A s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

37 User B logs into the system, the is moved from the server to User B s Inbox on the local file server. User B s Inbox File A B C User B s Inbox User A s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

38 When the transfer is complete, the is located on the file server within User A s Sent Items and User B s Inbox. User B s Inbox File A B C User A s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

39 Mobile POP Client to POP Client Message

40 User D sends an to User B. The is transferred to the server via an Internet connection. File A B C Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

41 The is now located in User B s Inbox on the server and User D s Sent Items on his laptop. File A B C User B s Inbox Internet District Office Staff D User D s Sent Items E I H G HQ Staff! IMAP Users Mobile Staff F

42 When User B logs into the system, the is moved from the server to User B s Inbox on the local file server. User B s Inbox File A B C User B s Inbox Internet District Office Staff D User D s Sent Items E I H G HQ Staff! IMAP Users Mobile Staff F

43 When the transfer is complete, the resides on User D s laptop within the Sent Items and User B s Inbox on the local file server. User B s Inbox File A B C Internet District Office Staff D User D s Sent Items E I H G HQ Staff! IMAP Users Mobile Staff F

44 IMAP Client to IMAP Client Message

45 User G sends an to User H. When User G sends the , the server recognizes that the recipient's account exists on the same server. File A B User H s Inbox C User G s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

46 The is now located in User H s Inbox and User G s Sent Items, both on the server. File A B User H s Inbox C User G s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

47 User H logs into the system and accesses the sent from User G. File A B User H s Inbox C User G s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

48 Putting It All Together...

49 To bring it all together, let s say User G sends an to User A, User D and User H. User A s Inbox File A B User D s Inbox User H s Inbox C User G s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

50 User A, User D and User H log into their . User A s Inbox User D s Inbox User H s Inbox File A B C User G s Sent Items Internet District Office Staff D E I H G HQ Staff! IMAP Users Mobile Staff F

51 User A and User D are configured to use POP; their messages would be found on their respective computers. File A B C User G s Sent Items Internet User A s Inbox District Office Staff D User D s Inbox E I H G HQ Staff! IMAP Users Mobile Staff F

52 User G and User H are configured to use IMAP; their messages would be found on the server. File A B User H s Inbox C User G s Sent Items Internet User A s Inbox District Office Staff D User D s Sent Items E I H G HQ Staff! IMAP Users Mobile Staff F

53 ACCESSDATA FTK FTK Can index data on a disk image or an entire drive for faster data retrieval Filters and finds files specific to clients and servers To recover from Outlook and Outlook Express AccessData integrated dtsearch dtsearch builds a b-tree index of all text data in a drive, an image file, or a group of files

54 WEBMAIL FORENSICS messages stored on ISP servers In addition to storing messages, ISP may also maintain user s IP addresses and subscriber information Important to establish accounts and how the user has been accessing those accounts. Artifacts can be recovered from Internet browser cache folders. Usually stored as compressed archives. Forensic tools must identify the file type and mount the compressed files in order for search strings to be effective. Gmail uses a no cache options Another important reason to process RAM captures and the pagefile.

Analysis Villanova University Department of Computing Sciences D. Justin Price Fall 2014

Analysis Villanova University Department of Computing Sciences D. Justin Price Fall 2014 Email Analysis Villanova University Department of Computing Sciences D. Justin Price Fall 2014 EMAIL ANALYSIS With the increase in e-mail scams and fraud attempts with phishing or spoofing Investigators

More information

Guide to Computer Forensics. Third Edition. Chapter 12 Chapter 12 Investigations

Guide to Computer Forensics. Third Edition. Chapter 12 Chapter 12  Investigations Guide to Computer Forensics and Investigations Third Edition Chapter 12 Chapter 12 E-mail Investigations Objectives Explain the role of e-mail in investigations Describe client and server roles in e-mail

More information

10 th National Investigations Symposium

10 th National Investigations Symposium 10 th National Investigations Symposium AVOIDING FORENSIC PITFALLS First Responders Guide to Preserving Electronic Evidence 6 November 2014 Bronwyn Barker Electronic Evidence Specialist Investigation 5

More information

How To Remove Only Outlook From Office 2007 Pst Files Outlook

How To Remove Only Outlook From Office 2007 Pst Files Outlook How To Remove Only Outlook From Office 2007 Pst Files Outlook Tip If you want to import or restore only a few items from an Outlook Data File (.pst), you can open the Outlook Data File, and then, in the

More information

How To Remove Only Outlook From Office 2007 Pst Files

How To Remove Only Outlook From Office 2007 Pst Files How To Remove Only Outlook From Office 2007 Pst Files If a password was assigned to the Outlook Data File (.pst), enter the Tip If you want to import or restore only a few items from an Outlook Data File

More information

File Backup Windows Live Mail Contacts Folder Location Xp

File Backup Windows Live Mail Contacts Folder Location Xp File Backup Windows Live Mail Contacts Folder Location Xp Our old xp computer died and I did not have a backup of our windows live mail contacts. /89411-where-windows-live-mail-address-book-contacts-folder-located.html

More information

Stellar OST to PST Converter - Technician 8.0. User Guide

Stellar OST to PST Converter - Technician 8.0. User Guide Stellar OST to PST Converter - Technician 8.0 User Guide Overview Stellar OST to PST Converter - Technician, offers a complete solution to convert OST files to MS Outlook (PST) files. The software converts

More information

File Backup Windows Live Mail 2012 Contacts Import Pst

File Backup Windows Live Mail 2012 Contacts Import Pst File Backup Windows Live Mail 2012 Contacts Import Pst Outlook Express files. Find and copy the entire Outlook Express data folder on Windows XP. Open the Live mail address book module, Go to File, Import.

More information

is still the most used Internet app. According to some studies around 85% of Internet users still use for communication.

is still the most used Internet app. According to some studies around 85% of Internet users still use  for communication. 1 E-mail is still the most used Internet app. According to some studies around 85% of Internet users still use e-mail for communication. Electronic mail is a method to exchange digital messages from a

More information

Lesson 2: Working with

Lesson 2: Working with Lesson 2: Working with Email Learning Objectives After studying this lesson, you will be able to: Set email options Send messages Handle incoming messages Organize messages 2 Introducing Outlook 2010 Outlook:

More information

Shoviv Exchange Recovery Manager

Shoviv Exchange Recovery Manager - Exchange migration to recover and migrate corrupted EDB file, Office365 mailboxes, Live Exchange server, Outlook profile mailbox(s) into Office365(public/archive mailbox), Live Exchange(public/archive

More information

Stellar Phoenix Outlook PST Repair - Technician User Guide

Stellar Phoenix Outlook PST Repair - Technician User Guide Stellar Phoenix Outlook PST Repair - Technician 8.0.0.0 User Guide Overview Stellar Phoenix Outlook PST Repair - Technician offers a complete solution to repair damaged Microsoft Outlook Personal Storage

More information

Kernel for Exchange Server. Installation and Configuration Guide

Kernel for Exchange Server. Installation and Configuration Guide Kernel for Exchange Server Installation and Configuration Guide Table of Contents Table of Contents... 2 1. Introduction... 3 2. Requirements and Prerequisites... 3 2.1 Basic System Requirements... 3 2.2

More information

An Overview of Webmail

An Overview of Webmail An Overview of Webmail Table of Contents What browsers can I use to view my mail? ------------------------------------------------------- 3 Email size and storage limits -----------------------------------------------------------------------

More information

Objectives. What Is and How Does It Work? Objectives. and How Does It Work? and How Does It Work?

Objectives. What Is  and How Does It Work? Objectives. and How Does It Work? and How Does It Work? Objectives E-MAIL BASICS Evaluating Integrated Browser E-Mail Programs and a Web-Based E-Mail Service New Perspectives on THE INTERNET Learn about e-mail and how it works Configure and use two popular

More information

Exchange Protection Whitepaper

Exchange Protection Whitepaper Whitepaper Contents 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Introduction... 2 Documentation... 2 Licensing... 2 Exchange Server Protection overview... 3 Supported platforms... 3 Requirements by platform... 3 Remote

More information

User Manual. [Outlook Web App 2013] Central Information Systems Division

User Manual. [Outlook Web App 2013] Central Information Systems Division [Outlook Web App 2013] Central Information Systems Division Table of Contents 1. To Login... 4 2. To Logout... 5 3. Change Password... 5 4. Email Messaging... 6 4.1 Create a New Mail... 6 4.2 To Save Mail

More information

Paraben Examiner 9.0 Release Notes

Paraben  Examiner 9.0 Release Notes Paraben E-mail Examiner 9.0 Release Notes 1 Paraben Corporation Welcome to Paraben s E-mail Examiner 9.0! Paraben s Email Examiner-EMX allows for the forensic examination of the most popular local e-mail

More information

Outlook Express. Setting up the View. Toolbar. Listing of messages OUTLOOK BAR. Status Bar

Outlook Express. Setting up the View. Toolbar. Listing of messages OUTLOOK BAR. Status Bar Outlook Express Toolbar Listing of messages OUTLOOK BAR Status Bar Setting up the View Before using Microsoft Outlook, you need to understand the Layout of the program. To setup a view that you are comfortable

More information

File Backup Windows Live Mail s Into

File Backup Windows Live Mail s Into File Backup Windows Live Mail 2012 Emails Into Oct 13, 2014. I have Windows 8.1 but was using Windows Live Mail because Windows So I have all the Windows Live files containing all my accounts, contacts,

More information

File Backup Windows Live Mail s Stored

File Backup Windows Live Mail s Stored File Backup Windows Live Mail 2011 Emails Stored Have you accidentally deleted an email folder in Windows Live Mail and are unable refer to step by step instructions given below for recovering emails using

More information

Chapter 9: Internet

Chapter 9: Internet Chapter 9: Internet Email Internet email has become one of the most popular applications on the Internet. An Internet experience is not complete without the usage of email. In this chapter we shall be

More information

File Backup Windows Live Mail 2012 Contacts Location Xp

File Backup Windows Live Mail 2012 Contacts Location Xp File Backup Windows Live Mail 2012 Contacts Location Xp One the first screen of the wizard, select Export to a file, then select Next. Outlook Export to a button if you want to avoid typing the full path.

More information

Outline. Tools

Outline.  Tools E-mail Tools 1 Outline Goals and Objectives Topics Headlines Introduction Communication Protocols Content, Attachments, and Etiquette Acronyms and Emoticons E-mail clients and Webbased E-mail Eudora Outlook

More information

AccessData Advanced Forensics

AccessData Advanced Forensics This advanced five-day course provides the knowledge and skills necessary to install, configure and effectively use Forensic Toolkit (FTK ), FTK Imager Password Recovery Toolkit (PRTK ) and Registry Viewer.

More information

Migration Instructions for All Users

Migration Instructions for All Users Introduction: Migration Instructions for All Users Welcome to HBU s Outlook Live email system. This document provides guidance on how to migrate your emails, calendar entries, tasks and personal contacts

More information

Introduction. Logging in. WebMail User Guide

Introduction. Logging in. WebMail User Guide Introduction modusmail s WebMail allows you to access and manage your email, quarantine contents and your mailbox settings through the Internet. This user guide will walk you through each of the tasks

More information

Introduction to Apple Mail with IMAP

Introduction to Apple Mail with IMAP Introduction to Apple Mail with IMAP Version 4 October 2008 Massachusetts Institute of Technology Getting Started This Quick Start class assumes that: 1. Apple Mail is configured for use at MIT. If you

More information

Overview. Top. Welcome to SysTools MailXaminer

Overview. Top. Welcome to SysTools MailXaminer Table of Contents Overview... 2 System Requirements... 3 Installation of SysTools MailXaminer... 4 Uninstall Software... 6 Software Menu Option... 8 Software Navigation Option... 10 Complete Steps to Recover,

More information

e-storage Mail Archive e-storage Mai Archive

e-storage Mail Archive e-storage Mai Archive e-storage Mai Archive 1 TABLE OF CONTENTS 1.0 Overview..... 4 2.0 e-storage Mail Archive..... 5 2.1 Introduction... 5 2.2 Requirements..... 6 2.3 Create new archive profile..... 7 2.3.1 Gmail Account......

More information

Outlook True Archive Main Screen

Outlook True Archive Main Screen Outlook True Archive Main Screen Select a source PST for archiving. Select the destination PST into which your mail will be archived. Click the Configure button to access the advanced options. Click the

More information

OWA 2013 Getting Started

OWA 2013 Getting Started OWA 2013 Getting Started Our mail server has been upgraded to the Exchange 2013 this has created some changes in our webmail environment. Email A new modern style has been applied to web interface to align

More information

Manual Archive Outlook 2007 Doesn't Work

Manual Archive Outlook 2007 Doesn't Work Manual Archive Outlook 2007 Doesn't Work How to Set the AutoArchive Properties for a Folder in Outlook 2007:. manually moving items to your online archive unless you are running out of space and need to

More information

Webmail 7.0 is an online client which runs in your web browser. Webmail 7.0 allows you to access your , contact list, and calendar from

Webmail 7.0 is an online  client which runs in your web browser. Webmail 7.0 allows you to access your  , contact list, and calendar from Webmail 7.0 is an online email client which runs in your web browser. Webmail 7.0 allows you to access your email, contact list, and calendar from any computer with an internet connection and a web browser.

More information

This document contains information that will help you to quickly get started and manage your accounts within Webmail.

This document contains information that will help you to quickly get started and manage your  accounts within Webmail. This document contains information that will help you to quickly get started and manage your email accounts within Webmail. 1 2 Contents About Webmail... 3 Tour your Email... 3 Importing Contacts... 3

More information

File Backup Windows Live Mail 2011 Calendar Corruption

File Backup Windows Live Mail 2011 Calendar Corruption File Backup Windows Live Mail 2011 Calendar Corruption This error indicates an issues with email database and it might be corrupt. Create a backup copy of Windows live email database located at: C:/Program

More information

Header- A Forensic Key to Examine an

Header- A Forensic Key to Examine an E-Mail Header- A Forensic Key to Examine an E-Mail Swapnil Gupta 1, Kopal Gupta 2, Dr. Anu Singla 3 1,2,3 Institute of Forensic Science & Criminology, Bundelkhand University, Jhansi (U.P.), India ---------------------------------------------------------------------***---------------------------------------------------------------------

More information

WebMail. A NWOCA Training Session

WebMail. A NWOCA Training Session WebMail A NWOCA Training Session Table of Contents Logging on to NWOCA WebMail...1 Mailboxes (Folders)...2 Reading an Email Message...4 Sending an Email Message...5 Replying to and Forwarding Messages...9

More information

Microsoft PST Capture & C2C s PST Enterprise A Feature Comparison for PST Migration & Elimination

Microsoft PST Capture & C2C s PST Enterprise A Feature Comparison for PST Migration & Elimination Microsoft & C2C s A Feature Comparison for Migration & Elimination Microsoft & C2C s A Feature Comparison for Migration & Elimination The Microsoft tool is best suited to small businesses using Exchange

More information

File Backup Windows Live Mail 2011 For Gmail Imap Settings

File Backup Windows Live Mail 2011 For Gmail Imap Settings File Backup Windows Live Mail 2011 For Gmail Imap Settings Windows Live Mail is a free download from Microsoft. It's the If you choose to, after setting up IMAP access to your account you could Configure

More information

Instructions To Remove Outlook Express From Xp Computer

Instructions To Remove Outlook Express From Xp Computer Instructions To Remove Outlook Express From Xp Computer Windows XP computers come with the email application pre-installed in it. You will find the necessary Outlook files in the installation disk of Windows

More information

User Guide. Chapter 23. Saf User Guide

User Guide. Chapter 23. Saf User Guide User Guide Chapter 23 SafeMail User Guide Table of Contents About SafeMail... 4 About this Guide... 4 Who Should Use this Guide... 4 Accessing your Website... 4 I. Accessing SafeMail... 5 II. Reading Email

More information

Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

https://exchange.billings.k12.mt.us Enter your username Enter your password

https://exchange.billings.k12.mt.us Enter your username Enter your password https://exchange.billings.k12.mt.us Enter your username Enter your password Available folders This is the folder view. From here you can view your inbox, calendar, or any other folder shown on the left.

More information

Accessing WebMail. Logging In. Check your Mail. Main Mail Screen. Reading Messages. Search. Sending a new message

Accessing WebMail. Logging In. Check your Mail. Main Mail Screen. Reading Messages. Search. Sending a new message WebMail Help User Manual Index Accessing WebMail Logging In Check your Mail Main Mail Screen Reading Messages Search Sending a new message Address book Spelling Attaching files Html Text Managing addresses

More information

Web Outlook. Tenafly Technology Department

Web Outlook. Tenafly Technology Department Tenafly Technology Department Web Outlook If you would like to begin using the Web-based Outlook service to check your email remotely, you can do so immediately by visiting the Tenafly School District

More information

Getting started in Outlook Web App

Getting started in Outlook Web App Getting started in Outlook Web App Outlook Web App is a way of getting to your mail from a browser connection, either at the campuses or from home. Everything you do in Outlook Web App will be transferred

More information

File Backup Windows Live Mail Contacts Folder Located Book (contacts)

File Backup Windows Live Mail Contacts Folder Located Book (contacts) File Backup Windows Live Mail Contacts Folder Located Book (contacts) With today's use of e-mail you almost can't afford to lose a single e-mail so let alone your entire mail archive, For Outlook 2007

More information

Life after Lotus Notes

Life after Lotus Notes Welcome to Gmail What's different, at a glance... Now that you've switched from Lotus Notes to Google Apps, here are some tips on beginning to use Gmail as your new mail program. In Lotus Notes, you...

More information

Computer Forensics: Investigating Data and Image Files, 2nd Edition. Chapter 3 Forensic Investigations Using EnCase

Computer Forensics: Investigating Data and Image Files, 2nd Edition. Chapter 3 Forensic Investigations Using EnCase Computer Forensics: Investigating Data and Image Files, 2nd Edition Chapter 3 Forensic Investigations Using EnCase Objectives After completing this chapter, you should be able to: Understand evidence files

More information

LAUSD ITD Service Desk. Microsoft Outlook Web Access User Guide Windows OS

LAUSD ITD Service Desk. Microsoft Outlook Web Access User Guide Windows OS LAUSD ITD Service Desk Microsoft Outlook Web Access User Guide Windows OS (Revised 12/31/07) LAUSD ITD Service Desk 333 S. Beaudry Ave. 9 th Floor Phone 213-241-5200 Fax 213-241-5224 Table of Contents

More information

1. Launch your web browser. 2. Go to < Enter your address and Password as requested. Click on login.

1. Launch your web browser. 2. Go to <  Enter your  address and Password as requested. Click on login. 1. Launch your web browser. 2. Go to Enter your Email address and Password as requested. Click on login. 1. Enter your complete email address; i.e. johnsmith@

More information

Microsoft Office 2007, 2010 Registry Artifacts Dustin Hurlbut September 16, 2010

Microsoft Office 2007, 2010 Registry Artifacts Dustin Hurlbut September 16, 2010 Microsoft Office 2007, 2010 Registry Artifacts Dustin Hurlbut September 16, 2010 INTRODUCTION Previous versions of Microsoft Office used application specific registry artifacts to track opened documents.

More information

How Do I Transfer My Outlook s From One Computer To Another

How Do I Transfer My Outlook s From One Computer To Another How Do I Transfer My Outlook 2010 Emails From One Computer To Another Outlook 2010 You can export your email and mail folders, calendar and appointments, tasks, notes and additional content from Outlook.pst

More information

Getting Started With Outlook Express For Windows 2000/XP Author Marcie Matsuo Revised by Darren Kato

Getting Started With Outlook Express For Windows 2000/XP Author Marcie Matsuo Revised by Darren Kato WIN9X015 November 2005 Getting Started With Outlook Express For Windows 2000/XP Author Marcie Matsuo Revised by Darren Kato Introduction...1 What is Outlook Express...1 Requirements...2 Where do I get

More information

56 Common Problems and Solutions

56 Common  Problems and Solutions 56 Common Email Problems and Solutions W W W. Q W E R T Y T S. C O M Uncopyright I hereby waive all claim of copyright in this work; it may be used or altered in any manner without attribution or notice

More information

Using the Inbox to Manage Messages

Using the Inbox to Manage Messages 6 Using the Inbox to Manage Messages You can use the Outlook Inbox folder as well as the other mail-item folders (Drafts, Outbox, and Sent Items) to receive, send, and manage email, and send fax messages.

More information

Stellar Phoenix Mailbox Exchange. Recovery 8.0

Stellar Phoenix Mailbox Exchange. Recovery 8.0 Stellar Phoenix Mailbox Exchange Recovery 8.0 Overview Stellar Phoenix Mailbox Exchange Recovery offers a complete solution to recover corrupt MS Exchange database files. The software recovers corrupt

More information

Stellar OST to PST Converter - Technician 8.0. Installation Guide

Stellar OST to PST Converter - Technician 8.0. Installation Guide Stellar OST to PST Converter - Technician 8.0 Installation Guide Overview Stellar OST to PST Converter - Technician, offers a complete solution to convert OST files to MS Outlook (PST) files. The software

More information

User Manual of Webmail Version 5

User Manual of Webmail Version 5 User Manual of Webmail Version 5 English Version: 1.0 Page 1 of 13 TABLE OF CONTENTS 1. ACCESS...3 1.1 Accessing to Webmail 5...3 2. COMPOSE AND SEND E-MAIL MESSAGE...4 2.1 Composing a new E-mail message...4

More information

Using Your New Webmail

Using Your New Webmail Using Your New Webmail Table of Contents Composing a New Message... 2 Adding Attachments to a Message... 4 Inserting a Hyperlink... 6 Searching For Messages... 8 Downloading Email from a POP3 Account...

More information

Install & Configure Thunderbird E- mail

Install & Configure Thunderbird E- mail Install & Configure Thunderbird E- mail Thunderbird is a free, open source mail client that runs on Windows, Mac, and Linux. This document will cover specific information about setting up Thunderbird 2

More information

Web Mail Check v 1.0

Web Mail Check v 1.0 Web Mail Check v 1.0 TABLE OF CONTENTS LAUNCHING WEB MAIL CHECK... 3 HOME PAGE... 4 LOG IN... 4 LANGUAGE... 5 DIRECTIONS... 5 READING MESSAGES... 8 HEADERS... 10 PRINTER FRIENDLY VERSION... 11 REPLYING

More information

Mail overview. What you ll see in Mail.

Mail overview. What you ll see in Mail. Page 1 of 7 Mail overview When you open Outlook Web App, the first thing you ll see is your Inbox. This is where messages sent to you arrive, and this is where you ll probably spend the most time reading

More information

Contents. Management. Client. Choosing One 1/20/17

Contents.  Management.  Client. Choosing One 1/20/17 Contents Email Management CSCU9B2 Email clients choosing and using Email message header and content Emailing to lists of people In and out message management Mime attachments and HTML email SMTP, HTTP,

More information

Warrick County School Corp.

Warrick County School Corp. Warrick County School Corp. Ou Microsoft Outlook Web Access Guide Getting StartedStyarted Go to the Warrick County School Corp. Home Page (www.warrick.k12.in.us) and click the Web Mail link. Logging In

More information

Processing Microsoft Outlook PST Files

Processing   Microsoft Outlook PST Files Electronic Records Modules Electronic Records Committee Congressional Papers Section Society of American Archivists Processing Email: Microsoft Outlook PST Files Katie Delacenserie Senate Committee on

More information

Source: https://articles.forensicfocus.com/2018/03/02/evidence-acquisition-using-accessdata-ftk-imager/

Source: https://articles.forensicfocus.com/2018/03/02/evidence-acquisition-using-accessdata-ftk-imager/ by Chirath De Alwis Source: https://articles.forensicfocus.com/2018/03/02/evidence-acquisition-using-accessdata-ftk-imager/ Forensic Toolkit or FTK is a computer forensics software product made by AccessData.

More information

Life After Webmail Reference Guide

Life After Webmail Reference Guide Life After Webmail Reference Guide (An Introduction to Outlook Web Access 2007 Client User Interface) https://owa.wiu.k12.pa.us Westmoreland Intermediate Unit Information Technology Services 102 Equity

More information

USER GUIDE. EBMS SECURE MailGate

USER GUIDE. EBMS SECURE  MailGate USER GUIDE EBMS SECURE EMAIL MailGate USER REGISTRATION When a secure email is sent to a new user, Secure Mailbox generates a notification and sends it to their email account. The notification contains

More information

CLOUD MAIL End User Guide. (Version 1.0)

CLOUD MAIL End User Guide. (Version 1.0) End User Guide () Table of Contents 1. How to Activate New Account... 3 2. How to Compose a New Email Message... 5 3. How to View and Edit the Email Draft... 6 4. How to View Sent Email Messages... 6 5.

More information

Getting Started With Web Mail Help Desk

Getting Started With Web Mail Help Desk INET010 Feb 2008 Getting Started With Web Mail Help Desk Overview... 1 Login and Logout... 2 Basic Navigation... 2 Basic Tasks... 2 Using Folders... 5 Attachments... 7 Address Book... 8 Options and Other

More information

File Backup Windows Live Mail 2012 Contacts Import

File Backup Windows Live Mail 2012 Contacts Import File Backup Windows Live Mail 2012 Contacts Import Nov 11, 2014. I am running Live Mail 2012 on my Windows 7 Ultimate PC. I copied all the files in my Live Mail Directory and copied them to my Windows

More information

Along the top of the Inbox is a toolbar with icons for commonly used functions within .

Along the top of the Inbox is a toolbar with icons for commonly used functions within  . Outlook Inbox Once you log on to Outlook on the Web, the default page is your Outlook Inbox. For detailed information about logging into your account see: Getting Started - Logging On. The Inbox Viewer

More information

School Mail System. - Access through Outlook Web Access. User Guide FOR. Education Bureau (EDB)

School Mail System. - Access through Outlook Web Access. User Guide FOR. Education Bureau (EDB) School Mail System - Access through Outlook Web Access User Guide FOR Education Bureau (EDB) Version: 1.1 February 2008 The Government of the Hong Kong Special Administrative Region The contents of this

More information

AccessData. Forensic Toolkit. Upgrading, Migrating, and Moving Cases. Version: 5.x

AccessData. Forensic Toolkit. Upgrading, Migrating, and Moving Cases. Version: 5.x AccessData Forensic Toolkit Upgrading, Migrating, and Moving Cases Version: 5.x 1 AccessData Legal and Contact Information Document date: March 27, 2014 Legal Information 2014 AccessData Group, Inc. All

More information

VRABE Outlook Web Access (OWA)Basics

VRABE Outlook Web Access (OWA)Basics VRABE Outlook Web Access (OWA)Basics Logging On 1. Open Internet Explorer. 2. If you are at RHS, you MUST type http://rockmail/exchange. 3. Outside Rockville High (e.g. home, work) type http://mail.vernonct.org/exchange

More information

NEOMIN Webmail Instructions

NEOMIN Webmail Instructions NEOMIN Webmail Instructions Lisa Collins Created: Nov 10 th, 2009 Revised: Jan 25 th, 2010 1 Table of Contents Logging In 3 Viewing your Inbox/Emails 4-5 Printing & Deleting Emails 5 Replying & Forwarding

More information

New Web Outlook. Look and Feel: You can personalize your Web Outlook by using Themes. Click on Options and select the desired Theme.

New Web Outlook. Look and Feel: You can personalize your Web Outlook by using Themes. Click on Options and select the desired Theme. New Web Outlook Look and Feel: You can personalize your Web Outlook by using Themes. Click on Options and select the desired Theme. Reading Messages: You can double click to view an email message. Options

More information

Outlook 2007 Manually Archive Calendar Not Working

Outlook 2007 Manually Archive Calendar Not Working Outlook 2007 Manually Archive Calendar Not Working These items can be Email messages, Calendar items, Tasks, Notes, Journal entries. When AutoArchive is not working properly, the first thing we should

More information

Tutorial for Horde . Contents

Tutorial for Horde  . Contents Tutorial for Horde email Contents Basics 1. Starting Horde 2. Reading emails 3. Replying / Forwarding 4. New email 5. Attachments 6. Save as Draft 7. Address books Adding contact details and accessing

More information

A. Outlook Web App -

A. Outlook Web App - A. Outlook Web App - Email 1. Outlook Web App (OWA) Vs. Outlook Outlook refers to an application that is physically installed on a computer. Whereas a Web Application is something that is not installed

More information

Getting Started With Web Mail

Getting Started With Web Mail INET002 October 2005 Getting Started With Web Mail ITS Staff Overview Overview... 1 Logon and Logout... 2 Basic Navigation... 3 Basic Tasks... 3 Using Folders... 5 Attachments... 6 Address Book... 7 Options

More information

Kerio Outlook Connector (Offline Edition)

Kerio Outlook Connector (Offline Edition) Kerio Outlook Connector (Offline Edition) Best practice deployment guide Date: April 20, 2011 2012 Kerio Technologies s.r.o. All rights reserved. Kerio Connect 8.0 includes a new generation version of

More information

Ontrack PowerControls for Microsoft Exchange Server ReadMe

Ontrack PowerControls for Microsoft Exchange Server ReadMe Ontrack PowerControls for Microsoft Exchange Server ReadMe Contents About the Free Trial Supported Environments User Credential and Permission Requirements Mailbox Creation Wizard Upgrading Ontrack PowerControls

More information

Oracle Beehive. Webmail Help and Release Notes Release 2 ( )

Oracle Beehive. Webmail Help and Release Notes Release 2 ( ) Oracle Beehive Webmail Help and Release Notes Release 2 (2.0.1.7) E20318-01 July 2012 Document updated July 2012 Oracle Beehive Webmail is a Web-based e-mail application that provides instant anytime access

More information

Electronic Mail

Electronic Mail Email Electronic Mail Electronic mail paradigm Most heavily used application on any network Electronic version of paper-based office memo Quick, low-overhead written communication Dates back to time-sharing

More information

How Do I Retrieve My Archive s In Outlook 2010 To Hard Drive

How Do I Retrieve My Archive  s In Outlook 2010 To Hard Drive How Do I Retrieve My Archive Emails In Outlook 2010 To Hard Drive 3.1.1 Outlook 2010/2013 In the context of this article, archiving is the process of removing email from the WPI IMPORTANT NOTE: If you

More information

Manually Archive Calendar Items Outlook 2007

Manually Archive Calendar Items Outlook 2007 Manually Archive Calendar Items Outlook 2007 Items moved to an Archive.pst file are still accessible by opening the file through in Outlook 2007 Exchange - Open a Resource Calendar in Outlook 2007. This

More information

Backing Up: Copying Files from your School Computer to a Network Folder or Flash Drive

Backing Up: Copying Files from your School Computer to a Network Folder or Flash Drive Backing Up: Copying Files from your School Computer to a Network Folder or Flash Drive Please use the directions below to copy any documents you have stored on your computer hard drive AND your Network

More information

Hostopia WebMail Help

Hostopia WebMail Help Hostopia WebMail Help Table of Contents GETTING STARTED WITH WEBMAIL...5 Version History...6 Introduction to WebMail...6 Cookies and WebMail...6 Logging in to your account...6 Connection time limit...7

More information

Oracle Connector for Outlook User s Guide

Oracle Connector for Outlook User s Guide Oracle Connector for Outlook 2003 User s Guide MIT IS&T Oracle Connector for Outlook Release Team Revised: January 7, 2005 MIT IS&T Oracle Connector for Outlook Release Team MIT-OCFO-2003-UG.doc Revised

More information

AccessMail Users Manual for NJMLS members Rev 6

AccessMail Users Manual for NJMLS members Rev 6 AccessMail User Manual - Page 1 AccessMail Users Manual for NJMLS members Rev 6 Users Guide AccessMail User Manual - Page 2 Table of Contents The Main Menu...4 Get Messages...5 New Message...9 Search...11

More information

Outlook tips for road warriors

Outlook tips for road warriors Outlook 2000/2002: Tips for road warriors You use Outlook to send and receive e-mail and access your calendar and contacts when you re at the office, but what about when you re on the road? Don t worry

More information

1. Overview... 2 Documentation... 2 Licensing... 2 File Archiving requirements... 2

1. Overview... 2 Documentation... 2 Licensing... 2 File Archiving requirements... 2 User Guide BackupAssist User Guides explain how to create and modify backup jobs, create backups and perform restores. These steps are explained in more detail in a guide s respective whitepaper. Whitepapers

More information

Mobile er (Version 1.0) User's Guide

Mobile  er (Version 1.0) User's Guide Mobile E-mailer (Version 1.0) User's Guide Trademarks Microsoft, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

More information

Using web-based

Using web-based Using web-based Email 1. When you want to send a letter to a friend you write it, put it in an envelope, stamp it and put it in the post box. From there the postman picks it up, takes it to a sorting office

More information

Paraben s Network Examiner 7.0 Release Notes

Paraben s Network  Examiner 7.0 Release Notes Paraben s Network E-mail Examiner 7.0 Release Notes 1 Paraben Corporation Welcome to Paraben s Network E-mail Examiner 7.0! Paraben s Network E-mail Examiner-NEMX is an advanced network e-mail archive

More information

MICROSOFT OUTLOOK 2007 REPAIR MANUAL

MICROSOFT OUTLOOK 2007 REPAIR MANUAL 08 December, 2017 MICROSOFT OUTLOOK 2007 REPAIR MANUAL Document Filetype: PDF 135.12 KB 0 MICROSOFT OUTLOOK 2007 REPAIR MANUAL Click on the Address Books tab at the far end of the tabs menu. So you require

More information

CSN08101 Digital Forensics. Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak

CSN08101 Digital Forensics. Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak CSN08101 Digital Forensics Lecture 6: Acquisition Module Leader: Dr Gordon Russell Lecturers: Robert Ludwiniak Objectives Storage Formats Acquisition Architecture Acquisition Methods Tools Data Acquisition

More information