Use
How to Use a Message Store Viewer: Step-by-Step Guide
1. Prepare your environment
- Install the Message Store Viewer application or load the portable executable.
- Obtain the message store file (e.g., PST, OST, EDB, or mbox) and make a backup copy.
- Verify permissions so your user account can read the file.
2. Open the message store file
- Launch the viewer and choose File → Open or Open Store.
- Select the backed-up message store file. For large files, allow extra time for indexing.
3. Let the viewer index and parse
- Allow the tool to index the store so folders, messages, and attachments become searchable.
- Monitor progress; some viewers show parsing logs or errors for corrupted items.
4. Navigate the mailbox structure
- Use the left-pane folder tree to browse mailboxes, folders, and subfolders.
- Expand items to reveal message lists; use column headers (Date, From, Subject) to sort.
5. Search and filter messages
- Use the search bar to query by sender, recipient, subject, date range, or keywords.
- Apply filters for unread, flagged, attachments present, or specific date ranges.
6. View message contents and headers
- Select a message to see the preview pane with body text (HTML or plain).
- View full email headers (Received, Return-Path, SPF, DKIM) via a header or properties option for forensic analysis.
7. Inspect and extract attachments
- Open attachments directly or export them to a folder.
- Scan attachments with antivirus if investigating suspicious content.
8. Recover deleted or hidden items (if supported)
- Use recovery or hidden-items features to locate soft-deleted or recoverable messages.
- Follow tool-specific steps to undelete or export recovered items.
9. Export and save results
- Export messages or folders to PST, EML, MSG, or MBOX formats as needed.
- Save search results or generate reports (CSV, PDF) for documentation.
10. Document findings and maintain chain of custody
- Record file hashes, timestamps, and export actions for forensic integrity.
- Keep logs of who accessed the store and what was exported.
Tips and precautions
- Work on a copy of the original file to avoid accidental modification.
- Use a trusted, up-to-date viewer and keep antivirus active.
-
Leave a Reply