Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Outlook PST & OST Deleted File Recovery

This script is designed to locate and recover deleted OST and PST files.

Each file is located using a keyword search for its file-signature. The file-size is read from an offset within the file that depends on the file's type (ANSI or Unicode).

Note that complete recovery of a PST or OST files will be impossible if the file in question is fragmented or overwritten. The former is quite often the case with large PST/OST files even if they haven't been overwritten.

It may be possible to use either the Microsoft PST or OST repair tool to recover some content from a file that has only been partially recovered.

This script was last tested using EnCase 8.01.00.69.

Download Now



Version: 2.2
Tested with:
EnCase Forensic 7.12
Developer: Simon Key
Category: Artifact

10407 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
9974 Downloads
App
Artifact

Cortana Search Decoder

Decodes the search terms stored in IndexedDB.edb files used by the Microsoft Windows Cortana search function.
By Simon Key
7638 Downloads
App
Artifact

ShellBags Parser

Parses recent-folder view settings maintained by the Microsoft Windows operating system.
By Simon Key
381 Downloads
App
Artifact

User Assist Registry Value Decoder

Decodes data used by the Microsoft Windows operating system to populate each user's start menu with frequently used applications.
By Simon Key
226 Downloads
App