Extract messages from OST/PST files?

Question

The company I work for is in the middle of a legal dispute. As part of the dispute we have been asked to provide all emails SENT TO or RECEIVED from a list of 141 individuals during a 4 month time span.

There are about 12 people in the company, we use Outlook 2010, and our mail is hosted Exchange. The hosting company said they cannot help us, other than to export all our mail to PST and send to us, which doesn't seem like much help at all. They also said it would take "a few days" to give us the exported PST files. We have to provide the applicable messages to the lawyers in 2 days so we have to do something now.

Is there a fast or scripted way to search and extract messages from our OST files?

As it stands, it seems like we will have to perform two manual searches per name:

One search for messages FROM the person
then a search for mail TO the person

… times 141 names. That's 282 searches per user, times 12 users. The searches are not quick either, since users have about 4-6 GB OST files.

What would you do in this situation? Am I out of luck?

See also: [Can I access Microsoft Outlook PST archives with any other tools?](http://superuser.com/questions/19555/can-i-access-microsoft-outlook-pst-archives-with-any-other-tools) — slhck, Sep 20 '11 at 19:11
Can't you file for a delay on providing the info with the explanation that you PHYSICALLY CANNOT COMPLY IN THE TIMEFRAME LISTED? Your hosting company will obviously back you up here... — Shinrai, Sep 20 '11 at 19:13
Your first question, what would I do? It would probably involve quiet contemplation in a dark room, followed by crying. — Bart Silverstrim, Sep 20 '11 at 19:30
@BartSilverstrim I think that is the correct answer! Thanks! :) — David, Sep 21 '11 at 21:03
For future reference, Access can import outlook data and offer extremely powerful data manipulation tools. — , Apr 10 '12 at 18:47

score 4 · Accepted Answer · answered Sep 20 '11 at 19:09

I would purchase and use Emailchemy Forensic Edition to convert the OSTs into some format that can be grepped (I'd recommend Maildir), then write a shell script or Perl script or whatever works best for you in order to extract the relevant ones. Make sure you have plenty of disk space.

score 3 · Answer 2 · answered Sep 20 '11 at 19:14

3

Perhaps use Outlook's Export To A File functionality to export all mail to a CSV (comma separated values), and then use Excel's "Sort and Filter" options (or another spreadsheet program's equivalent) to sort the CSV and remove unwanted entries.

answered Sep 20 '11 at 19:14

Ƭᴇcʜιᴇ007

111,883
19
201
268

score 0 · Answer 3 · answered Jul 06 '12 at 15:33

0

You might want to try FileLocator Pro, which can search OST/PST files (including attachments) without having to export them first:

http://mythicsoft.com/kb/SearchOutlookv6.ashx

answered Jul 06 '12 at 15:33

snowdude

2,870
17
20

score 0 · Answer 4 · answered Jul 19 '13 at 11:13

0

pffexport will do it (just copy the compiled version of the sift distribution if on linux, otherwise compile for windows with mingw)

answered Jul 19 '13 at 11:13

chris

204
1
5

Some more information for this obscure title would be helpful. – Austin T French Jul 19 '13 at 11:49
nice description of pffexport at http://cheeky4n6monkey.blogspot.co.uk/2012/03/detecting-spoofed-emails-with-sifts.html – chris Jul 20 '13 at 16:17

Extract messages from OST/PST files?

4 Answers4

Linked