Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Talley, Brooks (brooksfrnk.com)
Date: Sat Sep 01 2001 - 12:28:55 CDT
Gary Clement wrote:
> I am currently working on a forensics project, and I'm trying
> to see what is stored within the .edb files that Exchange
> stores its database in. The files are priv1.edb and
> pub1.edb. I can look at them through a hex editor, but I
> figure there might be a database program that will aid in
> their review.
It is possible to get the the exchange DB through ADSI, which opens all
sorts of interesting possibilities. Of course, it will be a polite
access, not byte-by-byte, so it may not yield everything you're looking
for. I don't know of any prebuilt tools out there, but it should be
possible to hack something together in VB (or even SQL SP's).
And here's some good info on the exchange DB: