Download & Installs the NSF forensics tool. When you run, it opens ups with two option:-
Click on the Scan File present at navigation bar to scan and loads Lotus Notes NSF file. Select the Mode to Browse the NSF file from system
When software completes the scanning process, then NSF forensics tool loads the file in recursive manner in the left panel of the software. Click on the email to analyze it in different preview modes like Hex View, Properties View, Mime View, HTML View, RTF view, Hierarchical view etc.
If you want to perform email discovery then click on Search Option. It opens with large menu with multiple search option. You can use the multiple operators like AND, OR, NOT to limits your search to specific results. There is also the facility to carry search with added criteria like Subject, To, From, Priority etc. After this hit the search button to proceeds further.
When the NSF forensics tool completes the search process then result is shown in right pane. There is option provided by the tool to save the search result for further analysis.
After carving out the information, NSF forensics tool facilitates you to export the Lotus Notes NSF file in the format like PDF, HTML, TIFF, CSV etc.
Lotus Notes is the collection of the hybrid entities like email, calendaring, address book, database, server etc. It is provides the complete email environment for admin. It stores the data of individuals in their separate databases. Lotus notes is the client sides desktop based application mainly used for the purpose of organizing and displaying database on a user’s system.
With the advancements in technology and science drive the way to peoples to commits frauds. Being the most favoured email client, it is largely used by the big organizations and associations. The Lotus Notes stores the complete user data in the NSF file such as username.nsf saves the mail folders, chat history, messages with follow up flags while names.nsf saves the contact list which is major forensics evidence. The Lotus Notes make the nsf file encrypted so that intruders do not have the access of user database. But some times it is creates difficulties for the investigator to break encryption and carve out the information. Accessing the User accounts with out knowing the user id is so complex and tough that it becomes the hurdles in the forensics process so an effective solution is need to do the lotus notes forensics
Lotus Notes NSF Forensics tool enables the analysing and examination of a collection of NSF files. Separate collections of NSF files can be created so as to make the forensic search a more organized process. The deleted NSF mails and attachments play vital role in investigation process. Recover all the deleted mails for evidences with the recovery options in the tool. Both damaged and corrupted NSF mail data can be easily recovered. The recursive listing of the NSF mails in the software reduces unnecessary efforts consumed while manually scrolling folders for desired mails. Mails can be enlisted in the parent folder for investigation with the recursive listing option. The search feature in the tool streamlines the vast collection of mails so as to yield better results. The NSF file can be searched for mails and attachments containing special keywords with both general and expression based search options. Prior to the investigation process the investigation report of Lotus Notes is also generated in a representable form. The output report can be generated in any of the formats-CSV for headers, HTML, Adobe PDF, TIFF image and single message file, etc.
As we all know the investigation process require a structured way and methodology so as to yield maximum results. With the Lotus Notes Forensics tool, the investigation process was successfully carried out. Definitely a Great tool with great features!
Calvin Alvarado, Sr. Investigator
With Lotus Notes Forensics MailPRO+ tool, the difficult procedure of email investigation was simplified with just a few clicks. The search options in the software enabled us to save unnecessary time for searching desired mails. It is a full-featured solution for efficient investigation.
Josh Walsh, Forensic Expert