Script to extract mails and their attachments from information files found in the Data folder of the Outlook container in macOS.
Install the requirements: pip install -r requirements.txt
Usage: olk15DataExtraction.py DataPath
Script input: Extract the entire UBF8T346G9.Office\Outlook\Outlook 15 Profiles\<profile>\Data folder. You need to run script per profile/folder.
- csv file with info per: MailRecord, MailPath, MailSubject, AttachmentPath, AttFileName
- base64 decoded in .olk15MsgAttachment -> filename <olk15MessageFilename>_<olk15MsgAttachmentFilename>__<AttFileName>
Database used: \Macintosh HD - Data\Users<user>\Library\Group Containers\UBF8T346G9.Office\Outlook\Outlook 15 Profiles\Main Profile\Data\Outlook.sqlite
Tables and columns used:
- Mail: Record_RecordID (PK), PathToDataFile (.olk15Message), Message_HasAttachment (boolean), Message_NormalizedSubject (mail subject line)
- Mail_OwnedBlocks: Record_RecordID (FK), BlockID (binary)
- Blocks: BlockID (FK), PathToDataFile (.olk15MsgAttachment)