2020-11-25 15:04:31.941 org.sleuthkit.autopsy.keywordsearch.Server isRunning
INFO: Solr server is running
2020-11-25 15:04:32.116 org.sleuthkit.autopsy.imagegallery.PerCaseProperties getConfigSetting
INFO: File did not exist. Created file [Image Gallery.properties]
2020-11-25 15:04:32.119 org.sleuthkit.autopsy.imagegallery.datamodel.DrawableDB setPragmas
INFO: sqlite-jdbc version 3.25.2 loaded in native mode
2020-11-25 15:04:32.132 org.sleuthkit.autopsy.casemodule.Case openAsCurrentCase
INFO: Opened mmm (mmm_20201125_150430) in /xxx/case/mmm as the current case
2020-11-25 15:04:32.132 org.sleuthkit.autopsy.ingest.IngestMonitor$MonitorTimerAction logMonitoredRootDirectory
INFO: Monitoring disk space of /
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Central Repository, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Data Source Integrity, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Drone Analyzer, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Embedded File Extractor, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Encryption Detection, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Exif Parser, version = 4.16.0
2020-11-25 15:04:32.172 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Extension Mismatch Detector, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = File Type Identification, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Hash Lookup, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Interesting Files Identifier, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = PhotoRec Carver, version = 7.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Plaso, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Virtual Machine Extractor, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Keyword Search, version = 4.16.0
2020-11-25 15:04:32.173 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Email Parser, version = 4.16.0
2020-11-25 15:04:32.174 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader addFactory
INFO: Found ingest module factory: name = Recent Activity, version = 4.16.0
2020-11-25 15:04:32.499 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader getIngestModuleFactories
INFO: Found ingest module factory: name = GPX Parser, version = 1.2
2020-11-25 15:04:32.499 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader getIngestModuleFactories
INFO: Found ingest module factory: name = Android Analyzer, version = 4.16.0
2020-11-25 15:04:32.5 org.sleuthkit.autopsy.ingest.IngestModuleFactoryLoader getIngestModuleFactories
INFO: Found ingest module factory: name = Mac_Mail, version = 1.0
2020-11-25 15:04:45.956 org.sleuthkit.autopsy.ingest.IngestManager startIngestJob
INFO: Starting ingest job 2
2020-11-25 15:04:45.957 org.python.core.PyReflectedFunction __call__
SEVERE: Starting of plugin
2020-11-25 15:04:46.136 org.sleuthkit.autopsy.ingest.IngestJobPipeline logInfoMessage
INFO: Starting first stage analysis (data source = LogicalFileSet1, objId = 1, pipeline id = 2, ingest job id = 1)
2020-11-25 15:04:47.252 org.sleuthkit.autopsy.ingest.IngestJobPipeline logInfoMessage
INFO: Scheduling first stage data source and file level analysis tasks (data source = LogicalFileSet1, objId = 1, pipeline id = 2, ingest job id = 1)
2020-11-25 15:04:47.254 org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline process
INFO: Mac_Mail analysis of LogicalFileSet1 (pipeline=2) starting
2020-11-25 15:04:47.319 ProcessMacMailIngestModule process
INFO: found 8602 files
2020-11-25 15:04:47.322 ProcessMacMailIngestModule process
INFO: Directory created for itfg
2020-11-25 15:04:47.336 ProcessMacMailIngestModule process
INFO: User Paths to get emlx files from ==> [u'itfg']
2020-11-25 15:04:47.336 ProcessMacMailIngestModule process
INFO: User directory to process/Users/itfg
2020-11-25 15:04:47.364 ProcessMacMailIngestModule process
INFO: found 3291 files
2020-11-25 15:04:47.742 ProcessMacMailIngestModule process
INFO: User directory to process/Users/itfg
2020-11-25 15:04:47.746 ProcessMacMailIngestModule process
INFO: found 3 files
2020-11-25 15:04:47.746 ProcessMacMailIngestModule process
INFO: Writing file ==> Envelope Index
2020-11-25 15:04:47.782 ProcessMacMailIngestModule process
INFO: Writing file ==> Envelope Index-shm
2020-11-25 15:04:47.783 ProcessMacMailIngestModule process
INFO: Writing file ==> Envelope Index-wal
2020-11-25 15:04:47.791 ProcessMacMailIngestModule process
INFO: FIles have been written no lets process them
2020-11-25 15:04:47.791 ProcessMacMailIngestModule process
INFO: Check file name ==> Envelope Index
2020-11-25 15:04:47.792 ProcessMacMailIngestModule process
INFO: Path to the mail database is ==> Envelope Index
2020-11-25 15:04:48.62 org.python.core.PyReflectedFunction __call__
INFO: Result (xxxyyy@gmail.com)
2020-11-25 15:04:48.621 org.python.core.PyReflectedFunction __call__
INFO: xxxyyy@gmail.com
2020-11-25 15:04:48.63 ProcessMacMailIngestModule processEmails
INFO: Message Id (5232)

[...]
INFO: Message Id (6980)
2020-11-25 15:04:48.977 org.python.core.PyReflectedFunction __call__
INFO: Result (no-reply@accessdata.com)
2020-11-25 15:04:48.977 org.python.core.PyReflectedFunction __call__
INFO: no-reply@accessdata.com
2020-11-25 15:04:49.0 ProcessMacMailIngestModule processEmails
INFO: Message Id (7078)
2020-11-25 15:04:49.003 org.python.core.PyReflectedFunction __call__
INFO: Result (support@accessdata.com)
2020-11-25 15:04:49.004 org.python.core.PyReflectedFunction __call__
INFO: support@accessdata.com
2020-11-25 15:04:49.007 org.sleuthkit.autopsy.ingest.IngestJobPipeline logErrorMessage
SEVERE: Mac_Mail experienced an error during analysis (data source = LogicalFileSet1, objId = 1, pipeline id = 2, ingest job id = 1)
	at org.sleuthkit.datamodel.CommunicationsUtils.normalizeEmailAddress(CommunicationsUtils.java:100)
	at org.sleuthkit.datamodel.CommunicationsManager.normalizeAccountID(CommunicationsManager.java:1392)
	at org.sleuthkit.datamodel.CommunicationsManager.createAccountFileInstance(CommunicationsManager.java:270)
	at sun.reflect.GeneratedMethodAccessor67.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)

org.sleuthkit.datamodel.InvalidAccountIDException: org.sleuthkit.datamodel.InvalidAccountIDException: Input string is not a valid email address: undisclosed-recipients:;

	org.python.core.Py.JavaError(Py.java:546)
	org.python.core.PyObject._jthrow(PyObject.java:3653)
	org.python.core.PyObject._jcall(PyObject.java:3660)
	org.python.proxies.Mac_Mail$ProcessMacMailIngestModule$37.process(Unknown Source)
	org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline$PipelineModule.process(DataSourceIngestPipeline.java:198)
	org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline.process(DataSourceIngestPipeline.java:111)
	org.sleuthkit.autopsy.ingest.IngestJobPipeline.process(IngestJobPipeline.java:943)
	org.sleuthkit.autopsy.ingest.DataSourceIngestTask.execute(DataSourceIngestTask.java:30)
	org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobTasksTask.run(IngestManager.java:961)
	java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
org.sleuthkit.datamodel.InvalidAccountIDException: Input string is not a valid email address: undisclosed-recipients:;
	org.python.core.Py.JavaError(Py.java:546)
	org.python.core.PyObject._jthrow(PyObject.java:3653)
	org.python.core.PyObject._jcall(PyObject.java:3660)
	org.python.proxies.Mac_Mail$ProcessMacMailIngestModule$37.process(Unknown Source)
	org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline$PipelineModule.process(DataSourceIngestPipeline.java:198)
	org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline.process(DataSourceIngestPipeline.java:111)
	org.sleuthkit.autopsy.ingest.IngestJobPipeline.process(IngestJobPipeline.java:943)
	org.sleuthkit.autopsy.ingest.DataSourceIngestTask.execute(DataSourceIngestTask.java:30)
	org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobTasksTask.run(IngestManager.java:961)
	java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	java.util.concurrent.FutureTask.run(FutureTask.java:266)
	java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	java.lang.Thread.run(Thread.java:748)
2020-11-25 15:04:52.221 org.sleuthkit.autopsy.modules.embeddedfileextractor.DocumentEmbeddedContentExtractor extractEmbeddedContent
INFO: File already has been processed as it has children and local unpacked file, skipping: 

[...]

INFO: Finished first stage analysis (data source = LogicalFileSet1, objId = 1, pipeline id = 2, ingest job id = 1)
2020-11-25 15:04:56.939 org.sleuthkit.autopsy.ingest.IngestJobPipeline logInfoMessage
INFO: Finished analysis (data source = LogicalFileSet1, objId = 1, pipeline id = 2, ingest job id = 1)
2020-11-25 15:04:56.939 org.sleuthkit.autopsy.ingest.IngestManager finishIngestJob
INFO: Ingest job 2 completed