Script to parse the Thunderbird email, including deleted email
Python
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.

README.md

Thunderbird-email-parser

This script parses the raw emails, including deleted emails in files created by Thunderbird located under \Users%USERNAME%\AppData\Roaming\Thunderbird\Profiles[random].default\

These files do not have a file extension and contain emails in MIME format. It will parse the Header information(To, from, CC, BC, Date and Subject) into an Excel file and create a link to the .eml file. It will also list the attachments.

####Required Library Install the xlwt library on Linux/OS X using:

sudo easy_install xlwt

Windows:

Use the xlwt installer located at https://pypi.python.org/pypi/xlwt/0.7.2

####Usage

thunderbird_parser.py -d /home/sansforensics/thunderbird_profile/9tdq9zg0.default -o /home/sansforensics/documents/parsed_emails

####More Information

View the blog post at http://az4n6.blogspot.com/2014/04/whats-word-thunderbird-parser-that-is.html

Email Mari > arizona4n6 at gmail dot com for help/questions/bugs