-
Notifications
You must be signed in to change notification settings - Fork 214
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support parsing MacOS XXXXX.partial.emlx emails attachments #1525
Comments
@FelipeFcosta, since you did something similar in #1286, would you like to take a look at this? This is much simpler, since the attachments can be easily found from the email file name and we already have a parser for the standard eml/emlx format. |
Yes, I'll look into it |
Those *.partial.emlx files have their attachments extracted and put into a separate folder by some Apple Mail app. IPED detects the email has attachments and extracts/links to them (in the viewer), but, when clicking on the linked/extracted attachments, they don't open because they are invalid/corrupted, their contents were subtracted from the original email. We should open/link to the extracted attachment present into another file system folder.
The text was updated successfully, but these errors were encountered: