Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support parsing MacOS XXXXX.partial.emlx emails attachments #1525

Closed
lfcnassif opened this issue Feb 16, 2023 · 2 comments · Fixed by #1562
Closed

Support parsing MacOS XXXXX.partial.emlx emails attachments #1525

lfcnassif opened this issue Feb 16, 2023 · 2 comments · Fixed by #1562
Assignees

Comments

@lfcnassif
Copy link
Member

lfcnassif commented Feb 16, 2023

Those *.partial.emlx files have their attachments extracted and put into a separate folder by some Apple Mail app. IPED detects the email has attachments and extracts/links to them (in the viewer), but, when clicking on the linked/extracted attachments, they don't open because they are invalid/corrupted, their contents were subtracted from the original email. We should open/link to the extracted attachment present into another file system folder.

@lfcnassif
Copy link
Member Author

lfcnassif commented Feb 16, 2023

@FelipeFcosta, since you did something similar in #1286, would you like to take a look at this? This is much simpler, since the attachments can be easily found from the email file name and we already have a parser for the standard eml/emlx format.

@FelipeFcosta
Copy link
Contributor

@FelipeFcosta, since you did something similar in #1286, would you like to take a look at this? This is much simpler, since the attachments can be easily found from the email file name and we already have a parser for the standard eml/emlx format.

Yes, I'll look into it

@FelipeFcosta FelipeFcosta self-assigned this Feb 17, 2023
@lfcnassif lfcnassif added this to To do in 4.2 via automation Feb 23, 2023
@lfcnassif lfcnassif moved this from To do to In progress in 4.2 Mar 9, 2023
@lfcnassif lfcnassif changed the title Support parsing MacOS NNNNN.partial.emlx mails Support parsing MacOS NNNNN.partial.emlx emails attachments Apr 10, 2023
lfcnassif added a commit that referenced this issue Apr 11, 2023
4.2 automation moved this from In progress to Done Apr 11, 2023
lfcnassif added a commit that referenced this issue Aug 16, 2023
@lfcnassif lfcnassif changed the title Support parsing MacOS NNNNN.partial.emlx emails attachments Support parsing MacOS XXXXX.partial.emlx emails attachments Aug 16, 2023
@lfcnassif lfcnassif removed this from Done in 4.2 Sep 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants