Lotus Notes Forensic Tool: Offering Way For Simplifying Examination

“We have a project coming up where a number of hard drives of the custodian has to be investigated along with their mail data. We haven’t received the details yet but the main concern for which we want to stay prepared is Lotus Notes Forensics. We hold the experience of extracting data of Exchange Server but working with Lotus Notes have not been a strong part. Can someone recommend an ideal methodology for collecting Lotus Notes emails? Or is there any prominent solution to collect Lotus Notes in PST as we have Exmerge and Export commands in Exchange®.”

Lotus Notes® functionality as a messaging platform has been a big hit amongst enterprises. However, it is an integrated solution that offers option for emailing, managing contacts and schedule, microblogging, sharing through forums and much more. The entire set up works on a client-server basis which is Notes and Domino respectively. The data is stored at client and the server.

Where are Potential Evidences Stored?

The data repository of Lotus Notes is NSF file. Any type of data, be it emails, bookmarks, contacts, notebook etc. gets saved in Notes Database Format (NSF). During Lotus Notes Forensics, if emails have to be examined, then following files of Notes would prove helpful that can be analyze without using Lotus Notes Forensic tool:

• The username.nsf file saves the mail folders, chat history, messages with follow up flags, the archived mails, and all documents that can be examined forensically for extracting relevant artifacts. This file also contacts the calendar entries and the To-Do list.
• Next in line is the Contacts that gets saved into the names.nsf file. Contacts play an important role in discovering the links of the accused.

To simplify the Lotus Notes forensics, the database in NSF file can be saved into PST. The Outlook environment is easy to handle and is a convenient option for those who are not much familiar with the Lotus Notes technology. However, in this process, the major concern is while saving the NSF as PST, the properties of emails should remain intact.

NSF To PST Converter for Notes Forensics® Aid!

For saving emails, contacts, calendars, chat history, to-do of Lotus Notes into PST, download the Lotus Notes Forensic tool. This Windows based product is certified for its potential safely copy the database from NSF file to PST so that analysis can be preceded trouble-free. Here are some of the benefits of working with the Lotus Notes NSF Forensics tool:

 

Remove Message Level Encryption: Emails that have been encrypted in Notes database for security reasons can be decrypted after NSF to PST conversion. This gives benefit of easy analysis of mails.

Retains Internet Header of Mails: The prime focus of an investigator while email analysis is the study of header. Lotus Notes Forensic tool, while moves the emails from NSF file to PST migrates the internet header too.

Retains Hyperlinks in Messages: Lotus Notes NSF Forensics software includes option to retain HTML formatting of emails that allows moving emails along with hyperlinks. Also, the Doclinks in the messages will be preserved.

Date Based Filters For Database: To extract data of certain time limit into PST file, there are date based filters in the tool available for emails, contacts, calendars, notes, and tasks.

All these features embedded in the tool will help in Lotus Notes forensics examination by saving them to PST file. To try out the Lotus Notes Forensic tool for satisfaction, its free demo version is available that works with presence of Lotus Notes client on machine.