This is a repository copy of Navigating the Windows Mail database. White Rose Research Online URL for this paper: https://eprints.whiterose.ac.uk/133161/ Version: Accepted Version Article: Chivers, Howard Robert orcid.org/0000-0001-7057-9650 (2018) Navigating the Windows Mail database. Digital Investigation. pp. 1-23. ISSN 1742-2876 https://doi.org/10.1016/j.diin.2018.02.001 Reuse This article is distributed under the terms of the Creative Commons Attribution-NonCommercial-NoDerivs (CC BY-NC-ND) licence. This licence only allows you to download this work and share it with others as long as you credit the authors, but you can’t change the article in any way or use it commercially. More information and the full terms of the licence here: https://creativecommons.org/licenses/ Takedown If you consider content in White Rose Research Online to be in breach of UK law, please notify us by emailing
[email protected] including the URL of the record and the reason for the withdrawal request.
[email protected] https://eprints.whiterose.ac.uk/ Digital Investigation xxx (2018) 1e8 Contents lists available at ScienceDirect Digital Investigation journal homepage: www.elsevier.com/locate/diin Navigating the Windows Mail database Howard Chivers Department of Computer Science, The University of York, United Kingdom article info abstract Article history: The Extensible Storage Engine (ESE) database is used to support many forensically important applica- Received 10 November 2017 tions in the Windows operating system, and a study of how ESE is used in one application provides wider Accepted 4 February 2018 insights into data storage in other current and future applications.