OSForensics™ includes an ESE database (ESEDB) viewer for databases stored in the Extensible Storage Engine (ESE) file format, including the new Win10 database structure. The ESEDB format, in particular, is used by several Microsoft applications that store data with potential forensics value, including the following:
The ESE DB Viewer is capable of displaying thumbnails stored in the following files:
- Windows (Desktop) Search
- Windows Live Mail
- Microsoft Exchange Server
- Internet Explorer
The ESE database viewer allows the user to search for database records that match a specified criteria, including text phrases, date ranges and numerical values.
