Re: [PEN-TEST] examining exchange mail

[Jeff Oliver <jeff () NETMEASURE NET>]

If you've kept archives (configured Exchange to do so) you should have an
archive of internet mail on the server, but you won't find an archive of
workgroup mail (using "SMB" instead of SMTP).  Look for a directory called
imcdata/archive/in or /out.

If anyone knows how to archive the workgroup mail I'd like to hear it.

Jeff Oliver
NetMeasure Technology

-----Original Message-----
From: Andrew Thomas [mailto:blink () EYE2EYE NET]
Sent: December 6, 2000 9:23 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] examining exchange mail


Hi,

I know the topic of getting mail has come up before, so please understand
I'm not asking for a way to gather mail as it arrives, either via Dug Song's
mailsnarf, bcc tomfoolery or playing with relays.

I have domain admin on a network, and I want to know how I would go about
viewing mail *stored* on the Exchange Server, if this is possible.

What little research I have done, has not turned up much, so if anyone could
help, it would be much appreciated.

Take care,
  Andrew
-
Andrew Thomas
<eye2eye> digital distillers ltd
office: +27-(0)21-4889820
facsimile: +27-(0)21-4889830
mobile: +27-(0)82-7850166