Re: [PEN-TEST] examining exchange mail

[Phonix <phonix () MOOCOW ORG>]

> I've only been able to get to people's Inbox this way, but I'm probably
> just doing something stupid that prevents me from getting to their other
> folders.
>
> The actual mail is all stored in one monolithic file on the Exchange
> server, in some sort of DB format.

Not necessarily true.  Users can, of course, create personal folders to
store messages in, and those are stored on the local drive.  Connecting to
the Exchange server, even as admin, won't get you any closer to those
messages.  A smart Exchange/Outlook user will set up a rule that
immediately moves all their mail out of the default folder and into a
local folder, to prevent cases of admin snooping just like this.

.phonix.