DBX files recovered during forensic investigation can be analyzed by which email client?

• A. Eudora
• B. Microsoft Outlook Express
• C. Mozilla Thunderbird
• D. Microsoft Outlook

Answer: (B)

DBX files are the native storage format used by Microsoft Outlook Express to store individual mailbox folders. Because of this, Outlook Express can open and analyze these DBX files directly, reading the messages contained inside. Other email clients use different storage formats—Eudora uses MBX/TOC, Thunderbird uses mbox, and Microsoft Outlook uses PST/OST—so they don’t natively read DBX files without conversion. So, for forensic analysis of recovered DBX data, the appropriate client is Microsoft Outlook Express.