How to Analyze MBOX File?

Hi Sandra,

MBOX file is an email file which saves a lot of important data. Sometimes, it is important for the forensic team to open and analyze MBOX file to collect all the evidence. But before analyzing, you must know a method to open MBOX mailbox file. You can simply open Thunderbird mailbox file by using ImportExportTools utility

First of all, download and install Thunderbird email application as well as ImportExportTools add-in in your system. Follow the steps:

1. Click on Tools >> Import/Export Tools from the menu list.
2. Now, click on Import MBOX File >> Import directly one or more MBOX files from Files MBOX Import.
3. Click on OK to import the files in Thunderbird.
4. To import MBOX with its integrated subdirectories, click on Import one or more MBOX files from the subdirectory >> Ok.
5. After that, browse the MBOX file from the saved location and click on Open to import MBOX file.

OK, then you can go for SysTools MBOX Viewer which is free to scan, open and view MBOX files of any size. You can analyze MBOX file by reading all the contents of the file in different modes like Normal Mail View, Hex View, Attachments view, Message Header View, MIME View, etc.