A reader asked how I knew stream 53 mentioned in diary entry “Peeking into msg files” contained the body of the email.
At that time, it was just trial and error. Since then, I
Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.