Converting mailscanner quarantine files to .eml files?

Questions and answers about how to do stuff
Post Reply
iglooo
Posts: 32
Joined: 25 Jan 2019 19:52

Converting mailscanner quarantine files to .eml files?

Post by iglooo » 28 Oct 2019 12:44

Hi,

Does anyone here know how to convert mailscanner quarantine files to .eml format? Or any other format, that I can then convert to .eml?

iglooo
Posts: 32
Joined: 25 Jan 2019 19:52

Re: Converting mailscanner quarantine files to .eml files?

Post by iglooo » 28 Oct 2019 14:01

This was pretty time sensitive so I've found a workaround. I'm sure there's more elegant and proper ways to do this, but you can follow this if you're in a pinch:

First, add the admin user to group called mtagroup.

Code: Select all

usermod -a -G mtagroup admin
Then, you can use WinSCP to transfer the MailScanner quarantine files in question to your Windows PC. Once you have the files, you can filter the specific emails and add .eml extension in powershell.

Code: Select all

Get-ChildItem | Where-Object {$_.LastWriteTime -like '*12:01*'} | Move-Item -Destination 'C:\Users\User\Desktop\Malware_outbreak\Initial_wave'

dir |Rename-Item -NewName {$_.Name +".eml"}

Post Reply