Good Evening everyone,
Got forwarded a request see what i could do with an outlook file that was encrypted. the file is an .RPMSG file. Does anyone have any good experience they can share regarding this type of encryption?
Hi Joshua,
You can find detailed information about the protocol as well as the format of the storage container here:
[MS-OXORMMS]: Rights-Managed Email Object Protocol | Microsoft Docs
To my knowledge, it is possible to decrypt these programmatically via the Microsoft Information Protection SDK. It looks like the SDK currently supports working with the items in compound file binary format, but not in MIME form.
I haven’t taken a stab at this yet, but happy to help if you have some sample data you would like to decrypt.
Hello everyone,
I have a request to decrypt a RPMSG file and I was wondering if this is possible. I am also wondering if Forensic Email Collector can automatically decrypt these emails if we’ve collected their mailbox using their credentials.