How can the contents of a PST file be viewed in EnCase 7?

To view the contents of a PST (Personal Storage Table) file in EnCase 7, it is effective to utilize both the options of running the "Find Email" function and selecting "View File Structure."

Running the "Find Email" within the EnCase Evidence Processor enables the software to intelligently parse the PST file format, allowing you to extract and view individual emails, attachments, and other relevant data associated with email transactions. This feature is particularly useful for forensic investigators as it aids in extracting pertinent email communications from large datasets effectively, without needing to delve into the file structure manually.

On the other hand, selecting "View File Structure" from the Entries options provides a different perspective on the PST file, allowing users to navigate through the hierarchical structure of the file. This is valuable for understanding how the data is organized within the PST file, including folders, sub-folders, and the arrangement of individual email messages.

Using both functionalities combined enhances the forensics capability, allowing a more comprehensive analysis and recovery of email information from PST files. Therefore, the selection of both A and B as methods to view PST content in EnCase is indeed the correct approach.