Shubham Dixit, email forensics expert

Written by Jennifer Walsh. Reviewed for technical accuracy by Shubham Dixit, Independent Expert in Email Forensics and Data File Conversion.

Shubham is an independent external reviewer and not an employee of PCDOTS.

Quick answer. Outlook metadata is the header detail around an email, the To, From, Cc, subject and dates rather than the body. To read one email’s full header, use File then Properties. To get a whole folder into a spreadsheet, Outlook can export to CSV for free, and a dedicated tool reads PST and OST directly for bulk work.

What Outlook metadata actually is?

Metadata is the information about an email rather than the message you typed. It splits into two levels, and knowing which one you need saves a lot of wasted effort.

The everyday level is the set of fields you already see in a mailbox, the sender, the recipients in To and Cc, the subject, and the sent and received dates, plus things like size and read status. This is what someone means when they ask for a sheet of clients with To, From, Cc and Sent, and it is the level most reports and audits want.

The deeper level is the full internet header, the technical block every message carries, listing every server it passed through, the authentication results like SPF and DKIM, and the unique message id. You rarely need this for a client list, but it is the level that matters in an investigation, because it is much harder to fake than a display name. The method you pick depends on which of the two you are actually after, and how many emails you are dealing with.

Metadata is everything around the message, not the message. Simple fields To, Cc, From Subject Sent and received dates the client sheet level Full internet header Every server hop SPF, DKIM results Message id the forensic level The body not metadata at all

Two levels of metadata sit around the message. Decide which one you need first.

Which method fits your job?

There are three honest routes and they answer different questions. To inspect the full header of a single message, Outlook shows it to you for nothing. To turn a folder of emails into a spreadsheet of fields, Outlook can export to CSV, also free. And to pull metadata out of PST or OST files in bulk, especially when the mailbox is not sitting live in Outlook, a dedicated tool is the one that copes. Here is how they line up.

What do you need?one header, a sheet, or bulk from files One headerFile then PropertiesFull routing detailOne email at a timeFREE A CSV sheetOutlook Import ExportA folder of fieldsMailbox must be liveFREE Bulk toolReads PST and OSTNo live mailbox neededFilters, many filesBULK

Two of these cost nothing. The third is for PST and OST files at scale.

When you want the complete technical header of a single message, Outlook hands it over and it costs nothing.

Step 1. Open the email, or select it and open it in its own window.

Step 2. Go to File, then Properties.

Step 3. Read the Internet headers box at the bottom, which holds the full routing and authentication detail.

Step 4. Select and copy whatever you need into a document or ticket.

This is the right tool when you are investigating one message, tracing where it really came from or checking whether it passed authentication. It is the wrong tool for building a client list, because it is one email at a time and it gives you a wall of raw header text rather than tidy columns. For a sheet, use the export below.

“The From line people see in Outlook is a display name, and a display name is trivially forged, so on its own it proves nothing. The internet header is where the truth is, the Received chain shows the actual path the message took and the authentication results show whether the sending domain checks out. When I am asked whether an email is genuine, that header block is the first and sometimes the only thing I need. It is worth knowing it is sitting one click away under File then Properties.” Shubham Dixit, Email Forensics reviewer (draft, pending approval)

Export a folder to CSV free in Outlook

Here is the route the usual guides skip. If your mailbox is open in the Outlook desktop app, Outlook can export a whole folder to a CSV of metadata fields, for free, with no extra software.

Step 1. In Outlook go to File, then Open and Export, then Import/Export.

Step 2. Choose Export to a file, then Comma Separated Values.

Step 3. Pick the mail folder you want, for example Inbox or a client folder.

Step 4. Choose a save location, and if you want to control the columns use Map Custom Fields to add or remove From, To, Cc, Subject and the dates. Finish, and Outlook writes the CSV.

Open the result in Excel or Google Sheets and you have your sheet of senders, recipients, subjects and dates. It is genuinely free and it handles a whole folder at once, which already beats copying headers by hand.

Where the free export runs out?

The Outlook export is a real answer, so use it when it fits. It just has edges, and they are worth knowing before you rely on it for a big job.

It works from your live Outlook profile, so the mailbox has to be set up and open in Outlook. That is a problem when what you actually have is a loose PST file from an old machine, or an OST that is tied to a profile you no longer have, because neither opens cleanly this way without being imported first, and an OST often will not import at all. The field mapping can be fiddly, some fields come across with odd names or not at all, and the export does not include the full internet header, only the everyday fields. And if you have many PST files to work through, repeating the wizard for each one gets old. When any of that bites, a dedicated extractor is the calmer path.

Extract metadata in bulk from PST and OST

A dedicated tool earns its place by reading the files directly. It opens PST and OST files on their own, without needing the mailbox live in Outlook, so an orphaned PST or an OST from an old profile is no obstacle. The PCDOTS Email Converter loads one or many Outlook files, previews the messages, and exports the metadata fields to a clean CSV in one run. It can filter by sender, recipient, subject or date so you export only the emails you want, it handles large mailboxes, and it leaves your original files untouched. A free trial exports a limited number so you can check the sheet against your own data first.

Reads PST and OST directly. No live Outlook profile needed. 1Run itOpen theextractor 2Add filesPST or OST,one or many 3Export CSVPick the fieldsand CSV 4SaveSet a folder,run it iFilter by sender, recipient, subject or date before you export.Opens straight in Excel or Google Sheets.

Pulling metadata from a stack of PST and OST files into one CSV in a single run.

Here are the steps with the screens.

Step 1. Install and run the extractor on your Windows PC.

Run the Outlook metadata extractor

Step 2. Add your Outlook PST or OST files, or a whole folder of them.

Add the Outlook PST or OST files

Step 3. Preview the messages and select the data you want to pull.

Preview and select the Outlook data

Step 4. Choose CSV as the export format, set a destination and save.

Choose CSV as the export format

The same tool covers the neighbouring extraction jobs, so there are guides to extract email addresses from DBX, extract addresses from Gmail, and to collect email addresses from Outlook. For deeper header work, the email forensics page goes further.

Free Download
Buy Now

The methods compared

Match the route to what you need and where your email lives.

Method Best for Good to know
File then Properties One email’s full header, free Raw header text, one at a time
Outlook CSV export A folder of fields, free Needs the mailbox live in Outlook
Bulk extractor PST and OST files at scale Reads files directly, filters

Frequently asked questions

How do I extract metadata from Outlook?
For one email’s full header, use File then Properties and read the internet headers. For a folder of fields, use Outlook’s Import and Export wizard to export a CSV. For PST or OST files in bulk, a dedicated extractor reads them directly and writes the fields to CSV.

Can I export Outlook metadata to CSV for free?
Yes. If the mailbox is open in the Outlook desktop app, File, Open and Export, Import Export, then Export to a file and Comma Separated Values writes a folder of fields to CSV at no cost.

How do I get metadata out of a PST or OST file?
Outlook’s own export needs the mailbox live, which loose PST files and OST files do not satisfy. A dedicated extractor opens PST and OST directly and exports the metadata without a live profile.

What metadata fields can I get from Outlook?
The everyday fields are To, From, Cc, Bcc, Subject and the sent and received dates, plus size and read status. The full internet header adds the routing chain, authentication results and the message id.

How do I see the full internet header of an email?
Open the message, go to File then Properties, and the Internet headers box shows the complete header. This is the detail that matters when you need to verify where a message really came from.

Is my mailbox safe during extraction?
Yes. A read only extractor only reads your PST or OST files to pull the metadata and does not change the originals, so your mailbox is left exactly as it was.

Pick the route by what the sheet is for

Metadata from Outlook is not one job, it is three, so start from what you actually need. Investigating a single suspicious message, File then Properties shows you the full header for nothing. Building a client sheet from a live mailbox, Outlook exports a folder to CSV, also free. Working from PST or OST files, or a stack of them, that is where a dedicated extractor reads the files directly and saves you the grind. Decide which of the three you are doing, and the tool picks itself.

Shubham Dixit

Reviewed by Shubham Dixit

Independent Expert in Email Forensics and Data File Conversion. Shubham reviewed this guide for technical accuracy. He is an independent external reviewer and not an employee of PCDOTS.

Profile  |  LinkedIn