We are sure that you already have AXIOM installed on your workstation. So run the tool and create a new case. Now, the most interesting thing is the evidence source. If you have already walked through the recipe Extracting Web Browser Data from Pagefile.sys in Chapter 8, Web Browser Forensics, you may guess what we are going to do next. Yes, webmail artifacts can be extracted from pagefile.sys, swapfile.sys and hiberfil.sys. So you can use one of these files as the data source, or the whole forensic image - AXIOM will find and parse data from these files automatically.