First capture the victim’s ram using dump it tool. (For details visit here)
Now open bulk extractor viewer and click on to generate report
Now select the dump it image file and select an output folder for the report and click on start bulk extractor as seen below
Now in order to investigate the victim saved information of Email ID Click on email.txtas seen below
And also click on email_histogram.txt
