Forensicswiki.org has moved to this site, forensicswiki.xyz. For information, please join the Google Group forensicswiki-reborn
Libpff
Jump to navigation
Jump to search
libpff | |
---|---|
Maintainer: | Joachim Metz |
OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
Genre: | Analysis |
License: | LGPL |
Website: | github.com/libyal/libpff/ |
The libpff package contains a library and tools to read the Personal Folder File (PAB, PST, OST) format.
Features
Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported. Support was added to deal with corrupted files and to recover data.
Tools
The libpff package contains the following tools:
- pffexport, which exports the items stored in PAB, PST and OST (PFF) files
- pffinfo, which shows information about PFF files.
pffrecover, has been replaced by pffexport -m recovered
History
Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.
Libpff is a rewrite of earlier work on the PST file format by the libpst project.