Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(libpff)
 
Line 9: Line 9:
  
 
The '''libpff''' package contains [[Linux]] based library and applications to read PST, OST and PAB files.
 
The '''libpff''' package contains [[Linux]] based library and applications to read PST, OST and PAB files.
 +
 
It has been ported to other platforms like [[FreeBSD]] [[NetBSD]] [[OpenBSD]] [[Mac OS X]] and [[Windows]] as well.
 
It has been ported to other platforms like [[FreeBSD]] [[NetBSD]] [[OpenBSD]] [[Mac OS X]] and [[Windows]] as well.
  

Revision as of 06:22, 31 January 2009

libpff
Maintainer: Joachim Metz, David Loveall
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libpff.sourceforge.net

The libpff package contains Linux based library and applications to read PST, OST and PAB files.

It has been ported to other platforms like FreeBSD NetBSD OpenBSD Mac OS X and Windows as well.

History

Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.

Currently libpff partially supports the data in PAB files.

Tools

The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.
  • pffrecover, which exports recovered items stored in PAB, PST and OST (PFF) files

External Links