ATTENTION: The new home of the Digital Forensics Wiki is at Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(See Also)
Line 28: Line 28:
== See Also ==
== See Also ==
* [[Personal Folder File (PAB, PST, OST)]]
* [[libpst]]
* [[libpst]]

Revision as of 07:11, 26 August 2012

Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL

The libpff package contains a library and tools to read the Personal Folder File (PAB, PST, OST) format.


Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported. Support was added to deal with corrupted files and to recover data.


The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered


Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project.

See Also

External Links