Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(See Also)
(External Links)
Line 32: Line 32:
== External Links ==
== External Links ==
* [http://code.google.com/p/libpff/ Project site]
* [https://code.google.com/p/libpff/ Project site]
* [https://sourceforge.net/projects/libpff/ Old project site]
* [https://code.google.com/p/libpff/wiki/Building Building libpff and tools from source]

Revision as of 12:43, 21 July 2013

Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: code.google.com/p/libpff/

The libpff package contains a library and tools to read the Personal Folder File (PAB, PST, OST) format.


Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported. Support was added to deal with corrupted files and to recover data.


The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered


Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project.

See Also

External Links