Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(Tools)
Line 24: Line 24:
 
* '''pffexport''', which exports the items stored in PAB, PST and OST (PFF) files
 
* '''pffexport''', which exports the items stored in PAB, PST and OST (PFF) files
 
* '''pffinfo''', which shows information about PFF files.
 
* '''pffinfo''', which shows information about PFF files.
* '''pffrecover''', which exports recovered items stored in PAB, PST and OST (PFF) files
+
* '''pffrecover''', has been replaced by '''pffexport -m recovered'''
  
 
== External Links ==
 
== External Links ==
  
 
* [http://libpff.sourceforge.net libpff project site]
 
* [http://libpff.sourceforge.net libpff project site]

Revision as of 10:11, 29 May 2010

libpff
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libpff.sourceforge.net

The libpff package contains Linux based library and applications to read the Personal Folder File (PAB, PST, OST) format.

It has been ported to other platforms like FreeBSD NetBSD OpenBSD Mac OS X and Windows as well.

History

Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.

Currently libpff partially supports the data in PAB files.

Tools

The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.
  • pffrecover, has been replaced by pffexport -m recovered

External Links