ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(Tools)
Line 8: Line 8:
 
}}
 
}}
  
The '''libpff''' package contains [[Linux]] based library and applications to read the [[Personal Folder File (PAB, PST, OST)]] format.
+
The '''libpff''' package contains a library and applications to read the [[Personal Folder File (PAB, PST, OST)]] format.
 
+
It has been ported to other platforms like [[FreeBSD]] [[NetBSD]] [[OpenBSD]] [[Mac OS X]] and [[Windows]] as well.
+
  
 
== History ==  
 
== History ==  

Revision as of 13:27, 11 December 2010

libpff
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libpff.sourceforge.net

The libpff package contains a library and applications to read the Personal Folder File (PAB, PST, OST) format.

History

Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.

Currently libpff partially supports the data in PAB files.

Tools

The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered

External Links