Difference between revisions of "Libpff"

From Forensics Wiki
Jump to: navigation, search
Line 25: Line 25:
 
'''pffrecover''', has been replaced by '''pffexport -m recovered'''
 
'''pffrecover''', has been replaced by '''pffexport -m recovered'''
  
== External Links ==
+
== See Also ==
 +
* [[libpst]]
  
 +
== External Links ==
 
* [http://code.google.com/p/libpff/ Project site]
 
* [http://code.google.com/p/libpff/ Project site]
 
* [https://sourceforge.net/projects/libpff/ Old project site]
 
* [https://sourceforge.net/projects/libpff/ Old project site]

Revision as of 02:52, 29 July 2012

libpff
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libpff.sourceforge.net

The libpff package contains a library and applications to read the Personal Folder File (PAB, PST, OST) format.

Contents

History

Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.

Currently libpff partially supports the data in PAB files.

Tools

The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered

See Also

External Links