Difference between revisions of "Libpff"

From Forensics Wiki
Jump to: navigation, search
Line 14: Line 14:
 
Libpff was created by [[Joachim Metz]] in 2008, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations].
 
Libpff was created by [[Joachim Metz]] in 2008, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations].
  
Libpff is a rewrite of earlier work on the PST file format by the [http://www.five-ten-sg.com/libpst/ libpst project]. Libpff was updated to be a shared library and support the OST and PAB files.
+
Libpff is a rewrite of earlier work on the PST file format by the [[libpst|libpst project]].
  
Currently libpff partially supports the data in PAB files.
+
Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported.
 +
Support was added to deal with corrupted files and to recover data.
  
 
== Tools ==  
 
== Tools ==  

Revision as of 03:14, 29 July 2012

libpff
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libpff.sourceforge.net

The libpff package contains a library and applications to read the Personal Folder File (PAB, PST, OST) format.

Contents

History

Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project.

Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported. Support was added to deal with corrupted files and to recover data.

Tools

The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered

See Also

External Links