ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
(See Also)
Line 28: Line 28:
== See Also ==
== See Also ==
* [[Personal Folder File (PAB, PST, OST)]]
* [[libpst]]
* [[libpst]]

Revision as of 07:11, 26 August 2012

Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL

The libpff package contains a library and tools to read the Personal Folder File (PAB, PST, OST) format.


Libpff is a cross-platform shared library that support PST, OST and PAB files. Currently the data in PAB files is only partially supported. Support was added to deal with corrupted files and to recover data.


The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered


Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project.

See Also

External Links