Difference between revisions of "Nickfile (NK2)"

From ForensicsWiki
Jump to: navigation, search
(See also)
(External Links)
 
Line 21: Line 21:
 
== External Links ==
 
== External Links ==
  
* [http://code.google.com/p/libnk2/downloads/detail?name=Nickfile%20%28NK2%29%20format.pdf Nickfile (NK2) format specification], by the [[libnk2|libnk2 project]]
+
* [https://googledrive.com/host/0B3fBvzttpiiSZFNVS2JjWkNnelk/Nickfile%20(NK2)%20format.pdf Nickfile (NK2) format specification], by the [[libnk2|libnk2 project]]
* [http://code.google.com/p/libpff/downloads/detail?name=MAPI%20definitions.pdf MAPI definitions], by the [[libpff|libpff project]]
+
* [https://googledrive.com/host/0B3fBvzttpiiSRlR1QkU5Vk43ZWs/MAPI%20definitions.pdf MAPI definitions], by the [[libpff|libpff project]]
  
 
[[Category:File Formats]]
 
[[Category:File Formats]]

Latest revision as of 13:20, 23 September 2013

Microsoft Outlook uses the Nickfile (NK2) to store e-mail address aliases.

The file type is also known as the Outlook AutoComplete File or the Nickname file.

MIME types

The actual mime type of the NK2 format is unspecified

File signature

The NK2 has the following file signature: hexadecimal: 0D F0 AD BA

Note that other sources claim that the file signature is hexadecimal: 0D F0 AD BA 0A 00 00 00

Contents

The NK2 basically contains a list of items. The attributes of these items are defined by the Microsoft Outlook Message API (MAPI).

External Links