Difference between revisions of "Libpff"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) |
||
| Line 27: | Line 27: | ||
== External Links == | == External Links == | ||
| − | * [http:// | + | * [http://code.google.com/p/libpff/ Project site] |
| + | * [https://sourceforge.net/projects/libpff/ Old project site] | ||
Revision as of 02:50, 29 July 2012
| libpff | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | libpff.sourceforge.net |
The libpff package contains a library and applications to read the Personal Folder File (PAB, PST, OST) format.
History
Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.
Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.
Currently libpff partially supports the data in PAB files.
Tools
The libpff package contains the following tools:
- pffexport, which exports the items stored in PAB, PST and OST (PFF) files
- pffinfo, which shows information about PFF files.
pffrecover, has been replaced by pffexport -m recovered
