ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Libpff"

From ForensicsWiki
Jump to: navigation, search
Line 25: Line 25:
'''pffrecover''', has been replaced by '''pffexport -m recovered'''
'''pffrecover''', has been replaced by '''pffexport -m recovered'''
== External Links ==
== See Also ==
* [[libpst]]
== External Links ==
* [ Project site]
* [ Project site]
* [ Old project site]
* [ Old project site]

Revision as of 07:52, 29 July 2012

Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL

The libpff package contains a library and applications to read the Personal Folder File (PAB, PST, OST) format.


Libpff was created by Joachim Metz in 2008, while working for Hoffmann Investigations.

Libpff is a rewrite of earlier work on the PST file format by the libpst project. Libpff was updated to be a shared library and support the OST and PAB files.

Currently libpff partially supports the data in PAB files.


The libpff package contains the following tools:

  • pffexport, which exports the items stored in PAB, PST and OST (PFF) files
  • pffinfo, which shows information about PFF files.

pffrecover, has been replaced by pffexport -m recovered

See Also

External Links