Personal Folder File
From Just Solve the File Format Problem
(Difference between revisions)
(→Links) |
(→Links: Updating Forensics Wiki links) |
||
| (One intermediate revision by one user not shown) | |||
| Line 23: | Line 23: | ||
== Links == | == Links == | ||
| − | * [https://googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20%28PFF%29%20format.pdf PFF format specification] (unofficial analysis) | + | * [[Wikipedia: Personal Storage Table]] |
| − | * [https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf Personal Folder File (PFF) forensics (Analyzing the horrible reference file format)] | + | * [https://googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20%28PFF%29%20format.pdf PFF format specification] (unofficial analysis) [https://web.archive.org/web/20151028083700/https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20(PFF)%20format.pdf (archived)] |
| + | * [https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf Personal Folder File (PFF) forensics (Analyzing the horrible reference file format)] [https://web.archive.org/web/20160301184716/https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf (archived)] | ||
* [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | * [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | ||
* [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | * [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | ||
| − | * [ | + | * [{{ForensicsWikiURL|personal_folder_file_%28pab%2C_pst%2C_ost%29}} Forensics Wiki page] |
| − | * [http://innovation-portal.dsitia.qld.gov.au/advice/1706/digital-public-records-outlook-calendars Digital Public Records - Outlook Calendars] (Queensland government challenge) | + | * [http://innovation-portal.dsitia.qld.gov.au/advice/1706/digital-public-records-outlook-calendars Digital Public Records - Outlook Calendars] (Queensland government challenge) <!-- The requested page is not available --> |
* [https://web.archive.org/web/20210630214214/https://archive.codeplex.com/?p=pstsdk CodePlex PST SDK Archive] | * [https://web.archive.org/web/20210630214214/https://archive.codeplex.com/?p=pstsdk CodePlex PST SDK Archive] | ||
Revision as of 14:53, 3 September 2023
A Personal Folder File is used by Microsoft Outlook to store e-mails and other things. There are three varieties, which exist in 32 and 64 bit varieties:
- Personal Address Book (PAB) - stores contacts/address book entries
- Personal Storage Table (PST) - has mailboxes and other things such as tasks, notes, and appointments
- Offline Storage Table (OST) - is used for offline storage of items from a remote Exchange server
The name "Personal Folder File" actually originally applied to the PST variety, but has been used as an "umbrella" name for all the varieties as well.
File identification
Files begin with hex bytes 21 42 44 4E.
Software
- libpff - library + tools to access PFF and OFF (Offline Folder File) formats
- libpst - includes utility to convert PST folders to both mbox and other formats
Links
- Wikipedia: Personal Storage Table
- PFF format specification (unofficial analysis) (archived)
- Personal Folder File (PFF) forensics (Analyzing the horrible reference file format) (archived)
- PST file format (official Microsoft description)
- PST file description
- Forensics Wiki page
- Digital Public Records - Outlook Calendars (Queensland government challenge)
- CodePlex PST SDK Archive
