Personal Folder File
From Just Solve the File Format Problem
(Difference between revisions)
(added Wikipedia URL + replaced dead URLs) |
(→Links: Updating Forensics Wiki links) |
||
| Line 28: | Line 28: | ||
* [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | * [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | ||
* [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | * [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | ||
| − | * [ | + | * [{{ForensicsWikiURL|personal_folder_file_%28pab%2C_pst%2C_ost%29}} Forensics Wiki page] |
* [http://innovation-portal.dsitia.qld.gov.au/advice/1706/digital-public-records-outlook-calendars Digital Public Records - Outlook Calendars] (Queensland government challenge) <!-- The requested page is not available --> | * [http://innovation-portal.dsitia.qld.gov.au/advice/1706/digital-public-records-outlook-calendars Digital Public Records - Outlook Calendars] (Queensland government challenge) <!-- The requested page is not available --> | ||
* [https://web.archive.org/web/20210630214214/https://archive.codeplex.com/?p=pstsdk CodePlex PST SDK Archive] | * [https://web.archive.org/web/20210630214214/https://archive.codeplex.com/?p=pstsdk CodePlex PST SDK Archive] | ||
Latest revision as of 14:53, 3 September 2023
A Personal Folder File is used by Microsoft Outlook to store e-mails and other things. There are three varieties, which exist in 32 and 64 bit varieties:
- Personal Address Book (PAB) - stores contacts/address book entries
- Personal Storage Table (PST) - has mailboxes and other things such as tasks, notes, and appointments
- Offline Storage Table (OST) - is used for offline storage of items from a remote Exchange server
The name "Personal Folder File" actually originally applied to the PST variety, but has been used as an "umbrella" name for all the varieties as well.
[edit] File identification
Files begin with hex bytes 21 42 44 4E.
[edit] Software
- libpff - library + tools to access PFF and OFF (Offline Folder File) formats
- libpst - includes utility to convert PST folders to both mbox and other formats
[edit] Links
- Wikipedia: Personal Storage Table
- PFF format specification (unofficial analysis) (archived)
- Personal Folder File (PFF) forensics (Analyzing the horrible reference file format) (archived)
- PST file format (official Microsoft description)
- PST file description
- Forensics Wiki page
- Digital Public Records - Outlook Calendars (Queensland government challenge)
- CodePlex PST SDK Archive
