Personal Folder File
From Just Solve the File Format Problem
(Difference between revisions)
Dan Tobias (Talk | contribs) (Created page with "{{FormatInfo |subcat=E-Mail, newsgroups, and forums |extensions={{ext|pab}}, {{ext|pst}}, {{ext|ost}} |mimetypes={{mimetype|application/vnd.ms-outlook}} }} A [[Personal Folder...") |
(→Links: Updating Forensics Wiki links) |
||
| (9 intermediate revisions by 5 users not shown) | |||
| Line 3: | Line 3: | ||
|extensions={{ext|pab}}, {{ext|pst}}, {{ext|ost}} | |extensions={{ext|pab}}, {{ext|pst}}, {{ext|ost}} | ||
|mimetypes={{mimetype|application/vnd.ms-outlook}} | |mimetypes={{mimetype|application/vnd.ms-outlook}} | ||
| + | |pronom={{PRONOM|x-fmt/75}}, {{PRONOM|x-fmt/248}}, {{PRONOM|x-fmt/249}} | ||
}} | }} | ||
| − | A [[Personal Folder File]] is used by Microsoft Outlook to store e-mails and other things. There are three varieties, which exist in 32 and 64 bit varieties: | + | A [[Personal Folder File]] is used by [[Microsoft Outlook]] to store e-mails and other things. There are three varieties, which exist in 32 and 64 bit varieties: |
* '''Personal Address Book''' (PAB) - stores contacts/address book entries | * '''Personal Address Book''' (PAB) - stores contacts/address book entries | ||
| Line 15: | Line 16: | ||
Files begin with hex bytes <code>21 42 44 4E</code>. | Files begin with hex bytes <code>21 42 44 4E</code>. | ||
| + | |||
| + | == Software == | ||
| + | |||
| + | * [https://github.com/libyal/libpff libpff] - library + tools to access PFF and OFF (Offline Folder File) formats | ||
| + | * [http://www.five-ten-sg.com/libpst/ libpst] - includes utility to convert PST folders to both mbox and other formats | ||
== Links == | == Links == | ||
| − | * [https://googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20%28PFF%29%20format.pdf PFF format specification] | + | * [[Wikipedia: Personal Storage Table]] |
| + | * [https://googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20%28PFF%29%20format.pdf PFF format specification] (unofficial analysis) [https://web.archive.org/web/20151028083700/https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/Personal%20Folder%20File%20(PFF)%20format.pdf (archived)] | ||
| + | * [https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf Personal Folder File (PFF) forensics (Analyzing the horrible reference file format)] [https://web.archive.org/web/20160301184716/https://da1ba3cfdffc2404250f16d3711dfb32dcd40e96.googledrive.com/host/0B3fBvzttpiiScU9qcG5ScEZKZE0/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf (archived)] | ||
* [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | * [http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx PST file format (official Microsoft description)] | ||
* [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | * [http://www.five-ten-sg.com/libpst/rn01re05.html PST file description] | ||
| − | * [http:// | + | * [{{ForensicsWikiURL|personal_folder_file_%28pab%2C_pst%2C_ost%29}} Forensics Wiki page] |
| + | * [http://innovation-portal.dsitia.qld.gov.au/advice/1706/digital-public-records-outlook-calendars Digital Public Records - Outlook Calendars] (Queensland government challenge) <!-- The requested page is not available --> | ||
| + | * [https://web.archive.org/web/20210630214214/https://archive.codeplex.com/?p=pstsdk CodePlex PST SDK Archive] | ||
[[Category:Microsoft]] | [[Category:Microsoft]] | ||
[[Category:Address books and contacts]] | [[Category:Address books and contacts]] | ||
[[Category:Calendars]] | [[Category:Calendars]] | ||
Latest revision as of 14:53, 3 September 2023
A Personal Folder File is used by Microsoft Outlook to store e-mails and other things. There are three varieties, which exist in 32 and 64 bit varieties:
- Personal Address Book (PAB) - stores contacts/address book entries
- Personal Storage Table (PST) - has mailboxes and other things such as tasks, notes, and appointments
- Offline Storage Table (OST) - is used for offline storage of items from a remote Exchange server
The name "Personal Folder File" actually originally applied to the PST variety, but has been used as an "umbrella" name for all the varieties as well.
[edit] File identification
Files begin with hex bytes 21 42 44 4E.
[edit] Software
- libpff - library + tools to access PFF and OFF (Offline Folder File) formats
- libpst - includes utility to convert PST folders to both mbox and other formats
[edit] Links
- Wikipedia: Personal Storage Table
- PFF format specification (unofficial analysis) (archived)
- Personal Folder File (PFF) forensics (Analyzing the horrible reference file format) (archived)
- PST file format (official Microsoft description)
- PST file description
- Forensics Wiki page
- Digital Public Records - Outlook Calendars (Queensland government challenge)
- CodePlex PST SDK Archive
