Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
Switch branches/tags
Nothing to show
Clone or download
Latest commit fecb691 Aug 12, 2018
Permalink
Failed to load latest commit information.
common Applied updates Aug 12, 2018
documentation Worked on documentation Jul 13, 2018
dpkg Applied updates Feb 5, 2018
include Fixed inconsistent definition of libpff_item_get_entry_value_floating… Apr 4, 2018
jpff Moved libcstring macros to common Nov 8, 2016
libpff Applied updates Aug 12, 2018
m4 Applied updates Aug 12, 2018
manuals Applied updates Feb 5, 2018
msvscpp Updated msvscpp files Jul 15, 2018
pfftools Applied updates Aug 12, 2018
po Moved libcstring macros to common Nov 8, 2016
pypff-python2 Applied updates Aug 12, 2018
pypff-python3 Applied updates Aug 12, 2018
pypff Applied updates Aug 12, 2018
tests Applied updates Aug 12, 2018
.codecov.yml Applied updates Nov 29, 2017
.gitignore Worked on tests Jul 13, 2018
.travis.yml Applied updates Aug 12, 2018
AUTHORS Applied updates Feb 5, 2018
COPYING Applied updates Apr 2, 2018
ChangeLog Worked on Python bindings Jan 14, 2017
Makefile.am Worked on tests Jul 24, 2017
NEWS Initial commit of version 20141002. Oct 2, 2014
README Updated README Apr 5, 2017
acinclude.m4 Worked on tests Sep 17, 2017
appveyor.yml Applied updates Aug 12, 2018
autogen.ps1 Worked on tests Nov 11, 2016
autogen.sh Worked on tests Aug 27, 2017
build.ps1 Applied updates Aug 12, 2018
configure.ac Applied updates Aug 12, 2018
libpff.ini Applied updates Aug 12, 2018
libpff.pc.in Moved libcstring macros to common Nov 8, 2016
libpff.spec.in Applied updates Nov 29, 2017
runtests.ps1 Moved libcstring macros to common Nov 8, 2016
runtests.sh Applied updates Aug 12, 2018
setup.py Applied updates Aug 12, 2018
synclibs.ps1 Applied updates Feb 5, 2018
synclibs.sh Applied updates Aug 12, 2018
syncsharedlibs.sh Applied updates Aug 12, 2018
synctestdata.sh Worked on tests Nov 12, 2016
synczlib.ps1 Applied updates Nov 29, 2017

README

libpff is a library to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format.

These format are used by Microsoft Outlook to store email, contacts and other data.

Project information:

* Status: alpha
* Licence: LGPLv3+

PFF/OFF is used in several file types:

* PAB (Personal Address Book)
* PST (Personal Storage Table)
* OST (Offline Storage Table)

Supported formats:

* 32-bit ANSI (string)
* 64-bit Unicode (string)
* 64-bit with 4k pages with DEFLATE compression (Compressed OST files) (as of version 20130722)

Additional features:

* item recovery
* handles corrupted encrypted PFF with encryption type none

Also see:

* PFF forensics - analyzing the horrible reference file format: https://github.com/libyal/documentation/blob/master/PFF%20Forensics%20-%20analyzing%20the%20horrible%20reference%20file%20format.pdf
* PFF forensics - e-mail and appoinment falsification analysis: https://github.com/libyal/documentation/blob/master/PFF%20forensics%20-%20e-mail%20and%20appoinment%20falsification%20analysis.pdf
* MAPI definitions: https://github.com/libyal/libfmapi/blob/master/documentation/MAPI%20definitions.pdf

Planned:

* Multi-threading support
* The Java (JNI) bindings are not operational and are there as long-term work in progress.

For more information see:

* Project documentation: https://github.com/libyal/libpff/wiki/Home
* How to build from source: https://github.com/libyal/libpff/wiki/Building