Notifications
Clear all

OST Forensics

7 Posts
3 Users
0 Reactions
675 Views
(@loveboatcaptain83)
Active Member
Joined: 6 years ago
Posts: 13
Topic starter  

Hello!

Does anybody know where I can find the structure/inner workings of an OST file?

Particularly relating to deleted emails or conversations.

Thanks!


   
Quote
(@loveboatcaptain83)
Active Member
Joined: 6 years ago
Posts: 13
Topic starter  

Don't worry I found it )


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Don't worry I found it )

I dont' think anyone was actually worried, but I believe that if you actually posted WHERE you find it (given that it is a public resource) it would be useful to the community at large.

jaclaz


   
ReplyQuote
kastajamah
(@kastajamah)
Estimable Member
Joined: 8 years ago
Posts: 113
 

Don't worry I found it )

I dont' think anyone was actually worried, but I believe that if you actually posted WHERE you find it (given that it is a public resource) it would be useful to the community at large.

jaclaz

Agreed.


   
ReplyQuote
(@loveboatcaptain83)
Active Member
Joined: 6 years ago
Posts: 13
Topic starter  

Don't worry I found it )

I dont' think anyone was actually worried, but I believe that if you actually posted WHERE you find it (given that it is a public resource) it would be useful to the community at large.

jaclaz

Hah! People could have been worried, you don't know )

I take your point though, I've put a couple of links below where a found some useful information.

https://www.five-ten-sg.com/libpst/rn01re05.html

https://github.com/libyal/libpff/blob/master/documentation/Personal%20Folder%20File%20(PFF)%20format.asciidoc

Hope this helps,

Cx


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Hah! People could have been worried, you don't know )

Sure, I said "I think" as I have no certainty, however I ran a poll wink
Are you worried about member Chump NOT finding the structure/inner workings of an OST file?

And out of 32 participants I got these answers roll

Yes, I didn't sleep last night thinking about the poor chap 0
Yes, though it is essentially a S.E.P. 0
No, but I am slightly concerned about his search results 3
No. I don't care at all. 17
No. And you could well have something better to do than making this kind of polls. 11
Viva Zapata!1

Which essentially confirmed my gut feelings about the issue.

I take your point though, I've put a couple of links below where a found some useful information.

https://www.five-ten-sg.com/libpst/rn01re05.html

https://github.com/libyal/libpff/blob/master/documentation/Personal%20Folder%20File%20(PFF)%20format.asciidoc

Hope this helps,

Cx

Thanks )

jaclaz


   
ReplyQuote
(@loveboatcaptain83)
Active Member
Joined: 6 years ago
Posts: 13
Topic starter  

HAHA! Well that's me well and truly told. D

Thanks for your through research on the matter though. At least now I can sleep well; safe in the knowledge that I'm not burdening anyone else with my digital forensics problems.

I can finally move on….


   
ReplyQuote
Share: