Improving recovery methodology

libyal / libpff

Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format

GNU Lesser General Public License v3.0

286 stars 74 forks source link

Improving recovery methodology #91

Closed zy-ph closed 3 years ago

zy-ph commented 4 years ago

I am trying to recover deleted items from an ost file, but I get only one item. Other tools can recover a lot more. Link to log file from 'pffexport -v -m recovered [name hidden].ost >log.txt 2>&1'

pffinfo 20200808

Personal Folder File information: File size: 650616832 bytes File content type: Offline Storage Tables (OST) File type: 64-bit with 4k page Encryption type: none

Message store: Password checksum: N/A

Note I limited the node (footer) data to 32 bytes

joachimmetz commented 4 years ago

Other tools can recover a lot more.

libpff is open source, if you want to help improve the recovery methodology go ahead

joachimmetz commented 3 years ago

No suggestions for improving recovery method from original reporter, closing