OST and PST Forensics Specifications
|
Access, analyze, recover, export Microsoft Exchange and Outlook .OST and .PST files.
Exchange and Outlook .ost & .pst formats work similar to any other database: all removed data blocks are marked as "deleted" and the space as "free" until it is replaced by any other data. This allows our tool to recover old data records and old versions of existing records. It is not uncommon to find tens of folder content tables versions, thus version and change tracking is possible.
All Items properties are shown with additional reference to blocks and nodes IDs making it an ideal tool for detailed analyses and reporting. There are lots of additional features like text and binary search, hex viewer for data blocks and attached data, secured viewer for html based messages with links and active content disabled, message printing, properties lists and content tables XML export, etc. All Offline Storage (.ost) and Personal Storage (.pst) formats are supported.