An introduction to libpff
The libpff library allows us to reference and navigate through PST objects in a programmatic manner. The root_folder() function allows us to reference the RootFolder, which is the base of the PST and the starting point for our recursive analysis of e-mail content. Within the RootFolder are folders and messages. The folders can contain other subfolders or messages. Folders have properties that include the name of the folder, the number of sub-folders, and the number of sub-messages. Messages are objects representing messages and has attributes, including the subject line, the name of all participants, and several time stamps.
How to install libpff and pypff
Installing some third-party libraries can be more difficult than ...
Get Learning Python for Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
