<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule"
	>
<channel>
	<title>Comments on: Microsoft to Release the .PST File Format</title>
	<atom:link href="http://www.forensicblog.org/2009/10/26/microsoft-to-release-the-pst-file-format/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.forensicblog.org/2009/10/26/microsoft-to-release-the-pst-file-format/</link>
	<description>Digital forensics from the view of a computer scientist</description>
	<lastBuildDate>Fri, 07 May 2010 08:29:33 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Mike Murr</title>
		<link>http://www.forensicblog.org/2009/10/26/microsoft-to-release-the-pst-file-format/comment-page-1/#comment-2447</link>
		<dc:creator>Mike Murr</dc:creator>
		<pubDate>Mon, 21 Dec 2009 12:33:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.forensicblog.org/?p=196#comment-2447</guid>
		<description>Hi Luke,

There are a few options.  If the tool runs on Microsoft Windows, the Messaging API (MAPI) provides programmatic access to Microsoft Outlook.  Another approach is to attempt and reverse engineer the format, and develop analysis code based on the author&#039;s understanding of the format.  Alternatively, techniques such as file carving can also be used.</description>
		<content:encoded><![CDATA[<p>Hi Luke,</p>
<p>There are a few options.  If the tool runs on Microsoft Windows, the Messaging API (MAPI) provides programmatic access to Microsoft Outlook.  Another approach is to attempt and reverse engineer the format, and develop analysis code based on the author&#8217;s understanding of the format.  Alternatively, techniques such as file carving can also be used.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Luke</title>
		<link>http://www.forensicblog.org/2009/10/26/microsoft-to-release-the-pst-file-format/comment-page-1/#comment-2207</link>
		<dc:creator>Luke</dc:creator>
		<pubDate>Mon, 30 Nov 2009 10:04:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.forensicblog.org/?p=196#comment-2207</guid>
		<description>Hi Mike,

Until the standard is released, how did the forensic examiners manage to extract the emails data from damaged pst files? In situations when neither scanpst, pffrecover/pffexport, etc. work how do you extract the contents of the file?

Cheers,
Luke</description>
		<content:encoded><![CDATA[<p>Hi Mike,</p>
<p>Until the standard is released, how did the forensic examiners manage to extract the emails data from damaged pst files? In situations when neither scanpst, pffrecover/pffexport, etc. work how do you extract the contents of the file?</p>
<p>Cheers,<br />
Luke</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic page generated in 0.434 seconds. -->
<!-- Cached page generated by WP-Super-Cache on 2010-07-22 13:09:10 -->
