OST and PST Forensics 2017.02.23
ST and PST Forensics is an advanced tool for data access, analysis, deep recovery, preview and export for MS Exchange and MS Outlook .ost and .pst files.
It is designed to recover as much information as possible from any data source: valid .ost and .pst files, corrupted files, memory or drive images. OST & PST Forensics utilizes a new approach: find all accessible data blocks, restore and link back data hierarchy (messages, files, folders, etc.).
Exchange and Outlook .ost & .pst formats work similar to any other database: all removed data blocks are marked as "deleted" and the space as "free" until it is replaced by any other data. This allows our tool to recover old data records and old versions of existing records. It is not uncommon to find tens of folder content tables versions, thus version and change tracking is possible.
All Items properties are shown with additional reference to blocks and nodes IDs making it an ideal tool for detailed analyses and reporting.
There are lots of additional features like text and binary search, hex viewer for data blocks and attached data, secured viewer for html based messages with links and active content disabled, message printing, properties lists and content tables XML export, etc.
All Offline Storage (.ost) and Personal Storage (.pst) formats are supported.
