Bulk_Extractor

26 views
Skip to first unread message

Rob Lee

unread,
Feb 20, 2012, 4:46:54 PM2/20/12
to aff-discuss
Does bulk_extractor use libpff to parse through the contents of
outlook files on a system? I seem to remember this, but cannot see
any discussion of it or a scanner built for PST trolling in addition
to the other scanners built into it?

Simson Garfinkel

unread,
Feb 20, 2012, 6:18:15 PM2/20/12
to aff-d...@googlegroups.com, bulk_extra...@googlegroups.com
bulk_extractor just extracts all of the text and recognizes patterns. It doesn't understand the PST file format currently. (We are slowly adding the ability to recognize small files, such as windows prefect files, VCARDs, and a few others.) PST would be hopeless, though, as the files are likely to be fragmented. We might decide to recognize individual PST records in the future.

I recommend sending questions about bulk_extarctor to bulk_extractor-users.

Simson

> --
> You received this message because you are subscribed to the Google Groups "aff-discuss" group.
> To post to this group, send email to aff-d...@googlegroups.com.
> To unsubscribe from this group, send email to aff-discuss...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/aff-discuss?hl=en.
>

Reply all
Reply to author
Forward
0 new messages