Electronic mail (email) continues to be one of the most common methods of communication in the workplace, surviving the number of new communication services present in today's world. Emails can be sent from computers, websites, and the phones that're in so many pockets across the globe. This medium allows for the transmission of information in the form of text, HTML, attachments, and more in a reliable fashion. It's no wonder, then, that emails can play a large part in investigations, especially for cases involving the workplace. In this chapter, we're going to work with a common email format, Personal Storage Table (PST), used by Microsoft Outlook to store email content in a single file.
The script we'll develop in this chapter introduces us to a series of operations available through the libpff library developed by Joachim...