Electronic mail (e-mail) has been one of the most popular forms of communication on electronic devices. E-mails can be sent from computers, websites, and the phones in so many pockets across the globe. This medium allows for the transmission of information in the form of text, HTML, attachments, and more in a reliable fashion. It is no wonder then, that e-mails can play a large part in investigations, especially for cases involving the workplace. In this chapter, we are going to work with a common e-mail format, Personal Storage Table (PST), used by Microsoft Outlook to store e-mail content in a single file.
The following script introduces us to a series of operations available via the libpff
library developed by Joachim Metz. This library allows us to open the PST file and explore its contents in a Pythonic manner. Additionally, the code we build demonstrates how to create dynamic HTML-based graphics to provide additional context to spreadsheet...