francesco wrote:
Recent versions of Outlook (since 2010 I think) seem to compact the file in background so you're likely not going to find much without using a tool that scans the disk for the messages.
The scan for the encoded data approach does not work with deflate compressed OST files. The approach was not fool proof in the first place since it only worked with 1 variant of the encoding PST/OST supports.
If you want to apply a similar approach for deflate compressed data use bulkextractor.
francesco wrote:
Too bad there don't seem to be valid opensource Outlook PST/OST mail recovery tools available even though Microsoft made all the specs public several years ago.
So the MS specs are incomplete, see my work on PFF format for comparison.
Also not sure what you mean "by valid opensource Outlook PST/OST mail recovery tools":
* pffexport will recover email from a PST/OST
* you can use a carver to recover PST/OST files
↧