Tuesday, October 25, 2011

PST Files Process

Remember that before you do PST files processing, please make sure that all the PST files have no password protected. Else you will miss the important data needed.

One nice free tool to recover the password:
http://www.nirsoft.net/utils/pst_password.html

How the password is saved in the pst file ?
http://www.nirsoft.net/articles/pst_password_bug.html

Detecting a Password Protected PST:
http://blogs.msdn.com/b/stephen_griffin/archive/2009/02/17/detecting-a-password-protected-pst.aspx

Outlook Personal Folders (.pst) File Format:
http://msdn.microsoft.com/en-us/library/ff385210%28v=office.12%29.aspx
"4.2 Strength of PST Password
The PST Password, which is stored as a property value in the Message store, is a superficial mechanism that requires the client implementation to enforce the stored password. Because the password itself is not used as a key to the encoding and decoding cipher algorithms, it does not provide any security benefit to preventing the PST data to be read by unauthorized parties.
Moreover, the password is stored as a CRC-32 hash of the original password string, which is prone to collisions and is relatively weak against a brute-force approach."

No comments:

Post a Comment