Represent a Microsoft Outlook email container (PST/OST)

[cyberinvestigationexpress]

An email database such as a Microsoft Outlook email container can be represented as a file system within a file.

filePath: \Users\username\AppData\Local\Microsoft\Outlook\Outlook.pst

• Contains folder items: \Users\username\AppData\Local\Microsoft\Outlook\Outlook.pst\Inbox
  ++ Contains message items which can be represented as EML files and can contain email, contact, and appointment items
  +++ Contains contents which can be represented as an EmailMessage observable object
  Note: In addition to email body text, Outlook email items contain compressed RTF message body (bodyRaw), which can contain addition information than the body text.

See libpff documentation for details on PST file format:
https://github.com/libyal/libpff/tree/main/documentation

[ajnelson-nist]

UCO Issue 380 spawned from this issue.