[DFSci] recovering outlook pst

[Garfinkel, Simson (CIV)]

Marc,

The problem that you will have with using any first or second-generation carver (scalpel, photorec, foremost, etc), is that PST files are highly fragmented and these carvers do not do fragment recovery carving. (I believe that Photorec has limited ability to remove a single fragment within a file that results from UFS file systems, but I do not think that it can handle anything more complicated.)  Instead of attempting to recover the PST file, I believe you will have better luck trying to recover the individual messages.

Simson