An email database such as a Microsoft Outlook email container can be represented as a file system within a file.
filePath: \Users\username\AppData\Local\Microsoft\Outlook\Outlook.pst
- Contains folder items: \Users\username\AppData\Local\Microsoft\Outlook\Outlook.pst\Inbox
++ Contains message items which can be represented as EML files and can contain email, contact, and appointment items
+++ Contains contents which can be represented as an EmailMessage observable object
Note: In addition to email body text, Outlook email items contain compressed RTF message body (bodyRaw), which can contain addition information than the body text.
See libpff documentation for details on PST file format:
https://github.com/libyal/libpff/tree/main/documentation
An email database such as a Microsoft Outlook email container can be represented as a file system within a file.
filePath: \Users\username\AppData\Local\Microsoft\Outlook\Outlook.pst
++ Contains message items which can be represented as EML files and can contain email, contact, and appointment items
+++ Contains contents which can be represented as an EmailMessage observable object
Note: In addition to email body text, Outlook email items contain compressed RTF message body (bodyRaw), which can contain addition information than the body text.
See libpff documentation for details on PST file format:
https://github.com/libyal/libpff/tree/main/documentation