PASCO

Description

Pasco is a forensic tool for reading the index.dat file that are created by Internet Explorer. Other browser like Firefox and Safari don’t use the index.dat file. The index.dat file leaves traces of a user’s browsing history.

Usage

Syntax

pasco [options] <filename>

Options

        -d Undelete Activity Records
	-t Field Delimiter (TAB by default)

Example

Accessing index.dat

cyborg@cyborg:~$ cd /media/cyborg/F81830DC18309C16/Users/ztrela1/AppData/Local/Microsoft/Windows/Temporary\ Internet\ Files/Content.IE5/

 

Processing index.dat

cyborg@cyborg:/media/cyborg/F81830DC18309C16/Users/ztrela1/AppData/Local/Microsoft/Windows/Temporary Internet Files/Content.IE5$ pasco index.dat 
History File: index.dat Version: 0.0

TYPE	URL	MODIFIED TIME	ACCESS TIME	FILENAME	DIRECTORY	HTTP HEADERS

 

0 Comments

Leave a reply

CONTACT US

We're are building as a community and a team. Be a part of it.

Sending

©2017 Ztrela Knowledge Solutions Pvt. Ltd

Log in with your credentials

Forgot your details?