Pasco is a forensic tool that examines the content of cache files (index.dat) produced by Microsoft Internet Explorer. It parses the file and outputs a field separated that can be loaded in a spreadsheet. This package is useful in forensics investigations.
sudo apt install pasco (34 KB)
Dependências: libc6
Escolha um comando ao lado para ver a descrição e a ajuda completa.
pasco
Tool to extract information from MS IE cache files
root@kali:~# pasco -h
ERROR - The index.dat file cannot be opened!
Usage: pasco [options] <filename>
-d Undelete Activity Records
-t Field Delimiter (TAB by default)