![]() |
Foundstone. Provides the best tools I found so far to interprete Microsoft Windows' Internet Explorer index.dat (with Pasco) and cookie files (with Galleta), and many more... Sources can be downloaded from the ODESSA project (the open digital evidence search and seizure architecture) which can be found at http://sourceforge.net/projects/odessa/ |