Pasco2 - Internet Explorer History Record Parser

Overview

Pasco2 is a parser for producing a human readable form of the history and cache records produced by Microsoft's Internet Explorer browser. These records are stored in a number of binary files called index.dat, the format of which remains undocumented by Microsoft. This tool is based on Keith Jones' earlier IE parser, which is named Pasco.

This reimplementation extends on the earlier pasco tool. The tool now understands the subtle semantic differences between Cache and History files. In addition, in history files two new fields are decoded, the count of hits, and a DOSTIME based timestamp. Error handling is also improved. Pacso2 also includes a reverse engineering helper utility, called poller, which polls a particular index.dat file for changes. Any changes in the last polling interval are displayed to the console.

Downloading

The source code and a java binary distribution may be downloaded from the Pasco2 Sourceforge Site.