Phase 2 — IE6 / Outlook Express index.dat parser (CFReDS gap G-002)

[Juwon1405]

Source

Opened from CFReDS Hacking Case integration (case-08).

Gap

parse_browser_history covers Chrome/Edge/Firefox SQLite schemas. Windows XP / IE6 era used index.dat binary format.

Blocks

• F-CFR-006 (Yahoo email cache: mrevilrulez@yahoo.com)

Proposal

Extend parse_browser_history with --format index_dat mode, or add parse_ie_index_dat primitive. Reference parsers: libpff, pasco, hindsight.

Estimate

2-3 days.