galleta
Internet Explorer cookie forensic parser
TLDR
Parse IE cookies
$ galleta [index.dat]
Output to file$ galleta [index.dat] > [cookies.txt]
Parse with delimiters$ galleta -d [index.dat]
SYNOPSIS
galleta [options] file
DESCRIPTION
galleta is a digital forensics tool that parses Internet Explorer cookie files. It extracts cookie data including domains, paths, values, and timestamps from index.dat files.The tool produces human-readable or delimited output for analysis. It's used in forensic investigations to examine web browsing history and user activity.galleta handles the binary index.dat format used by older versions of Internet Explorer.
PARAMETERS
FILE
Internet Explorer cookie file (index.dat).-d
Delimited output for spreadsheets.--help
Display help information.
INSTALL
sudo apt install galleta
nix profile install nixpkgs#galleta
CAVEATS
Only for IE index.dat format. Modern browsers use different formats. File must be accessible (not locked).
HISTORY
galleta (Spanish for "cookie") is part of forensic toolkit collections for analyzing Internet Explorer artifacts. It parses the proprietary index.dat format used by IE for cookie storage.
SEE ALSO
strings(1)
