{"id":13705872,"url":"https://github.com/rsa9000/regfanalysistools","last_synced_at":"2025-05-05T17:30:52.081Z","repository":{"id":163146506,"uuid":"58146624","full_name":"rsa9000/regfanalysistools","owner":"rsa9000","description":"Low-level MS Windows registry files analysis tools","archived":false,"fork":false,"pushed_at":"2016-05-05T16:56:34.000Z","size":17,"stargazers_count":19,"open_issues_count":0,"forks_count":5,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-08-03T22:16:13.393Z","etag":null,"topics":["regf","registry-analysis","registry-file","registry-format","windows-registry"],"latest_commit_sha":null,"homepage":null,"language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rsa9000.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2016-05-05T16:52:50.000Z","updated_at":"2024-03-24T13:45:18.000Z","dependencies_parsed_at":"2024-01-14T20:17:08.750Z","dependency_job_id":null,"html_url":"https://github.com/rsa9000/regfanalysistools","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsa9000%2Fregfanalysistools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsa9000%2Fregfanalysistools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsa9000%2Fregfanalysistools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rsa9000%2Fregfanalysistools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rsa9000","download_url":"https://codeload.github.com/rsa9000/regfanalysistools/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":224455947,"owners_count":17314212,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["regf","registry-analysis","registry-file","registry-format","windows-registry"],"created_at":"2024-08-02T22:00:49.167Z","updated_at":"2024-11-13T13:30:59.997Z","avatar_url":"https://github.com/rsa9000.png","language":"C","funding_links":[],"categories":["C"],"sub_categories":[],"readme":"regfanalysistools: low-level MS Windows registry files analysis\n===============================================================\n\nMore information about internal regf files format:\n\n * https://github.com/libyal/libregf/blob/master/documentation/Windows%20NT%20Registry%20File%20(REGF)%20format.asciidoc\n * https://github.com/msuhanov/regf/blob/master/Windows%20registry%20file%20format%20specification.md\n\nFeatures\n--------\n\nThis set of utils is designed primarily for analysis of the corrupted\nregistry files.\n\nEach utility shows file content from own point of view:\n\n * as a container of elements of variable length, where some elements could\n   contain links to other elements\n * as as tree of keys and values with more or less detailed info about each\n   of them\n\nBesides of main analysis work each utility verifies data consistency by\nchecking for orphaned cells, cells with multiple reference, required minimum\ncell size, cell signatures, etc.\n\nThe following OS(s) are tested/supported:\n\n * FreeBSD\n * GNU/Linux\n\nInstallation\n------------\n\nTo build utils from sources just run as regular user:\n\n    $ make\n\nand to install them, run the following command as privileged user:\n\n    # make install\n\nUsage\n-----\n\nPackage contains few utils:\n\n * regfdump - dumps registry file in element by element manner independently\n   of logical tree structure\n * regfwalk - walk over the registry tree and print every portion of info\n   about each founded element\n * regftree - lite version of regfwalk: print only logical tree structure\n   (keys hierarchy) and values\n\nEach utils require only registry filename as command line argument. Main data\nprinted to STDOUT, while error/warning messages printed to STDERR.\n\nExamples:\n\n    $ regfdump WIDNOWS/system32/config/SYSTEM\n\nor\n\n    $ regfwalk WINDOWS/system32/config/SOFTWARE\n\nor\n\n    $ regftree WINDOWS/system32/config/SOFTWARE\n\nTODO\n----\n\n * make utils more resistant to corrupted input files\n * add internal help\n\nLicense\n-------\n\nThis project is licensed under the terms of the ISC license. See\nthe LICENSE file for license rights and limitations.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frsa9000%2Fregfanalysistools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frsa9000%2Fregfanalysistools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frsa9000%2Fregfanalysistools/lists"}