Libregf

From ForensicsWiki
Revision as of 01:32, 8 June 2012 by Joachim Metz (Talk | contribs)

Jump to: navigation, search
libregf
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libregf.sourceforge.net

The libregf package contains a library and applications to read the Windows NT Registry File (REGF) format.

History

Libregf was created by Joachim Metz in 2009, while working for Hoffmann Investigations.

Tools

The libregf package contains the following tools:

  • regfinfo, which shows information about REGF files.
  • regfmount, which mounts the keys and values in a REGF file as directories and files.

External Links