libyal / libregf Goto Github PK
View Code? Open in Web Editor NEWLibrary and tools to access the Windows NT Registry File (REGF) format
License: GNU Lesser General Public License v3.0
Library and tools to access the Windows NT Registry File (REGF) format
License: GNU Lesser General Public License v3.0
The name libyal was initially a pun on the naming theme of the various library projects. Now it serves the purpose of providing an overview of the available projects in a single location and as a home for scripts to help maintain the projects. For more information see: * Project documentation: https://github.com/libyal/libyal/wiki/Home * Overiew of available projects: https://github.com/libyal/libyal/wiki/Overview
fix issue with accessing:
regf/Classes/CLSID/{33D9A760-90C8-11d0-BD43-00A0C911CE86}/Instance/Indeo\\x,2\\x*e video 5.10 Compression Filter
Complete REG_MULTI_SZ support in library and Python bindings
Fortunately, @msuhanov has already done all the hard work of reverse engineering for you.
All registry hive specifications can be found at msuhanov/regf.
regview tool opens this file succeessfully ๐
Sample file attached: https://onedrive.live.com/redir?resid=83CBBEF6B31667E8%218506
It would help to get started to have some minimal doc for the Python bindings.
Screenshot from 2019-03-20 17-46-52
Screenshot attached. Please check.
Sample SYSTEM hive file if needed: https://onedrive.live.com/redir?resid=83cbbef6b31667e8!8242&authkey=!AAqSoudsdHI9zi4&ithint=file%2c
Hello,
First of all, thank you for all your work.
I have a problem on OpenBSD with the newer version of libregf with plaso version 20200121.
When I run the regression tests of plaso with the libregf version 20191221, I have a segfault.
Details:
Tests the ExamineEvent and CompileReport functions on a SYSTEM file. ... Segmentation fault (core dumped)
Backtrace:
#0 0x00001f9a235969bd in libregf_internal_multi_string_read_data (internal_multi_string=0x1f9a382b4d80,
data=0x1f9a32a99a20 "", data_size=2, error=0x7f7ffffd3540) at libregf_multi_string.c:358
#1 0x00001f9a235a1e42 in libregf_value_item_get_value_multi_string (value_item=0x1f9a99f8fb40,
file_io_handle=0x1f9abc7a0100, multi_string=0x7f7ffffd3538, error=0x7f7ffffd3540)
at libregf_value_item.c:2900
#2 0x00001f9a2359d543 in libregf_value_get_value_multi_string (value=0x1f9a241d89c0,
multi_string=0x7f7ffffd3538, error=0x7f7ffffd3540) at libregf_value.c:1800
#3 0x00001f9ae642e586 in pyregf_value_get_data_as_multi_string (pyregf_value=0x1f9a445a2ed0, arguments=0x0)
at pyregf_value.c:1172
#4 0x00001f9a92e8eafb in _PyMethodDef_RawFastCallKeywords () from /usr/local/lib/libpython3.7m.so.0.0
#5 0x00001f9a92e95782 in _PyMethodDescr_FastCallKeywords () from /usr/local/lib/libpython3.7m.so.0.0
#6 0x00001f9a92f6a2f4 in ?? () from /usr/local/lib/libpython3.7m.so.0.0
Don't hesitate if I miss some information.
Best regards,
Sigalpes.
print full path to the key
Hello.
At present, size of a single full data segment is calculated in the following way: size of a cell - 2*4. But Windows is using the hard-coded value: 16344 (and only the last data segment may have a smaller size: value size - bytes read while parsing previous segments).
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.