regview

注册表文件离线查看器

安装

sudo apt install libncurses-dev
cargo install regview

使用

Offline-viewer for registry files

Usage: regview [OPTIONS] <HIVE_FILE>

Arguments:
  <HIVE_FILE>  path to registry hive file

Options:
  -L, --log <LOGFILES>     transaction LOG file(s). This argument can be specified one or two times
  -I, --ignore-base-block  ignore the base block (e.g. if it was encrypted by some ransomware)
  -h, --help               Print help
  -V, --version            Print version