Difference between revisions of "RegRipper"
Jump to navigation
Jump to search
(Created page with "{| style="float:right;border:1px solid black" |+ Details | Executable | <code>RegRipper.exe</code> |- | Stage | style="text-align:center;" | 8 |- | Percent Complete | style="t...") |
|||
| Line 11: | Line 11: | ||
|- | |- | ||
| Message Queue | | Message Queue | ||
| − | | <code>regripper</code> | + | | style="text-align:center;" | <code>regripper</code> |
|} | |} | ||
Revision as of 12:56, 25 January 2021
| Executable | RegRipper.exe
|
| Stage | 8 |
| Percent Complete | 48% |
| Message Queue | regripper
|
This ETL will run the open source RegRipper tool against registry files in Truxton. The resulting text file produced by RegRipper will be made a child of the registry file that was processed as a Type_RegRipper_Report file.
File Types
RegRipper processes the following types of files.
| File Type | Produces |
|---|---|
| Type_Windows_Registry | Files |
| Type_SAM_Registry | Files |
| Type_System_Registry | Files |
| Type_Boot_Registry | Files |
| Type_User_Registry | Files |
| Type_Software_Registry | Files |
| Type_Amcache | Files |
| Type_Security_Registry | Files |
