Difference between revisions of "Registry"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "{| style="float:right;border:1px solid black" |+ Details | Executable | <code>Registry.exe</code> |- | Stage | style="text-align:center;" | 9 |- | Percent Complete | style="te...")
 
Line 11: Line 11:
 
|-
 
|-
 
| Message Queue
 
| Message Queue
| <code>registry</code>
+
| style="text-align:center;" | <code>registry</code>
 
|}
 
|}
  

Revision as of 12:55, 25 January 2021

Details
Executable Registry.exe
Stage 9
Percent Complete 48%
Message Queue registry

The Registry ETL is responsible for pulling information out of registry files.

File Types

Registry processes the following types of files.

File Type Produces
Type_Windows_Registry Artifacts
Type_SAM_Registry Artifacts
Type_System_Registry Artifacts
Type_Boot_Registry Artifacts
Type_User_Registry Artifacts
Type_Software_Registry Artifacts
Type_Amcache Artifacts
Type_Security_Registry Artifacts