Type User Registry

<< Details >>

Defined Constant	Type_User_Registry
File Type Value	303
Parent Type	Registry
Carve	Yes
Format Details	Yes
Carve Meta Data	Yes
MIME Type	application/octet-stream
Filename Extension	reg

User Registry

Description

User Registry

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand
• Registry
• RegRipper

Items Produced

Truxton will extract the following from this file type:

• ENTITY_TYPE_CID
• ENTITY_TYPE_EMAIL_ADDRESS
• ENTITY_TYPE_GDID
• ENTITY_TYPE_MUID
• ENTITY_TYPE_PUID
• Type_File_Details

Carve Meta Data

When Truxton carves this file, it can populate the following columns in the [File] table:

• LastWrite - When the file was last modified
• Name - The name of the file

Details

• Kaitai