registry#

$ target-query <path/to/target> -f registry
Details#

Module

os.windows.registry.RegistryPlugin

Output

records

Module documentation

Provides registry access for Windows targets.

Acts much the same to how the registry works on a live Windows machine. Hives are correctly mapped under e.g. HKLMSOFTWARE.

Internal functions only.

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace: