issues
search
EricZimmerman
/
RECmd
Command line access to the Registry
MIT License
123
stars
31
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
remove errant WinSCP entry, standardize UsrClass
#77
AndrewRathbun
closed
1 day ago
0
Remove errant WinSCP entry
#76
AndrewRathbun
closed
1 day ago
6
Fixes JPCert and Adds DEFAULT registry rule and LogonStats
#75
reece394
closed
2 days ago
0
Update verify.yml
#74
AndrewRathbun
closed
3 days ago
0
Update DFIRBatch.reb - JPCert artifacts
#73
danielgottt
closed
4 days ago
2
Update DFIRBatch.md - update changelog for 2.05
#72
vxsh4d0w
closed
6 days ago
0
Update DFIRBatch.reb - Add MobaXTerm artifacts
#71
vxsh4d0w
closed
6 days ago
0
Add WinSCP artifacts
#70
AndrewRathbun
opened
1 week ago
0
Update DFIRBatch.reb - update version to 2.05, change GUID
#69
vxsh4d0w
closed
6 days ago
3
Change default behaviour of nl true
#68
reece394
opened
1 week ago
4
Add Support for DEFAULT Registry Hive
#67
reece394
closed
5 days ago
2
Added more Defender, SmartScreen and Security Essentials Events And LogonBanner and SpecialAccounts
#66
reece394
closed
2 weeks ago
0
Add SYSTEMTIME Support to BinConvert
#65
reece394
closed
5 days ago
5
Added Various Windows Defender and SmartScreen artifacts
#64
reece394
closed
3 weeks ago
0
Fix Broken KapeResearch_Registry Link
#63
reece394
closed
1 month ago
0
Update DFIRBatch - Fix Windows Defender Comment for SubmitSamplesConsent
#62
reece394
closed
1 month ago
0
Change Readme to refer to DFIRBatch instead of Kroll_Batch
#61
reece394
closed
1 month ago
0
Handle case sensitivity on Linux filesystems
#60
mischw
closed
4 days ago
4
System.IndexOutOfRangeException when running rla.exe
#59
mischw
closed
4 days ago
9
Create DFIRBatch file
#58
AndrewRathbun
closed
3 months ago
0
RLA --out parameter behaviour with -f
#57
Bloggzy
closed
4 months ago
8
Get hive root with --bn
#56
DFIR-Purim
closed
2 months ago
15
RLA --out parameter
#55
dfirenti8
closed
7 months ago
6
RLA
#54
gunner4361
closed
2 months ago
3
update dependencies
#53
AndrewRathbun
closed
1 year ago
0
Update Kroll_Batch.reb to 1.22, new Windows 11 RunNotification key added
#52
AndrewRathbun
closed
1 year ago
0
update Kroll Batch File to 1.21, add lots of plugin support
#51
AndrewRathbun
closed
1 year ago
0
Cosmetic changes to example commands, switches, etc
#49
AndrewRathbun
closed
1 year ago
0
Correct capitalization in switches, fix minor error in Kroll Batch
#48
AndrewRathbun
closed
1 year ago
0
RLA --out parameter
#47
nrrpinto
closed
2 years ago
4
add CVE-2022-30190 artifacts from NTUser.dat
#46
AndrewRathbun
closed
2 years ago
0
I am not getting results when I use reb files on macOS
#45
danzek
closed
2 years ago
17
Kroll Batch -> 1.19
#44
AndrewRathbun
closed
2 years ago
0
Unable to load live registry in RegExplorer 1.6
#43
CollinChaffin
closed
2 years ago
7
Batch file: How to find values with specific data
#42
Karneades
closed
2 years ago
14
Add Exefile shell open command keys in Kroll Batch file
#41
Karneades
closed
2 years ago
1
Update Kroll_Batch.reb to 1.17
#40
AndrewRathbun
closed
2 years ago
0
Update Kroll Batch to 1.16
#39
AndrewRathbun
closed
2 years ago
0
Update Kroll_Batch.reb
#38
AndrewRathbun
closed
2 years ago
0
Create Kroll_Batch.md
#37
AndrewRathbun
closed
2 years ago
0
Update Kroll_Batch to 1.14
#36
AndrewRathbun
closed
3 years ago
0
Update Kroll_Batch
#35
AndrewRathbun
closed
3 years ago
0
Create README for BatchExamples directory
#34
AndrewRathbun
closed
3 years ago
0
Update Kroll_Batch.reb
#33
AndrewRathbun
closed
3 years ago
0
Update Kroll_Batch.reb
#32
AndrewRathbun
closed
3 years ago
0
Update PR Template, update Kroll Batch to 1.11
#31
AndrewRathbun
closed
3 years ago
0
Add Defender Exclusions keys
#30
Karneades
closed
3 years ago
0
Create RECmdBatch Guide and Template
#29
AndrewRathbun
closed
3 years ago
0
Update Kroll Batch to 1.9
#28
AndrewRathbun
closed
3 years ago
0
Add PortProxy config key to Kroll batch file
#27
Karneades
closed
3 years ago
1
Next