Unable to view key values

janstarke / regview

Offline-viewer for registry files

GNU General Public License v3.0

11 stars 0 forks source link

Unable to view key values #2

Closed M1ra1B0T closed 5 months ago

M1ra1B0T commented 5 months ago

Using regview I was not able to view the keys SYSTEM\MountedDevices, SYSTEM\RNG and SYSTEM\Select, although those keys had associated values, that I could extract with other tools, like target-reg from dissect or registry explorer from eric zimmerman. When trying to view them with regview, I dont got any values displayed.

janstarke commented 5 months ago

I compared the result to regdump. The latter prints all values. So, this is not a problem in https://github.com/dfir-dd/nt_hive2, but indeed in regview