Feature/parse acls - Githubissues

mkorman90 / regipy

Regipy is an os independent python library for parsing offline registry hives

MIT License

245 stars 53 forks source link

Feature/parse acls #185

Closed tincho9 closed 3 years ago

tincho9 commented 3 years ago

Regipy can now parse the security key for each subkey, including owner & group SIDs, DACLs and SACLs.

For example:

registry_hive = RegistryHive(ntuser_hive)
run_key = registry_hive.get_key(r'\Software\Microsoft\Windows\CurrentVersion\Run')
security_key = run_key.get_security_key_info()