Linux Forensics Tools Repository: Package Summary for Packages on June 5, 2012:

  • regripper-20120528-2.{fc14,fc15,fc16,fc17,el5,el6}.noarch.rpm - Regripper is a Windows Registry data extraction and correlation tool. This version includes version 20120528 of the plugins from here. The plugins added are the following:
    • NEW PLUGIN by Francesco Picasso: "internet_explorer_cu.pl" that parses the Internet Explorer info from NTUSER.DAT registry
    • NEW PLUGIN by Francesco Picasso: "internet_settings_cu.pl" that parses the Internet Settings info from NTUSER.DAT registry
    • REMOVED plugin "ie_main.pl", since superseded by "internet_explorer_cu.pl"
    • REMOVED plugin "iexplore.pl", since superseded by "internet_explorer_cu.pl"
    • FIXED plugin "timezone.pl", see Issue14 and see source code comments
    • FIXED plugin "userassist2.pl", now it parses Windows7 entries, see source code comments
    • ADDED profiles with every plugin listed in alphabetical order: all-all (3), ntuser-all (98), sam-all (1), security-all (3), software-all (56), system-all (46)
    • NOTE RegRipperPlugins now counts 207 plugins
    • KNOWN ISSUES: comdlg32 does not parse Vista/7 subkeys (Issue 15)