python-registry - Read access to Windows Registry Files
python-registry was originally written by Willi Ballenthin, a forensicator at Mandiant who wanted to access the contents of the
Windows Registry from his Linux laptop. python-registry currently provides read-only access to Windows Registry files,
such as NTUSER.DAT, userdiff, and SAM. The interface is two-fold: a high-level interface suitable for most tasks, and a low level
set of parsing objects and methods which may be used for advanced study of the Windows Registry. python-registry is written in pure
Python, making it portable across all major platforms.
by Willi Ballenthin (2015-12-22):
* Release 1.2.0-1
- [DEPRECATED] records() in HBINBlock, use the more correct cells() instead, by @NiKiZe
- fix bug in parsing of resident values with length zero, reported and patched by @BridgeyTheGeek
- fix handling of path cycles, reported and patched by @sbv-csis
by Willi Ballenthin (2015-02-26):
* Release 1.1.0-2
This is the version available on 2015-02-26 which is a patch to 1.1.0 making release 2.