Crate nt_hive 

nt-hive

The nt-hive Rust crate provides a comfortable and safe interface for accessing keys, values, and data stored in hive files. Hive files can be found in C:\Windows\system32\config and store what is commonly called the Windows registry. This crate supports the hive format that is used from Windows NT 4.0 up to the current Windows 10.

Getting started

1. Create a Hive structure from hive data by calling Hive::new.
2. Retrieve the root KeyNode via Hive::root_key_node.
3. Move to a subkey via KeyNode::subkey, KeyNode::subkeys or KeyNode::subpath.
4. Get an interesting value using KeyNode::value or KeyNode::values.

Structs

BigDataSlices

Iterator over a contiguous range of data bytes containing Big Data list items, returning a constant byte slice for each item, used by KeyValueData.

Hive

Root structure describing a registry hive.

IndexRootKeyNodes

Iterator over a contiguous range of data bytes containing Index Root items, returning a constant KeyNode for each Leaf item of each Index Root item, used by SubKeyNodes

KeyNode

A single key that belongs to a Hive. It has a name and possibly subkeys (KeyNode) and values (KeyValue).

KeyValue

A single value that belongs to a KeyNode. It has a name and attached data.

KeyValues

Iterator over a contiguous range of data bytes containing Key Value items, returning a constant KeyValue for each item.

LeafKeyNodes

Iterator over a contiguous range of data bytes containing Leaf items of any type (Fast/Hash/Index), returning a constant KeyNode for each Leaf item, used by SubKeyNodes.

RegMultiSZStrings

Enums

HiveMinorVersion

Known hive minor versions.

KeyValueData

Zero-copy representation of raw Key Value data, returned by KeyValue::data.

KeyValueDataType

Possible data types of the data belonging to a KeyValue.

NtHiveError

Central error type of nt-hive.

NtHiveNameString

Zero-copy representation of a key name or value name string stored in hive data. Can be either in Latin1 (ISO-8859-1) or UTF-16 (Little-Endian).

SubKeyNodes

Iterator over all subkeys of a KeyNode, returning a constant KeyNode for each subkey.

Type Aliases

Result

Central result type of nt-hive.