Crate nt_hive

Source
Expand description

§nt-hive

The nt-hive Rust crate provides a comfortable and safe interface for accessing keys, values, and data stored in hive files. Hive files can be found in C:\Windows\system32\config and store what is commonly called the Windows registry. This crate supports the hive format that is used from Windows NT 4.0 up to the current Windows 10.

§Getting started

  1. Create a Hive structure from hive data by calling Hive::new.
  2. Retrieve the root KeyNode via Hive::root_key_node.
  3. Move to a subkey via KeyNode::subkey, KeyNode::subkeys or KeyNode::subpath.
  4. Get an interesting value using KeyNode::value or KeyNode::values.

Structs§

BigDataSlices
Iterator over a contiguous range of data bytes containing Big Data list items, returning a constant byte slice for each item, used by KeyValueData.
Hive
Root structure describing a registry hive.
IndexRootKeyNodes
Iterator over a contiguous range of data bytes containing Index Root items, returning a constant KeyNode for each Leaf item of each Index Root item, used by SubKeyNodes
KeyNode
A single key that belongs to a Hive. It has a name and possibly subkeys (KeyNode) and values (KeyValue).
KeyValue
A single value that belongs to a KeyNode. It has a name and attached data.
KeyValues
Iterator over a contiguous range of data bytes containing Key Value items, returning a constant KeyValue for each item.
LeafKeyNodes
Iterator over a contiguous range of data bytes containing Leaf items of any type (Fast/Hash/Index), returning a constant KeyNode for each Leaf item, used by SubKeyNodes.
RegMultiSZStrings

Enums§

HiveMinorVersion
Known hive minor versions.
KeyValueData
Zero-copy representation of raw Key Value data, returned by KeyValue::data.
KeyValueDataType
Possible data types of the data belonging to a KeyValue.
NtHiveError
Central error type of nt-hive.
NtHiveNameString
Zero-copy representation of a key name or value name string stored in hive data. Can be either in Latin1 (ISO-8859-1) or UTF-16 (Little-Endian).
SubKeyNodes
Iterator over all subkeys of a KeyNode, returning a constant KeyNode for each subkey.

Type Aliases§

Result
Central result type of nt-hive.