Crate nt_hive

nt-hive

The nt-hive Rust crate provides a comfortable and safe interface for accessing keys, values, and data stored in hive files. Hive files can be found in C:\Windows\system32\config and store what is commonly called the Windows registry. This crate supports the hive format that is used from Windows NT 4.0 up to the current Windows 10.

Getting started

1. Create a Hive structure from hive data by calling Hive::new.
2. Retrieve the root KeyNode via Hive::root_key_node.
3. Move to a subkey via KeyNode::subkey, KeyNode::subkeys or KeyNode::subpath.
4. Get an interesting value using KeyNode::value or KeyNode::values.

Structs

• BigDataSlices
  Iterator over a contiguous range of data bytes containing Big Data list items, returning a constant byte slice for each item, used by KeyValueData.
• Hive
  Root structure describing a registry hive.
• IndexRootKeyNodes
  Iterator over a contiguous range of data bytes containing Index Root items, returning a constant KeyNode for each Leaf item of each Index Root item, used by SubKeyNodes
• KeyNode
  A single key that belongs to a Hive. It has a name and possibly subkeys (KeyNode) and values (KeyValue).
• KeyValue
  A single value that belongs to a KeyNode. It has a name and attached data.
• KeyValues
  Iterator over a contiguous range of data bytes containing Key Value items, returning a constant KeyValue for each item.
• LeafKeyNodes
  Iterator over a contiguous range of data bytes containing Leaf items of any type (Fast/Hash/Index), returning a constant KeyNode for each Leaf item, used by SubKeyNodes.

Enums

• HiveMinorVersion
  Known hive minor versions.
• KeyValueData
  Zero-copy representation of raw Key Value data, returned by KeyValue::data.
• KeyValueDataType
  Possible data types of the data belonging to a KeyValue.
• NtHiveError
  Central error type of nt-hive.
• NtHiveNameString
  Zero-copy representation of a key name or value name string stored in hive data. Can be either in Latin1 (ISO-8859-1) or UTF-16 (Little-Endian).
• SubKeyNodes
  Iterator over all subkeys of a KeyNode, returning a constant KeyNode for each subkey.

Type Aliases

• Result
  Central result type of nt-hive.