Expand description
Core Windows Registry hive parser.
Provides Hive for reading REGF hive files via memory-mapped I/O
or in-memory buffers.
Modules§
- bytes
- Bounds-checked little-endian integer readers.
- cell_
reader - Cell reading — read typed cells from a hive by offset.
- detect
- Hive type auto-detection from root key structure.
- error
- Error types for registry hive parsing.
- hive
Hive— the entry point for reading a Windows Registry hive.- iter
- Key iterators — BFS and DFS traversal of the registry tree.
- key
- Key struct — high-level interface for navigating registry keys.
- path
- Key path reconstruction — walk the parent chain to build full paths.
- security
- Security key chain traversal — stub for Plan 1. Full implementation (ACL parsing, SID resolution) in Plan 2.
- txlog
- Transaction log replay — apply dirty pages from .LOG1/.LOG2 files.
- value
- Value struct — decode registry value data.