RegistryPlugins

RegistryPlugins copied to clipboard

RegistryPlugin.RADAR Timestamp

4

In the function "public DateTimeOffset GetDateTimeOffset(string timestamp)" on line 60 (within the GitHub view) the "DateTime.FromFileTime()" function is being used. Based on testing and MS documentation (https://learn.microsoft.com/en-us/dotnet/api/system.datetime.fromfiletime?view=net-9.0) this will converts...

Kali0xC

ApplicationSettingsContainer Plugin

36

Adding ApplicationSettingsContainer Plugin for handling settings.dat files related to packaged applications in Windows. Below are some screenshots of using Registry Explorer to examine the settings.dat file for the Photos application...

ogmini

Plugin to look for the subkey value for the DSRM system admin in lsa key, which indicates almost definitely a compromise occurred

4

I had tested out the plugin and it compiled as well as was loaded and processed by Registry Explorer using the .net6 version. If there are other issues with the...

ThatTotallyRealMyth

Fix: Commented out buggy ShellBag0x61 code

1

https://github.com/EricZimmerman/RegistryPlugins/issues/66

hyuunnn

LastVisitedPidlMRU and OpenSavePidlMRU Issue with FTP Share on Windows Store WordPad MSIX

2

When testing the Windows Store Project Centennial/ Desktop Bridge version of Windows WordPad I was trying surface more registry keys for the DFIRBatch file. Whilst doing this research I mounted...

reece394