dfwinreg icon indicating copy to clipboard operation
dfwinreg copied to clipboard

Digital Forensics Windows Registry (dfWinReg)

dfWinReg, or Digital Forensics Windows Registry, provides read-only access to Windows Registry objects. The goal of dfWinReg is to provide a generic interface for accessing Windows Registry objects that resembles the Registry key hierarchy as seen on a live Windows system.

For more information see:

  • Project documentation: https://dfwinreg.readthedocs.io/en/latest