Microsoft Windows Registry Editing

Here are my notes on the intricacies behind the Microsoft Windows Registry.

CodeToad's excellent list of link is so good, I don't need to duplicate them here.

Python code to access the Windows Registry

Site Map  
About this site  

Related Topics:

Intro

Frank Heyne's Security FAQ for the Windows NT Registry

RegDACL from Frank Heyne searches an entire Registry subtree for specified and effective permissions. It checks for the version of NT running on the target machine and then decides what options are allowed and what OS bugs it needs to emulate.

RegTools accesses Secrets keys:

hklm\security\Policy\Secrets\SAC 
hklm\security\Policy\Secrets\SAC\CupdTime 
hklm\security\Policy\Secrets\SAC\CurrVal 
hklm\security\Policy\Secrets\SAC\OldVal 
hklm\security\Policy\Secrets\SAC\OupdTime 
hklm\security\Policy\Secrets\SAC\SecDesc 
hklm\security\Policy\Secrets\SAI 
hklm\security\Policy\Secrets\SAI\CupdTime 
hklm\security\Policy\Secrets\SAI\CurrVal 

Cygwin's regtool utility allows shell scripts to access and modify the Windows registry.

Monitor changes to registry using this VB code, especially

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

Backing Up the Registry

To search:
Regedit

To :

Regedt32

Mystery Behind Windows Registry: Conquering the Mystery

$45 Registrar provides registry defragmentation. It's from Resplendence