├── Common ├── Autoruns_NtUser_Run ├── Autoruns_NtUser_RunOnce_597a425c-391d-41d2-b707-d369c39f50e7 ├── Autoruns_NtUser_Run_2ec3d165-3d58-417e-bf86-d30652b7b53a ├── Autoruns_Software_RunOnce_283d2dcc-4358-4223-996b-ecd53364309c ├── Autoruns_Software_Run_b747b395-acee-4576-9b52-a89349b8d831 ├── Autoruns_UsrClass_VirtualStore_bac80d4f-92ed-41a6-bb70-9749bf17736e ├── Communication_NtUser_TeamViewer_d32c0647-339c-4d4f-8282-daf26b927699 ├── Communication_NtUser_UnreadMail_d6d419d3-bc7c-4e6c-b73d-e1235c3a2943 ├── Communication_System_PortProxy_2d70b068-3186-4e0e-9744-45eb76793218 ├── Logging_Software_LogonUI_f1627ffc-939e-4da8-9970-55a1f90f545e ├── Logging_UsrClass_ManagedByApp_0f413353-4273-44a3-8910-ac99b0ac73eb ├── Network_NtUser_History_7f537d43-6906-4849-ac42-75d905445fb0 ├── Network_Software_LastConnect_1516cac4-ff62-4d2e-a9f5-a20815853b3e ├── Network_Software_NetworkCards_3cfa462c-31d1-4ad6-8b47-98f281c50728 ├── Network_Software_NetworkList_d1f7ed49-2bc8-48c5-86cc-4d759cf7fb4f ├── Network_System_Interfaces_95dfea6f-5ef9-4d8b-b111-ae3bef87e0a7 ├── Network_System_NetworkSetup2_ffc1a574-4a12-4a4a-a2a4-6afd6efba804 ├── Network_System_Tcpip_6d716835-71cb-4a63-86a1-8603509e9d90 ├── Network_System_{4d36e972-e325-11ce-bfc1-08002be10318}_54796294-d279-4552-bda5-fe672b4ea675 ├── Operating system_NtUser_CD Burning_0f0005c8-7a16-4223-8a73-87dc0d307849 ├── Operating system_NtUser_General_82caa00f-2dd2-400b-b9d1-13173b58e82f ├── Operating system_NtUser_Shell_1fde7fa4-7a82-47d2-9279-3ce37eb1598b ├── Operating system_Sam_Aliases_7b0aa740-8895-44db-90be-930860713329 ├── Operating system_Sam_Users_58f6066e-53f0-43a7-823c-5679da0e4cd9 ├── Operating system_Security_PolAcDmN_69adae64-b620-4879-bece-467ced7a2a78 ├── Operating system_Security_PolAcDmS_27dd8985-481d-4842-8f90-5b8baff56c69 ├── Operating system_Security_PolDnDDN_9b93734e-0905-4123-84de-67329767aa5b ├── Operating system_Security_PolPrDmS_a7486465-9764-437c-a39d-a6b4f0ec4085 ├── Operating system_Software_Channels_8ab43ae7-05ce-4c41-9c70-f77df5317e67 ├── Operating system_Software_Control Panel_7e993a1a-b5af-4247-8b34-6bbe13eb7f3c ├── Operating system_Software_CurrentVersion_0a017e3d-c0fe-40c9-84fb-8bcd45c96a7e ├── Operating system_Software_CurrentVersion_3d9483dc-d89c-423a-ae83-a57405d6a752 ├── Operating system_Software_Devices_121a3617-c512-4b5f-a770-11b1cdb19983 ├── Operating system_Software_EMDMgmt_5c905164-7055-4422-a141-f8539d5ef4fe ├── Operating system_Software_Image File Execution Options_59ddbb92-609a-44e8-9bb7-e1f5b797e397 ├── Operating system_Software_SRUM_8289ab2c-49f8-4e03-a0a8-3ef0b87f53af ├── Operating system_Software_System_00b53738-2f64-4419-895c-2c91eb98a186 ├── Operating system_Software_VolumeInfoCache_4ac88794-664a-489d-a407-74991bbda5d6 ├── Operating system_Software_Windows Portable Devices_39661eda-1373-493a-b333-583c51c9e74b ├── Operating system_Software_Winlogon_129b227e-57cd-400b-b370-4ef3d08f9627 ├── Operating system_System_BTHPORT_aa11dce3-ce1e-4a70-abbe-7a18419afe33 ├── Operating system_System_ComputerName_f5259882-9906-413f-b845-b2bbca09ffeb ├── Operating system_System_CrashControl_a4d38e6e-fa6e-4ceb-8a1f-b7b2f25bf573 ├── Operating system_System_DeviceClasses_f653a363-3fa9-4ee5-9c44-a92f6e084070 ├── Operating system_System_Environment_7044cf87-168f-4588-bae0-426632d08330 ├── Operating system_System_EventLog_e99f1b87-9f35-4876-a5c5-3c99b92e4bfd ├── Operating system_System_FileSystem_b20a0736-0d62-4a26-9539-a53ded5f152b ├── Operating system_System_FilesNotToSnapshot_af3e091f-8598-43e1-9e19-39c1352a72ea ├── Operating system_System_Memory Management_15dc67bb-bf95-46ef-87db-e4e34e387125 ├── Operating system_System_PrefetchParameters_0f9651f6-3aa8-4bac-89aa-e57a73744ee2 ├── Operating system_System_RDP-Tcp_6e9f18d0-7173-424c-b695-e8c2894ee110 ├── Operating system_System_SafeBoot_1da3ee50-90bf-49ed-9aa6-b97ba9948eee ├── Operating system_System_Services_9a4c3785-ec1c-4248-8b0a-cc32a3578d67 ├── Operating system_System_Terminal Server_bc0da746-e8c5-465a-a70f-2779e7c914de ├── Operating system_System_TimeZoneInformation_e16fbaa9-172c-4501-a55d-0cb4adb02cac ├── Operating system_System_USB_d9ecec7b-e4c6-4c8d-9f65-2b971efbb4c4 ├── Operating system_System_VSS_7afab042-09fb-4f0f-ae3e-b3c58c93f83c ├── Operating system_System_Windows_29e05135-bc83-4332-a11b-ea3c357e4de5 ├── Operating system_System_Windows_d73fc227-8ea3-45e8-ac69-041a06a6c629 ├── Operating system_System_{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_18c3eafb-034d-49b6-9558-45b92416bf33 ├── Operating system_System_{6bdd1fc6-810f-11d0-bec7-08002be2092f}_80aafc9b-f28d-41a8-929c-6c016c4b5bc0 ├── Operating system_UsrClass_Repository_cfa0e406-809a-4c83-9524-c276a891fe84 ├── Program execution_NtUser_ApplicationAssociationToasts_e4f7208a-04b4-4497-afd3-fabf33d4d1b9 ├── Program execution_NtUser_Environment_4fde1564-214a-44e7-b600-70357b68be20 ├── Program execution_NtUser_FileExts_03427bd9-675f-4564-9d7b-058e797a7cb6 ├── Program execution_NtUser_FirstFolder_a640410c-d053-4966-ace5-36bc4b977c9a ├── Program execution_NtUser_MUICache_a51a8919-ffdd-4135-91fa-affac7f65bb5 ├── Program execution_NtUser_NTUSER.DAT - App Paths_4e62a502-5171-4345-a1f9-a0ea4ca0444f ├── Program execution_NtUser_NTUSER.DAT - Uninstall_4e44e8c4-b58d-418b-a273-368aa5d8aa75 ├── Program execution_NtUser_RecentApps_3b793e2f-72d9-45b5-ad3a-290a6e967a04 ├── Program execution_NtUser_RunMRU_524957bc-0c7e-490c-a8cf-f6bce2e1e1b5 ├── Program execution_NtUser_Sysinternals_a801be22-7473-4c4c-9a57-9dbc90bcbf7c ├── Program execution_NtUser_UserAssist_660a4ade-592f-4c64-bd85-8241378d0839 ├── Program execution_Software_HeapLeakDetection_f879bb80-c82d-4cdf-8c1b-1c0a66db6a12 ├── Program execution_Software_SOFTWARE - App Paths_addc2a0b-c13c-466c-ab15-700fdd8e1d07 ├── Program execution_Software_SOFTWARE - Uninstall_1becdbb8-2dcc-4eb9-8283-594000275918 ├── Program execution_Software_System_2a35482d-0630-4d28-96fd-9691023be4fd ├── Program execution_Software_TaskCache_6f82904c-a58c-4bfb-98c4-e7f3926e4775 ├── Program execution_Software_Tracing_af5c023c-b790-443a-86eb-0205d8dd366d ├── Program execution_Software_WOW6432Node - Uninstall_072e83c9-b67a-4c06-bf42-6f47918fb034 ├── Program execution_Software_Wow6432Node - Tracing_ab48c472-e5e1-43d3-ba90-69c740c54a4e ├── Program execution_System_AppCompatCache_f1adf410-8700-4a83-bc2e-f53cededc03d ├── Program execution_System_BAM_bca41ebd-841c-4e9f-8a7b-8da72c2fb8d9 ├── Program execution_System_UserSettings_238ecefa-4bac-45c7-871b-54a12a7c3900 ├── Program execution_System_UserSettings_c6a6b034-d03e-4258-80bc-ba344ba3520a ├── Software_NtUser_Lync_d69a357c-00b7-41e2-ab32-d57b7987e0b6 ├── Software_NtUser_Main_95d1b312-336b-45f0-b219-f8a2b2ecea4e ├── Software_NtUser_Sessions_97906da8-5a77-4675-8baa-d3d00300693b ├── Software_Software_DefenderGPO_e45ba746-45f5-412a-6b0f-2779e7c91434 ├── Software_Software_Defender_a30da746-45c5-465a-a70f-2779e7c91434 ├── Software_Software_Internet Explorer_140f36ce-6571-4966-b6e4-641c30a9b9b1 ├── Software_Software_Products_a3ce0f6a-434d-4c2d-ba8f-16ce24209fe4 ├── Software_Software_Products_c6b061c4-df1d-477f-bcde-4846ec328c31 ├── Software_Software_Uninstall x64_d2b5987c-ed09-4032-a291-9a3d63c593f1 ├── Storage_System_MountedDevices_0d010e87-8b14-4ce1-b084-e99b5ab9748c ├── Storage_System_USBSTOR_3d1bc4ba-8eb2-4ec7-a4be-e6792505f999 ├── Storage_System_{10497b1b-ba51-44e5-8318-a65c837b6661}_9fe29ea5-44f1-4d92-82a0-d6b1fb84ee34 ├── User configuration_NtUser_CurrentVersion_9fef0ee2-99c9-4131-bd77-3f28fad9f8c7 ├── User configuration_NtUser_CurrentVersion_b8239cb1-3e84-41ae-a156-ebabfadea7d1 ├── User configuration_NtUser_Internet Settings_57563b19-0d7b-4f61-a76a-5ec5dfecb7c4 ├── User configuration_NtUser_OneDrive_187004c8-7ca1-494e-8219-282114866562 ├── User configuration_NtUser_PrinterPorts_fe1bbde9-e2bc-4764-9948-3c3b8d8c2112 ├── User configuration_NtUser_Taskband_61b22d21-4878-4469-9675-d57ec44ac198 ├── User configuration_NtUser_UserExtendedProperties_f47bd62c-8620-49e2-a3e8-7faff298751a ├── User configuration_Software_StartMenuInternet_dc7c443e-51be-41c6-bd71-851c9d108ad6 ├── User configuration_Software_command_0054aabe-ed43-4485-b3ce-bc6490cfe81e ├── User files and folders_NtUser_7-Zip_af7dfd06-6a98-4c8b-a795-bfb9f5ae407d ├── User files and folders_NtUser_ComDlg32_44d580cf-ef19-4749-b833-f787ac1b0220 ├── User files and folders_NtUser_Compression_d0e9ff87-f6be-47ec-888d-164cb58f19f3 ├── User files and folders_NtUser_FileHistory_2895d67d-8601-45df-9758-f72958482822 ├── User files and folders_NtUser_Map Network Drive MRU_df6ed689-944a-46b1-a806-f5f78830429a ├── User files and folders_NtUser_MountPoints2_28014255-7733-4398-a859-dd76642a19c7 ├── User files and folders_NtUser_QNAP Devices_13646e54-0077-45b5-9b8e-dbbc28cae4e6 ├── User files and folders_NtUser_RecentDocs_51af122a-734f-4b9b-8138-4633f67e0cad ├── User files and folders_NtUser_Shell Folders_feec11a9-1482-4629-a083-0caf2df99873 ├── User files and folders_NtUser_User MRU_41e2c5c4-4da2-4b96-99ae-a4fb532f93d4 ├── User files and folders_NtUser_User MRU_6bbf4038-b3c6-4ba5-a4e1-d04d3166e675 ├── User files and folders_NtUser_User MRU_83fcbc4b-a0d4-40d2-b414-91ffa96d778c ├── User files and folders_NtUser_WinRAR_204cf564-85f5-42b9-983f-d94a970e7374 ├── User files and folders_UsrClass_BagMRU_237fdb41-7713-485d-94ab-f07f4c157356 ├── User general_NtUser_Applets_c6065d08-af30-4da3-b586-2f96def5fe7f ├── User general_NtUser_CCleaner_ec48ddd3-4f09-4431-b388-7f5d18eaab43 ├── User general_NtUser_FeatureUsage_20c3d1cd-a702-4bd4-8d4e-6fbbf0f833e2 ├── User general_NtUser_TypedPaths_7f486439-3cf2-4fbc-8ae1-830185a49e4e ├── User general_NtUser_USER_73426b7c-dddd-476c-963c-a08939eef178 ├── User general_NtUser_WordWheelQuery_89ca3fef-d045-4ff2-8891-4c61cf6c30ea ├── User general_Software_ProfileList_b3011de4-0a78-4ff4-8d89-c2296d460c87 ├── User network_NtUser_Accounts_08d9e6e3-5790-48ac-8858-556f346740b6 ├── User network_NtUser_Ares_fe9bac6b-b1fd-4710-8579-80b31f4fe288 ├── User network_NtUser_Default_617e9fc6-565a-4986-a3fa-7e517fcbf6a3 ├── User network_NtUser_FTP_013baa05-0d47-4db7-9dbd-d4cb6231dc90 ├── User network_NtUser_Sessions_655bb4b7-afc0-4cb5-ad5d-00a3776e5e4a ├── User network_NtUser_TeamViewer_6aa0d3cd-9926-4f23-bf9b-f675636944f0 ├── User network_System_FirewallPolicy_6701136a-ccfb-476e-af28-d58543636ba4 ├── User network_System_Shares_7794e865-4630-4703-ac0f-76e650314b01 ├── Web browsing_NtUser_TypedURLs_24aec1e0-f92a-49db-8ec0-8443a7bbd130 ├── Web browsing_UsrClass_TypedURLsTime_6393ca56-3949-4897-826f-7873b06b33a5 ├── Web browsing_UsrClass_TypedURLsVisitCount_ede76781-af8b-4693-8cb1-3dc8421510c9 └── Web browsing_UsrClass_TypedURLs_03cf59d5-b3e7-4947-bc5e-6faec6cde342 ├── README.md ├── Registry_Explorer.py ├── Registry_Explorer_License.txt ├── regparser.exe ├── regparser.py ├── rla.exe └── screenshot.png /Common/Autoruns_NtUser_Run: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_NtUser_Run -------------------------------------------------------------------------------- /Common/Autoruns_NtUser_RunOnce_597a425c-391d-41d2-b707-d369c39f50e7: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_NtUser_RunOnce_597a425c-391d-41d2-b707-d369c39f50e7 -------------------------------------------------------------------------------- /Common/Autoruns_NtUser_Run_2ec3d165-3d58-417e-bf86-d30652b7b53a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_NtUser_Run_2ec3d165-3d58-417e-bf86-d30652b7b53a -------------------------------------------------------------------------------- /Common/Autoruns_Software_RunOnce_283d2dcc-4358-4223-996b-ecd53364309c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_Software_RunOnce_283d2dcc-4358-4223-996b-ecd53364309c -------------------------------------------------------------------------------- /Common/Autoruns_Software_Run_b747b395-acee-4576-9b52-a89349b8d831: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_Software_Run_b747b395-acee-4576-9b52-a89349b8d831 -------------------------------------------------------------------------------- /Common/Autoruns_UsrClass_VirtualStore_bac80d4f-92ed-41a6-bb70-9749bf17736e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Autoruns_UsrClass_VirtualStore_bac80d4f-92ed-41a6-bb70-9749bf17736e -------------------------------------------------------------------------------- /Common/Communication_NtUser_TeamViewer_d32c0647-339c-4d4f-8282-daf26b927699: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Communication_NtUser_TeamViewer_d32c0647-339c-4d4f-8282-daf26b927699 -------------------------------------------------------------------------------- /Common/Communication_NtUser_UnreadMail_d6d419d3-bc7c-4e6c-b73d-e1235c3a2943: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Communication_NtUser_UnreadMail_d6d419d3-bc7c-4e6c-b73d-e1235c3a2943 -------------------------------------------------------------------------------- /Common/Communication_System_PortProxy_2d70b068-3186-4e0e-9744-45eb76793218: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Communication_System_PortProxy_2d70b068-3186-4e0e-9744-45eb76793218 -------------------------------------------------------------------------------- /Common/Logging_Software_LogonUI_f1627ffc-939e-4da8-9970-55a1f90f545e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Logging_Software_LogonUI_f1627ffc-939e-4da8-9970-55a1f90f545e -------------------------------------------------------------------------------- /Common/Logging_UsrClass_ManagedByApp_0f413353-4273-44a3-8910-ac99b0ac73eb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Logging_UsrClass_ManagedByApp_0f413353-4273-44a3-8910-ac99b0ac73eb -------------------------------------------------------------------------------- /Common/Network_NtUser_History_7f537d43-6906-4849-ac42-75d905445fb0: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_NtUser_History_7f537d43-6906-4849-ac42-75d905445fb0 -------------------------------------------------------------------------------- /Common/Network_Software_LastConnect_1516cac4-ff62-4d2e-a9f5-a20815853b3e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_Software_LastConnect_1516cac4-ff62-4d2e-a9f5-a20815853b3e -------------------------------------------------------------------------------- /Common/Network_Software_NetworkCards_3cfa462c-31d1-4ad6-8b47-98f281c50728: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_Software_NetworkCards_3cfa462c-31d1-4ad6-8b47-98f281c50728 -------------------------------------------------------------------------------- /Common/Network_Software_NetworkList_d1f7ed49-2bc8-48c5-86cc-4d759cf7fb4f: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_Software_NetworkList_d1f7ed49-2bc8-48c5-86cc-4d759cf7fb4f -------------------------------------------------------------------------------- /Common/Network_System_Interfaces_95dfea6f-5ef9-4d8b-b111-ae3bef87e0a7: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_System_Interfaces_95dfea6f-5ef9-4d8b-b111-ae3bef87e0a7 -------------------------------------------------------------------------------- /Common/Network_System_NetworkSetup2_ffc1a574-4a12-4a4a-a2a4-6afd6efba804: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_System_NetworkSetup2_ffc1a574-4a12-4a4a-a2a4-6afd6efba804 -------------------------------------------------------------------------------- /Common/Network_System_Tcpip_6d716835-71cb-4a63-86a1-8603509e9d90: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_System_Tcpip_6d716835-71cb-4a63-86a1-8603509e9d90 -------------------------------------------------------------------------------- /Common/Network_System_{4d36e972-e325-11ce-bfc1-08002be10318}_54796294-d279-4552-bda5-fe672b4ea675: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Network_System_{4d36e972-e325-11ce-bfc1-08002be10318}_54796294-d279-4552-bda5-fe672b4ea675 -------------------------------------------------------------------------------- /Common/Operating system_NtUser_CD Burning_0f0005c8-7a16-4223-8a73-87dc0d307849: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_NtUser_CD Burning_0f0005c8-7a16-4223-8a73-87dc0d307849 -------------------------------------------------------------------------------- /Common/Operating system_NtUser_General_82caa00f-2dd2-400b-b9d1-13173b58e82f: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_NtUser_General_82caa00f-2dd2-400b-b9d1-13173b58e82f -------------------------------------------------------------------------------- /Common/Operating system_NtUser_Shell_1fde7fa4-7a82-47d2-9279-3ce37eb1598b: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_NtUser_Shell_1fde7fa4-7a82-47d2-9279-3ce37eb1598b -------------------------------------------------------------------------------- /Common/Operating system_Sam_Aliases_7b0aa740-8895-44db-90be-930860713329: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Sam_Aliases_7b0aa740-8895-44db-90be-930860713329 -------------------------------------------------------------------------------- /Common/Operating system_Sam_Users_58f6066e-53f0-43a7-823c-5679da0e4cd9: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Sam_Users_58f6066e-53f0-43a7-823c-5679da0e4cd9 -------------------------------------------------------------------------------- /Common/Operating system_Security_PolAcDmN_69adae64-b620-4879-bece-467ced7a2a78: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Security_PolAcDmN_69adae64-b620-4879-bece-467ced7a2a78 -------------------------------------------------------------------------------- /Common/Operating system_Security_PolAcDmS_27dd8985-481d-4842-8f90-5b8baff56c69: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Security_PolAcDmS_27dd8985-481d-4842-8f90-5b8baff56c69 -------------------------------------------------------------------------------- /Common/Operating system_Security_PolDnDDN_9b93734e-0905-4123-84de-67329767aa5b: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Security_PolDnDDN_9b93734e-0905-4123-84de-67329767aa5b -------------------------------------------------------------------------------- /Common/Operating system_Security_PolPrDmS_a7486465-9764-437c-a39d-a6b4f0ec4085: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Security_PolPrDmS_a7486465-9764-437c-a39d-a6b4f0ec4085 -------------------------------------------------------------------------------- /Common/Operating system_Software_Channels_8ab43ae7-05ce-4c41-9c70-f77df5317e67: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Channels_8ab43ae7-05ce-4c41-9c70-f77df5317e67 -------------------------------------------------------------------------------- /Common/Operating system_Software_Control Panel_7e993a1a-b5af-4247-8b34-6bbe13eb7f3c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Control Panel_7e993a1a-b5af-4247-8b34-6bbe13eb7f3c -------------------------------------------------------------------------------- /Common/Operating system_Software_CurrentVersion_0a017e3d-c0fe-40c9-84fb-8bcd45c96a7e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_CurrentVersion_0a017e3d-c0fe-40c9-84fb-8bcd45c96a7e -------------------------------------------------------------------------------- /Common/Operating system_Software_CurrentVersion_3d9483dc-d89c-423a-ae83-a57405d6a752: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_CurrentVersion_3d9483dc-d89c-423a-ae83-a57405d6a752 -------------------------------------------------------------------------------- /Common/Operating system_Software_Devices_121a3617-c512-4b5f-a770-11b1cdb19983: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Devices_121a3617-c512-4b5f-a770-11b1cdb19983 -------------------------------------------------------------------------------- /Common/Operating system_Software_EMDMgmt_5c905164-7055-4422-a141-f8539d5ef4fe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_EMDMgmt_5c905164-7055-4422-a141-f8539d5ef4fe -------------------------------------------------------------------------------- /Common/Operating system_Software_Image File Execution Options_59ddbb92-609a-44e8-9bb7-e1f5b797e397: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Image File Execution Options_59ddbb92-609a-44e8-9bb7-e1f5b797e397 -------------------------------------------------------------------------------- /Common/Operating system_Software_SRUM_8289ab2c-49f8-4e03-a0a8-3ef0b87f53af: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_SRUM_8289ab2c-49f8-4e03-a0a8-3ef0b87f53af -------------------------------------------------------------------------------- /Common/Operating system_Software_System_00b53738-2f64-4419-895c-2c91eb98a186: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_System_00b53738-2f64-4419-895c-2c91eb98a186 -------------------------------------------------------------------------------- /Common/Operating system_Software_VolumeInfoCache_4ac88794-664a-489d-a407-74991bbda5d6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_VolumeInfoCache_4ac88794-664a-489d-a407-74991bbda5d6 -------------------------------------------------------------------------------- /Common/Operating system_Software_Windows Portable Devices_39661eda-1373-493a-b333-583c51c9e74b: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Windows Portable Devices_39661eda-1373-493a-b333-583c51c9e74b -------------------------------------------------------------------------------- /Common/Operating system_Software_Winlogon_129b227e-57cd-400b-b370-4ef3d08f9627: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_Software_Winlogon_129b227e-57cd-400b-b370-4ef3d08f9627 -------------------------------------------------------------------------------- /Common/Operating system_System_BTHPORT_aa11dce3-ce1e-4a70-abbe-7a18419afe33: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_BTHPORT_aa11dce3-ce1e-4a70-abbe-7a18419afe33 -------------------------------------------------------------------------------- /Common/Operating system_System_ComputerName_f5259882-9906-413f-b845-b2bbca09ffeb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_ComputerName_f5259882-9906-413f-b845-b2bbca09ffeb -------------------------------------------------------------------------------- /Common/Operating system_System_CrashControl_a4d38e6e-fa6e-4ceb-8a1f-b7b2f25bf573: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_CrashControl_a4d38e6e-fa6e-4ceb-8a1f-b7b2f25bf573 -------------------------------------------------------------------------------- /Common/Operating system_System_DeviceClasses_f653a363-3fa9-4ee5-9c44-a92f6e084070: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_DeviceClasses_f653a363-3fa9-4ee5-9c44-a92f6e084070 -------------------------------------------------------------------------------- /Common/Operating system_System_Environment_7044cf87-168f-4588-bae0-426632d08330: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Environment_7044cf87-168f-4588-bae0-426632d08330 -------------------------------------------------------------------------------- /Common/Operating system_System_EventLog_e99f1b87-9f35-4876-a5c5-3c99b92e4bfd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_EventLog_e99f1b87-9f35-4876-a5c5-3c99b92e4bfd -------------------------------------------------------------------------------- /Common/Operating system_System_FileSystem_b20a0736-0d62-4a26-9539-a53ded5f152b: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_FileSystem_b20a0736-0d62-4a26-9539-a53ded5f152b -------------------------------------------------------------------------------- /Common/Operating system_System_FilesNotToSnapshot_af3e091f-8598-43e1-9e19-39c1352a72ea: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_FilesNotToSnapshot_af3e091f-8598-43e1-9e19-39c1352a72ea -------------------------------------------------------------------------------- /Common/Operating system_System_Memory Management_15dc67bb-bf95-46ef-87db-e4e34e387125: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Memory Management_15dc67bb-bf95-46ef-87db-e4e34e387125 -------------------------------------------------------------------------------- /Common/Operating system_System_PrefetchParameters_0f9651f6-3aa8-4bac-89aa-e57a73744ee2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_PrefetchParameters_0f9651f6-3aa8-4bac-89aa-e57a73744ee2 -------------------------------------------------------------------------------- /Common/Operating system_System_RDP-Tcp_6e9f18d0-7173-424c-b695-e8c2894ee110: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_RDP-Tcp_6e9f18d0-7173-424c-b695-e8c2894ee110 -------------------------------------------------------------------------------- /Common/Operating system_System_SafeBoot_1da3ee50-90bf-49ed-9aa6-b97ba9948eee: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_SafeBoot_1da3ee50-90bf-49ed-9aa6-b97ba9948eee -------------------------------------------------------------------------------- /Common/Operating system_System_Services_9a4c3785-ec1c-4248-8b0a-cc32a3578d67: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Services_9a4c3785-ec1c-4248-8b0a-cc32a3578d67 -------------------------------------------------------------------------------- /Common/Operating system_System_Terminal Server_bc0da746-e8c5-465a-a70f-2779e7c914de: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Terminal Server_bc0da746-e8c5-465a-a70f-2779e7c914de -------------------------------------------------------------------------------- /Common/Operating system_System_TimeZoneInformation_e16fbaa9-172c-4501-a55d-0cb4adb02cac: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_TimeZoneInformation_e16fbaa9-172c-4501-a55d-0cb4adb02cac -------------------------------------------------------------------------------- /Common/Operating system_System_USB_d9ecec7b-e4c6-4c8d-9f65-2b971efbb4c4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_USB_d9ecec7b-e4c6-4c8d-9f65-2b971efbb4c4 -------------------------------------------------------------------------------- /Common/Operating system_System_VSS_7afab042-09fb-4f0f-ae3e-b3c58c93f83c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_VSS_7afab042-09fb-4f0f-ae3e-b3c58c93f83c -------------------------------------------------------------------------------- /Common/Operating system_System_Windows_29e05135-bc83-4332-a11b-ea3c357e4de5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Windows_29e05135-bc83-4332-a11b-ea3c357e4de5 -------------------------------------------------------------------------------- /Common/Operating system_System_Windows_d73fc227-8ea3-45e8-ac69-041a06a6c629: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_Windows_d73fc227-8ea3-45e8-ac69-041a06a6c629 -------------------------------------------------------------------------------- /Common/Operating system_System_{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_18c3eafb-034d-49b6-9558-45b92416bf33: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_18c3eafb-034d-49b6-9558-45b92416bf33 -------------------------------------------------------------------------------- /Common/Operating system_System_{6bdd1fc6-810f-11d0-bec7-08002be2092f}_80aafc9b-f28d-41a8-929c-6c016c4b5bc0: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_System_{6bdd1fc6-810f-11d0-bec7-08002be2092f}_80aafc9b-f28d-41a8-929c-6c016c4b5bc0 -------------------------------------------------------------------------------- /Common/Operating system_UsrClass_Repository_cfa0e406-809a-4c83-9524-c276a891fe84: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Operating system_UsrClass_Repository_cfa0e406-809a-4c83-9524-c276a891fe84 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_ApplicationAssociationToasts_e4f7208a-04b4-4497-afd3-fabf33d4d1b9: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_ApplicationAssociationToasts_e4f7208a-04b4-4497-afd3-fabf33d4d1b9 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_Environment_4fde1564-214a-44e7-b600-70357b68be20: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_Environment_4fde1564-214a-44e7-b600-70357b68be20 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_FileExts_03427bd9-675f-4564-9d7b-058e797a7cb6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_FileExts_03427bd9-675f-4564-9d7b-058e797a7cb6 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_FirstFolder_a640410c-d053-4966-ace5-36bc4b977c9a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_FirstFolder_a640410c-d053-4966-ace5-36bc4b977c9a -------------------------------------------------------------------------------- /Common/Program execution_NtUser_MUICache_a51a8919-ffdd-4135-91fa-affac7f65bb5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_MUICache_a51a8919-ffdd-4135-91fa-affac7f65bb5 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_NTUSER.DAT - App Paths_4e62a502-5171-4345-a1f9-a0ea4ca0444f: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_NTUSER.DAT - App Paths_4e62a502-5171-4345-a1f9-a0ea4ca0444f -------------------------------------------------------------------------------- /Common/Program execution_NtUser_NTUSER.DAT - Uninstall_4e44e8c4-b58d-418b-a273-368aa5d8aa75: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_NTUSER.DAT - Uninstall_4e44e8c4-b58d-418b-a273-368aa5d8aa75 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_RecentApps_3b793e2f-72d9-45b5-ad3a-290a6e967a04: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_RecentApps_3b793e2f-72d9-45b5-ad3a-290a6e967a04 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_RunMRU_524957bc-0c7e-490c-a8cf-f6bce2e1e1b5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_RunMRU_524957bc-0c7e-490c-a8cf-f6bce2e1e1b5 -------------------------------------------------------------------------------- /Common/Program execution_NtUser_Sysinternals_a801be22-7473-4c4c-9a57-9dbc90bcbf7c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_Sysinternals_a801be22-7473-4c4c-9a57-9dbc90bcbf7c -------------------------------------------------------------------------------- /Common/Program execution_NtUser_UserAssist_660a4ade-592f-4c64-bd85-8241378d0839: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_NtUser_UserAssist_660a4ade-592f-4c64-bd85-8241378d0839 -------------------------------------------------------------------------------- /Common/Program execution_Software_HeapLeakDetection_f879bb80-c82d-4cdf-8c1b-1c0a66db6a12: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_HeapLeakDetection_f879bb80-c82d-4cdf-8c1b-1c0a66db6a12 -------------------------------------------------------------------------------- /Common/Program execution_Software_SOFTWARE - App Paths_addc2a0b-c13c-466c-ab15-700fdd8e1d07: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_SOFTWARE - App Paths_addc2a0b-c13c-466c-ab15-700fdd8e1d07 -------------------------------------------------------------------------------- /Common/Program execution_Software_SOFTWARE - Uninstall_1becdbb8-2dcc-4eb9-8283-594000275918: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_SOFTWARE - Uninstall_1becdbb8-2dcc-4eb9-8283-594000275918 -------------------------------------------------------------------------------- /Common/Program execution_Software_System_2a35482d-0630-4d28-96fd-9691023be4fd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_System_2a35482d-0630-4d28-96fd-9691023be4fd -------------------------------------------------------------------------------- /Common/Program execution_Software_TaskCache_6f82904c-a58c-4bfb-98c4-e7f3926e4775: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_TaskCache_6f82904c-a58c-4bfb-98c4-e7f3926e4775 -------------------------------------------------------------------------------- /Common/Program execution_Software_Tracing_af5c023c-b790-443a-86eb-0205d8dd366d: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_Tracing_af5c023c-b790-443a-86eb-0205d8dd366d -------------------------------------------------------------------------------- /Common/Program execution_Software_WOW6432Node - Uninstall_072e83c9-b67a-4c06-bf42-6f47918fb034: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_WOW6432Node - Uninstall_072e83c9-b67a-4c06-bf42-6f47918fb034 -------------------------------------------------------------------------------- /Common/Program execution_Software_Wow6432Node - Tracing_ab48c472-e5e1-43d3-ba90-69c740c54a4e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_Software_Wow6432Node - Tracing_ab48c472-e5e1-43d3-ba90-69c740c54a4e -------------------------------------------------------------------------------- /Common/Program execution_System_AppCompatCache_f1adf410-8700-4a83-bc2e-f53cededc03d: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_System_AppCompatCache_f1adf410-8700-4a83-bc2e-f53cededc03d -------------------------------------------------------------------------------- /Common/Program execution_System_BAM_bca41ebd-841c-4e9f-8a7b-8da72c2fb8d9: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_System_BAM_bca41ebd-841c-4e9f-8a7b-8da72c2fb8d9 -------------------------------------------------------------------------------- /Common/Program execution_System_UserSettings_238ecefa-4bac-45c7-871b-54a12a7c3900: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_System_UserSettings_238ecefa-4bac-45c7-871b-54a12a7c3900 -------------------------------------------------------------------------------- /Common/Program execution_System_UserSettings_c6a6b034-d03e-4258-80bc-ba344ba3520a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Program execution_System_UserSettings_c6a6b034-d03e-4258-80bc-ba344ba3520a -------------------------------------------------------------------------------- /Common/Software_NtUser_Lync_d69a357c-00b7-41e2-ab32-d57b7987e0b6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_NtUser_Lync_d69a357c-00b7-41e2-ab32-d57b7987e0b6 -------------------------------------------------------------------------------- /Common/Software_NtUser_Main_95d1b312-336b-45f0-b219-f8a2b2ecea4e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_NtUser_Main_95d1b312-336b-45f0-b219-f8a2b2ecea4e -------------------------------------------------------------------------------- /Common/Software_NtUser_Sessions_97906da8-5a77-4675-8baa-d3d00300693b: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_NtUser_Sessions_97906da8-5a77-4675-8baa-d3d00300693b -------------------------------------------------------------------------------- /Common/Software_Software_DefenderGPO_e45ba746-45f5-412a-6b0f-2779e7c91434: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_DefenderGPO_e45ba746-45f5-412a-6b0f-2779e7c91434 -------------------------------------------------------------------------------- /Common/Software_Software_Defender_a30da746-45c5-465a-a70f-2779e7c91434: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_Defender_a30da746-45c5-465a-a70f-2779e7c91434 -------------------------------------------------------------------------------- /Common/Software_Software_Internet Explorer_140f36ce-6571-4966-b6e4-641c30a9b9b1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_Internet Explorer_140f36ce-6571-4966-b6e4-641c30a9b9b1 -------------------------------------------------------------------------------- /Common/Software_Software_Products_a3ce0f6a-434d-4c2d-ba8f-16ce24209fe4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_Products_a3ce0f6a-434d-4c2d-ba8f-16ce24209fe4 -------------------------------------------------------------------------------- /Common/Software_Software_Products_c6b061c4-df1d-477f-bcde-4846ec328c31: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_Products_c6b061c4-df1d-477f-bcde-4846ec328c31 -------------------------------------------------------------------------------- /Common/Software_Software_Uninstall x64_d2b5987c-ed09-4032-a291-9a3d63c593f1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Software_Software_Uninstall x64_d2b5987c-ed09-4032-a291-9a3d63c593f1 -------------------------------------------------------------------------------- /Common/Storage_System_MountedDevices_0d010e87-8b14-4ce1-b084-e99b5ab9748c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Storage_System_MountedDevices_0d010e87-8b14-4ce1-b084-e99b5ab9748c -------------------------------------------------------------------------------- /Common/Storage_System_USBSTOR_3d1bc4ba-8eb2-4ec7-a4be-e6792505f999: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Storage_System_USBSTOR_3d1bc4ba-8eb2-4ec7-a4be-e6792505f999 -------------------------------------------------------------------------------- /Common/Storage_System_{10497b1b-ba51-44e5-8318-a65c837b6661}_9fe29ea5-44f1-4d92-82a0-d6b1fb84ee34: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Storage_System_{10497b1b-ba51-44e5-8318-a65c837b6661}_9fe29ea5-44f1-4d92-82a0-d6b1fb84ee34 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_CurrentVersion_9fef0ee2-99c9-4131-bd77-3f28fad9f8c7: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_CurrentVersion_9fef0ee2-99c9-4131-bd77-3f28fad9f8c7 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_CurrentVersion_b8239cb1-3e84-41ae-a156-ebabfadea7d1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_CurrentVersion_b8239cb1-3e84-41ae-a156-ebabfadea7d1 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_Internet Settings_57563b19-0d7b-4f61-a76a-5ec5dfecb7c4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_Internet Settings_57563b19-0d7b-4f61-a76a-5ec5dfecb7c4 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_OneDrive_187004c8-7ca1-494e-8219-282114866562: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_OneDrive_187004c8-7ca1-494e-8219-282114866562 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_PrinterPorts_fe1bbde9-e2bc-4764-9948-3c3b8d8c2112: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_PrinterPorts_fe1bbde9-e2bc-4764-9948-3c3b8d8c2112 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_Taskband_61b22d21-4878-4469-9675-d57ec44ac198: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_Taskband_61b22d21-4878-4469-9675-d57ec44ac198 -------------------------------------------------------------------------------- /Common/User configuration_NtUser_UserExtendedProperties_f47bd62c-8620-49e2-a3e8-7faff298751a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_NtUser_UserExtendedProperties_f47bd62c-8620-49e2-a3e8-7faff298751a -------------------------------------------------------------------------------- /Common/User configuration_Software_StartMenuInternet_dc7c443e-51be-41c6-bd71-851c9d108ad6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_Software_StartMenuInternet_dc7c443e-51be-41c6-bd71-851c9d108ad6 -------------------------------------------------------------------------------- /Common/User configuration_Software_command_0054aabe-ed43-4485-b3ce-bc6490cfe81e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User configuration_Software_command_0054aabe-ed43-4485-b3ce-bc6490cfe81e -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_7-Zip_af7dfd06-6a98-4c8b-a795-bfb9f5ae407d: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_7-Zip_af7dfd06-6a98-4c8b-a795-bfb9f5ae407d -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_ComDlg32_44d580cf-ef19-4749-b833-f787ac1b0220: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_ComDlg32_44d580cf-ef19-4749-b833-f787ac1b0220 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_Compression_d0e9ff87-f6be-47ec-888d-164cb58f19f3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_Compression_d0e9ff87-f6be-47ec-888d-164cb58f19f3 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_FileHistory_2895d67d-8601-45df-9758-f72958482822: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_FileHistory_2895d67d-8601-45df-9758-f72958482822 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_Map Network Drive MRU_df6ed689-944a-46b1-a806-f5f78830429a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_Map Network Drive MRU_df6ed689-944a-46b1-a806-f5f78830429a -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_MountPoints2_28014255-7733-4398-a859-dd76642a19c7: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_MountPoints2_28014255-7733-4398-a859-dd76642a19c7 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_QNAP Devices_13646e54-0077-45b5-9b8e-dbbc28cae4e6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_QNAP Devices_13646e54-0077-45b5-9b8e-dbbc28cae4e6 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_RecentDocs_51af122a-734f-4b9b-8138-4633f67e0cad: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_RecentDocs_51af122a-734f-4b9b-8138-4633f67e0cad -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_Shell Folders_feec11a9-1482-4629-a083-0caf2df99873: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_Shell Folders_feec11a9-1482-4629-a083-0caf2df99873 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_User MRU_41e2c5c4-4da2-4b96-99ae-a4fb532f93d4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_User MRU_41e2c5c4-4da2-4b96-99ae-a4fb532f93d4 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_User MRU_6bbf4038-b3c6-4ba5-a4e1-d04d3166e675: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_User MRU_6bbf4038-b3c6-4ba5-a4e1-d04d3166e675 -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_User MRU_83fcbc4b-a0d4-40d2-b414-91ffa96d778c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_User MRU_83fcbc4b-a0d4-40d2-b414-91ffa96d778c -------------------------------------------------------------------------------- /Common/User files and folders_NtUser_WinRAR_204cf564-85f5-42b9-983f-d94a970e7374: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_NtUser_WinRAR_204cf564-85f5-42b9-983f-d94a970e7374 -------------------------------------------------------------------------------- /Common/User files and folders_UsrClass_BagMRU_237fdb41-7713-485d-94ab-f07f4c157356: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User files and folders_UsrClass_BagMRU_237fdb41-7713-485d-94ab-f07f4c157356 -------------------------------------------------------------------------------- /Common/User general_NtUser_Applets_c6065d08-af30-4da3-b586-2f96def5fe7f: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_Applets_c6065d08-af30-4da3-b586-2f96def5fe7f -------------------------------------------------------------------------------- /Common/User general_NtUser_CCleaner_ec48ddd3-4f09-4431-b388-7f5d18eaab43: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_CCleaner_ec48ddd3-4f09-4431-b388-7f5d18eaab43 -------------------------------------------------------------------------------- /Common/User general_NtUser_FeatureUsage_20c3d1cd-a702-4bd4-8d4e-6fbbf0f833e2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_FeatureUsage_20c3d1cd-a702-4bd4-8d4e-6fbbf0f833e2 -------------------------------------------------------------------------------- /Common/User general_NtUser_TypedPaths_7f486439-3cf2-4fbc-8ae1-830185a49e4e: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_TypedPaths_7f486439-3cf2-4fbc-8ae1-830185a49e4e -------------------------------------------------------------------------------- /Common/User general_NtUser_USER_73426b7c-dddd-476c-963c-a08939eef178: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_USER_73426b7c-dddd-476c-963c-a08939eef178 -------------------------------------------------------------------------------- /Common/User general_NtUser_WordWheelQuery_89ca3fef-d045-4ff2-8891-4c61cf6c30ea: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_NtUser_WordWheelQuery_89ca3fef-d045-4ff2-8891-4c61cf6c30ea -------------------------------------------------------------------------------- /Common/User general_Software_ProfileList_b3011de4-0a78-4ff4-8d89-c2296d460c87: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User general_Software_ProfileList_b3011de4-0a78-4ff4-8d89-c2296d460c87 -------------------------------------------------------------------------------- /Common/User network_NtUser_Accounts_08d9e6e3-5790-48ac-8858-556f346740b6: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_Accounts_08d9e6e3-5790-48ac-8858-556f346740b6 -------------------------------------------------------------------------------- /Common/User network_NtUser_Ares_fe9bac6b-b1fd-4710-8579-80b31f4fe288: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_Ares_fe9bac6b-b1fd-4710-8579-80b31f4fe288 -------------------------------------------------------------------------------- /Common/User network_NtUser_Default_617e9fc6-565a-4986-a3fa-7e517fcbf6a3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_Default_617e9fc6-565a-4986-a3fa-7e517fcbf6a3 -------------------------------------------------------------------------------- /Common/User network_NtUser_FTP_013baa05-0d47-4db7-9dbd-d4cb6231dc90: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_FTP_013baa05-0d47-4db7-9dbd-d4cb6231dc90 -------------------------------------------------------------------------------- /Common/User network_NtUser_Sessions_655bb4b7-afc0-4cb5-ad5d-00a3776e5e4a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_Sessions_655bb4b7-afc0-4cb5-ad5d-00a3776e5e4a -------------------------------------------------------------------------------- /Common/User network_NtUser_TeamViewer_6aa0d3cd-9926-4f23-bf9b-f675636944f0: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_NtUser_TeamViewer_6aa0d3cd-9926-4f23-bf9b-f675636944f0 -------------------------------------------------------------------------------- /Common/User network_System_FirewallPolicy_6701136a-ccfb-476e-af28-d58543636ba4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_System_FirewallPolicy_6701136a-ccfb-476e-af28-d58543636ba4 -------------------------------------------------------------------------------- /Common/User network_System_Shares_7794e865-4630-4703-ac0f-76e650314b01: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/User network_System_Shares_7794e865-4630-4703-ac0f-76e650314b01 -------------------------------------------------------------------------------- /Common/Web browsing_NtUser_TypedURLs_24aec1e0-f92a-49db-8ec0-8443a7bbd130: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Web browsing_NtUser_TypedURLs_24aec1e0-f92a-49db-8ec0-8443a7bbd130 -------------------------------------------------------------------------------- /Common/Web browsing_UsrClass_TypedURLsTime_6393ca56-3949-4897-826f-7873b06b33a5: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Web browsing_UsrClass_TypedURLsTime_6393ca56-3949-4897-826f-7873b06b33a5 -------------------------------------------------------------------------------- /Common/Web browsing_UsrClass_TypedURLsVisitCount_ede76781-af8b-4693-8cb1-3dc8421510c9: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Web browsing_UsrClass_TypedURLsVisitCount_ede76781-af8b-4693-8cb1-3dc8421510c9 -------------------------------------------------------------------------------- /Common/Web browsing_UsrClass_TypedURLs_03cf59d5-b3e7-4947-bc5e-6faec6cde342: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Common/Web browsing_UsrClass_TypedURLs_03cf59d5-b3e7-4947-bc5e-6faec6cde342 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/README.md -------------------------------------------------------------------------------- /Registry_Explorer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Registry_Explorer.py -------------------------------------------------------------------------------- /Registry_Explorer_License.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/Registry_Explorer_License.txt -------------------------------------------------------------------------------- /regparser.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/regparser.exe -------------------------------------------------------------------------------- /regparser.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/regparser.py -------------------------------------------------------------------------------- /rla.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/rla.exe -------------------------------------------------------------------------------- /screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0xHasanM/Autopsy-Registry-Explorer/HEAD/screenshot.png --------------------------------------------------------------------------------