├── ChangeLog ├── Example ├── Example.Advanced ├── License ├── License.Python-LLFUSE ├── ReadMe ├── cython └── CyXpress.pyx ├── hives_for_manual_tests ├── FuseHive ├── FuseHive2 ├── FuseHive3 └── FuseHive4 ├── hives_for_tests ├── BadBaseBlockHive │ ├── BadBaseBlockHive │ ├── BadBaseBlockHive.LOG1 │ └── BadBaseBlockHive.LOG2 ├── BadListHive ├── BadLogHive1 │ ├── BadLogHive │ ├── BadLogHive.LOG1 │ └── BadLogHive.LOG2 ├── BadLogHive2 │ ├── BadLogHive │ ├── BadLogHive.LOG1 │ └── BadLogHive.LOG2 ├── BadLogHive3 │ ├── BadLogHive │ ├── BadLogHive.LOG1 │ └── BadLogHive.LOG2 ├── BadSubkeyHive ├── BigDataHive ├── BogusKeyNamesHive ├── Carving │ ├── 0 │ ├── 512 │ ├── FragRecon │ │ ├── FragmentReconstruction2 │ │ ├── FragmentReconstruction2and4 │ │ ├── FragmentReconstruction2plus1 │ │ ├── FragmentReconstruction3 │ │ └── FragmentReconstruction4 │ ├── HiveAndFragments │ ├── Margin0_1 │ ├── Margin0_2 │ ├── Margin3584 │ ├── Margin512_1 │ ├── Margin512_2 │ ├── MarginMixed │ ├── MarginRebuild │ │ ├── Rebuild3584_4096 │ │ ├── Rebuild512_24576 │ │ └── Rebuild512_4096 │ ├── NTFSCompressed │ ├── NTFSCompressedNoSlack │ ├── NTFSCompressedNoSlackCluster1024 │ ├── bootcamp_unallocated_decrypted_nogarbage_sparse.tgz │ └── bootcamp_unallocated_decrypted_nogarbage_sparse.txt ├── CompHive ├── DeletedDataHive ├── DeletedDataHiveTruncated ├── DeletedTreeHive ├── DeletedTreeNoRootFlagHive ├── DeletedTreePartialPathHive ├── Discovery │ ├── 1 │ │ ├── aa │ │ ├── aa.LOG │ │ ├── aa.LOG1 │ │ └── aa.LOG2 │ ├── 2 │ │ ├── AA │ │ ├── aa.LOG1 │ │ └── aa.LOG2 │ ├── 3 │ │ ├── AA │ │ ├── aa.log │ │ └── aa.log1 │ ├── 4 │ │ ├── AA │ │ ├── aa.LOG │ │ ├── aa.log1 │ │ └── aa.log2 │ └── 5 │ │ └── aa ├── DupNameHive ├── DuplicateSubkeysHive ├── EffectiveSizeHive ├── EmptyHive ├── ExtendedASCIIHive ├── GarbageHive ├── HealedHive ├── InvalidParentFragment ├── InvalidParentHive ├── ManySubkeysHive ├── MemoryCarving │ ├── Fragment_0 │ ├── Fragment_1 │ ├── Fragment_3 │ ├── HiveBinCompressed │ ├── TwoFragments │ ├── TwoFragmentsWithGap │ └── TwoFragmentsWithGap2 ├── MultiSzHive ├── NewDirtyHive1 │ ├── NewDirtyHive │ ├── NewDirtyHive.LOG1 │ ├── NewDirtyHive.LOG2 │ └── RecoveredHive_Windows10 ├── NewDirtyHive2 │ ├── NewDirtyHive │ ├── NewDirtyHive.LOG1 │ └── NewDirtyHive.LOG2 ├── NewFlagsHive ├── OffHive ├── OldDirtyHive │ ├── OldDirtyHive │ ├── OldDirtyHive.LOG1 │ ├── OldDirtyHive.LOG2 │ └── RecoveredHive_Windows7 ├── OldLogWithRemnantData ├── PairHive ├── ReallocValueDataHive ├── ReallocValueHive ├── RemnantData ├── RemnantsHive ├── SlackHive ├── SqliteFragment ├── SqliteFragment.sqlite ├── SqliteHive ├── StringValuesHive ├── System_Delta ├── TruncatedDirtyHive ├── TruncatedHive ├── TruncatedHiveBin ├── TruncatedNameHive ├── TruncatedPairHive ├── TruncatedPairHive2 ├── TwoOwnersHive ├── UnicodeHive ├── UpcaseHive ├── ValuesOrderHive └── WrongOrderHive ├── records_for_tests ├── dummy_db ├── dummy_lf ├── dummy_lh ├── dummy_li ├── dummy_list ├── dummy_nk ├── dummy_ri ├── dummy_sk └── dummy_vk ├── setup.py ├── test_cases.py ├── yarp-carver ├── yarp-memcarver ├── yarp-mount ├── yarp-print ├── yarp-timeline └── yarp ├── Registry.py ├── RegistryCarve.py ├── RegistryFile.py ├── RegistryFuse.py ├── RegistryHelpers.py ├── RegistryLive.py ├── RegistryRecords.py ├── RegistryRecover.py ├── RegistrySqlite.py ├── RegistryUnicode.py └── __init__.py /ChangeLog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/ChangeLog -------------------------------------------------------------------------------- /Example: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/Example -------------------------------------------------------------------------------- /Example.Advanced: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/Example.Advanced -------------------------------------------------------------------------------- /License: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/License -------------------------------------------------------------------------------- /License.Python-LLFUSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/License.Python-LLFUSE -------------------------------------------------------------------------------- /ReadMe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/ReadMe -------------------------------------------------------------------------------- /cython/CyXpress.pyx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/cython/CyXpress.pyx -------------------------------------------------------------------------------- /hives_for_manual_tests/FuseHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_manual_tests/FuseHive -------------------------------------------------------------------------------- /hives_for_manual_tests/FuseHive2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_manual_tests/FuseHive2 -------------------------------------------------------------------------------- /hives_for_manual_tests/FuseHive3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_manual_tests/FuseHive3 -------------------------------------------------------------------------------- /hives_for_manual_tests/FuseHive4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_manual_tests/FuseHive4 -------------------------------------------------------------------------------- /hives_for_tests/BadBaseBlockHive/BadBaseBlockHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadBaseBlockHive/BadBaseBlockHive -------------------------------------------------------------------------------- /hives_for_tests/BadBaseBlockHive/BadBaseBlockHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadBaseBlockHive/BadBaseBlockHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/BadBaseBlockHive/BadBaseBlockHive.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/BadListHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadListHive -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive1/BadLogHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive1/BadLogHive -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive1/BadLogHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive1/BadLogHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive1/BadLogHive.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive2/BadLogHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive2/BadLogHive -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive2/BadLogHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive2/BadLogHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive2/BadLogHive.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive3/BadLogHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive3/BadLogHive -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive3/BadLogHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive3/BadLogHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/BadLogHive3/BadLogHive.LOG2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadLogHive3/BadLogHive.LOG2 -------------------------------------------------------------------------------- /hives_for_tests/BadSubkeyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BadSubkeyHive -------------------------------------------------------------------------------- /hives_for_tests/BigDataHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BigDataHive -------------------------------------------------------------------------------- /hives_for_tests/BogusKeyNamesHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/BogusKeyNamesHive -------------------------------------------------------------------------------- /hives_for_tests/Carving/0: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/0 -------------------------------------------------------------------------------- /hives_for_tests/Carving/512: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/512 -------------------------------------------------------------------------------- /hives_for_tests/Carving/FragRecon/FragmentReconstruction2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/FragRecon/FragmentReconstruction2 -------------------------------------------------------------------------------- /hives_for_tests/Carving/FragRecon/FragmentReconstruction2and4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/FragRecon/FragmentReconstruction2and4 -------------------------------------------------------------------------------- /hives_for_tests/Carving/FragRecon/FragmentReconstruction2plus1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/FragRecon/FragmentReconstruction2plus1 -------------------------------------------------------------------------------- /hives_for_tests/Carving/FragRecon/FragmentReconstruction3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/FragRecon/FragmentReconstruction3 -------------------------------------------------------------------------------- /hives_for_tests/Carving/FragRecon/FragmentReconstruction4: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/FragRecon/FragmentReconstruction4 -------------------------------------------------------------------------------- /hives_for_tests/Carving/HiveAndFragments: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/HiveAndFragments -------------------------------------------------------------------------------- /hives_for_tests/Carving/Margin0_1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/Margin0_1 -------------------------------------------------------------------------------- /hives_for_tests/Carving/Margin0_2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/Margin0_2 -------------------------------------------------------------------------------- /hives_for_tests/Carving/Margin3584: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/Margin3584 -------------------------------------------------------------------------------- /hives_for_tests/Carving/Margin512_1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/Margin512_1 -------------------------------------------------------------------------------- /hives_for_tests/Carving/Margin512_2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/Margin512_2 -------------------------------------------------------------------------------- /hives_for_tests/Carving/MarginMixed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/MarginMixed -------------------------------------------------------------------------------- /hives_for_tests/Carving/MarginRebuild/Rebuild3584_4096: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/MarginRebuild/Rebuild3584_4096 -------------------------------------------------------------------------------- /hives_for_tests/Carving/MarginRebuild/Rebuild512_24576: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/MarginRebuild/Rebuild512_24576 -------------------------------------------------------------------------------- /hives_for_tests/Carving/MarginRebuild/Rebuild512_4096: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/MarginRebuild/Rebuild512_4096 -------------------------------------------------------------------------------- /hives_for_tests/Carving/NTFSCompressed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/NTFSCompressed -------------------------------------------------------------------------------- /hives_for_tests/Carving/NTFSCompressedNoSlack: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/NTFSCompressedNoSlack -------------------------------------------------------------------------------- /hives_for_tests/Carving/NTFSCompressedNoSlackCluster1024: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/NTFSCompressedNoSlackCluster1024 -------------------------------------------------------------------------------- /hives_for_tests/Carving/bootcamp_unallocated_decrypted_nogarbage_sparse.tgz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/bootcamp_unallocated_decrypted_nogarbage_sparse.tgz -------------------------------------------------------------------------------- /hives_for_tests/Carving/bootcamp_unallocated_decrypted_nogarbage_sparse.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/Carving/bootcamp_unallocated_decrypted_nogarbage_sparse.txt -------------------------------------------------------------------------------- /hives_for_tests/CompHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/CompHive -------------------------------------------------------------------------------- /hives_for_tests/DeletedDataHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DeletedDataHive -------------------------------------------------------------------------------- /hives_for_tests/DeletedDataHiveTruncated: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DeletedDataHiveTruncated -------------------------------------------------------------------------------- /hives_for_tests/DeletedTreeHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DeletedTreeHive -------------------------------------------------------------------------------- /hives_for_tests/DeletedTreeNoRootFlagHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DeletedTreeNoRootFlagHive -------------------------------------------------------------------------------- /hives_for_tests/DeletedTreePartialPathHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DeletedTreePartialPathHive -------------------------------------------------------------------------------- /hives_for_tests/Discovery/1/aa: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/1/aa.LOG: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/1/aa.LOG1: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/1/aa.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/2/AA: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/2/aa.LOG1: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/2/aa.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/3/AA: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/3/aa.log: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/3/aa.log1: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/4/AA: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/4/aa.LOG: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/4/aa.log1: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/4/aa.log2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/Discovery/5/aa: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/DupNameHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DupNameHive -------------------------------------------------------------------------------- /hives_for_tests/DuplicateSubkeysHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/DuplicateSubkeysHive -------------------------------------------------------------------------------- /hives_for_tests/EffectiveSizeHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/EffectiveSizeHive -------------------------------------------------------------------------------- /hives_for_tests/EmptyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/EmptyHive -------------------------------------------------------------------------------- /hives_for_tests/ExtendedASCIIHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/ExtendedASCIIHive -------------------------------------------------------------------------------- /hives_for_tests/GarbageHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/GarbageHive -------------------------------------------------------------------------------- /hives_for_tests/HealedHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/HealedHive -------------------------------------------------------------------------------- /hives_for_tests/InvalidParentFragment: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/InvalidParentFragment -------------------------------------------------------------------------------- /hives_for_tests/InvalidParentHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/InvalidParentHive -------------------------------------------------------------------------------- /hives_for_tests/ManySubkeysHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/ManySubkeysHive -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/Fragment_0: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/Fragment_0 -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/Fragment_1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/Fragment_1 -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/Fragment_3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/Fragment_3 -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/HiveBinCompressed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/HiveBinCompressed -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/TwoFragments: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/TwoFragments -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/TwoFragmentsWithGap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/TwoFragmentsWithGap -------------------------------------------------------------------------------- /hives_for_tests/MemoryCarving/TwoFragmentsWithGap2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MemoryCarving/TwoFragmentsWithGap2 -------------------------------------------------------------------------------- /hives_for_tests/MultiSzHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/MultiSzHive -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive1/NewDirtyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive1/NewDirtyHive -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive1/NewDirtyHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive1/NewDirtyHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive1/NewDirtyHive.LOG2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive1/NewDirtyHive.LOG2 -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive1/RecoveredHive_Windows10: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive1/RecoveredHive_Windows10 -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive2/NewDirtyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive2/NewDirtyHive -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive2/NewDirtyHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive2/NewDirtyHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/NewDirtyHive2/NewDirtyHive.LOG2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewDirtyHive2/NewDirtyHive.LOG2 -------------------------------------------------------------------------------- /hives_for_tests/NewFlagsHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/NewFlagsHive -------------------------------------------------------------------------------- /hives_for_tests/OffHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/OffHive -------------------------------------------------------------------------------- /hives_for_tests/OldDirtyHive/OldDirtyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/OldDirtyHive/OldDirtyHive -------------------------------------------------------------------------------- /hives_for_tests/OldDirtyHive/OldDirtyHive.LOG1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/OldDirtyHive/OldDirtyHive.LOG1 -------------------------------------------------------------------------------- /hives_for_tests/OldDirtyHive/OldDirtyHive.LOG2: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /hives_for_tests/OldDirtyHive/RecoveredHive_Windows7: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/OldDirtyHive/RecoveredHive_Windows7 -------------------------------------------------------------------------------- /hives_for_tests/OldLogWithRemnantData: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/OldLogWithRemnantData -------------------------------------------------------------------------------- /hives_for_tests/PairHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/PairHive -------------------------------------------------------------------------------- /hives_for_tests/ReallocValueDataHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/ReallocValueDataHive -------------------------------------------------------------------------------- /hives_for_tests/ReallocValueHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/ReallocValueHive -------------------------------------------------------------------------------- /hives_for_tests/RemnantData: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/RemnantData -------------------------------------------------------------------------------- /hives_for_tests/RemnantsHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/RemnantsHive -------------------------------------------------------------------------------- /hives_for_tests/SlackHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/SlackHive -------------------------------------------------------------------------------- /hives_for_tests/SqliteFragment: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/SqliteFragment -------------------------------------------------------------------------------- /hives_for_tests/SqliteFragment.sqlite: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/SqliteFragment.sqlite -------------------------------------------------------------------------------- /hives_for_tests/SqliteHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/SqliteHive -------------------------------------------------------------------------------- /hives_for_tests/StringValuesHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/StringValuesHive -------------------------------------------------------------------------------- /hives_for_tests/System_Delta: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/System_Delta -------------------------------------------------------------------------------- /hives_for_tests/TruncatedDirtyHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedDirtyHive -------------------------------------------------------------------------------- /hives_for_tests/TruncatedHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedHive -------------------------------------------------------------------------------- /hives_for_tests/TruncatedHiveBin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedHiveBin -------------------------------------------------------------------------------- /hives_for_tests/TruncatedNameHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedNameHive -------------------------------------------------------------------------------- /hives_for_tests/TruncatedPairHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedPairHive -------------------------------------------------------------------------------- /hives_for_tests/TruncatedPairHive2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TruncatedPairHive2 -------------------------------------------------------------------------------- /hives_for_tests/TwoOwnersHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/TwoOwnersHive -------------------------------------------------------------------------------- /hives_for_tests/UnicodeHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/UnicodeHive -------------------------------------------------------------------------------- /hives_for_tests/UpcaseHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/UpcaseHive -------------------------------------------------------------------------------- /hives_for_tests/ValuesOrderHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/ValuesOrderHive -------------------------------------------------------------------------------- /hives_for_tests/WrongOrderHive: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/hives_for_tests/WrongOrderHive -------------------------------------------------------------------------------- /records_for_tests/dummy_db: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_db -------------------------------------------------------------------------------- /records_for_tests/dummy_lf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_lf -------------------------------------------------------------------------------- /records_for_tests/dummy_lh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_lh -------------------------------------------------------------------------------- /records_for_tests/dummy_li: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_li -------------------------------------------------------------------------------- /records_for_tests/dummy_list: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_list -------------------------------------------------------------------------------- /records_for_tests/dummy_nk: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_nk -------------------------------------------------------------------------------- /records_for_tests/dummy_ri: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_ri -------------------------------------------------------------------------------- /records_for_tests/dummy_sk: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_sk -------------------------------------------------------------------------------- /records_for_tests/dummy_vk: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/records_for_tests/dummy_vk -------------------------------------------------------------------------------- /setup.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/setup.py -------------------------------------------------------------------------------- /test_cases.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/test_cases.py -------------------------------------------------------------------------------- /yarp-carver: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp-carver -------------------------------------------------------------------------------- /yarp-memcarver: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp-memcarver -------------------------------------------------------------------------------- /yarp-mount: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp-mount -------------------------------------------------------------------------------- /yarp-print: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp-print -------------------------------------------------------------------------------- /yarp-timeline: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp-timeline -------------------------------------------------------------------------------- /yarp/Registry.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/Registry.py -------------------------------------------------------------------------------- /yarp/RegistryCarve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryCarve.py -------------------------------------------------------------------------------- /yarp/RegistryFile.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryFile.py -------------------------------------------------------------------------------- /yarp/RegistryFuse.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryFuse.py -------------------------------------------------------------------------------- /yarp/RegistryHelpers.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryHelpers.py -------------------------------------------------------------------------------- /yarp/RegistryLive.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryLive.py -------------------------------------------------------------------------------- /yarp/RegistryRecords.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryRecords.py -------------------------------------------------------------------------------- /yarp/RegistryRecover.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryRecover.py -------------------------------------------------------------------------------- /yarp/RegistrySqlite.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistrySqlite.py -------------------------------------------------------------------------------- /yarp/RegistryUnicode.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/RegistryUnicode.py -------------------------------------------------------------------------------- /yarp/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/msuhanov/yarp/HEAD/yarp/__init__.py --------------------------------------------------------------------------------