regedit-hive

  1. 内存中操作Hive, 而非操作磁盘hive. 比同等的Hive解析工具(eg.狙剑)速度快. 2. 操作方式和windows自带的regedit.exe相同, 而同等的工具仅列出hive对应的项,一般用户不知如何使用 3. 支持整个子键(Key) / 键值(Values) 的删除,增加,修改,重命名. 而同等的工具考虑到安全性,没有加入对Key的删除/增加 操作 4. 没有特殊情况的话,能发现一切注册表隐藏信息,解析hive的都能做到. 5. 查找功能没有暴搜hive数据结构,换用常规API. (1. Memory operation Hive, rather than the operation of the disk hive. Than analytical tools Hive same (eg. sword spy) speed. 2. Operation of regedit.exe and windows bring the same tools and the same list only hive the corresponding item, the general users do not know how to use 3. in support of the entire sub-key (Key)/key (Values) to delete, add, modify, rename. and the same tools to take into account security, do not add the delete Key/increase in operation 4. the absence of exceptional circumstances, then, to discover all the hidden registry information, are able to resolve the hive. 5. Find hive found no storm data structure, for conventional API.)