Changeset 45
- Timestamp:
- 08/06/05 10:08:53 (19 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/doc/reglookup.1.t2t
r28 r45 3 3 4 4 =NAME= 5 reglookup - Windoze NT/2K/XPregistry reader/lookup tool5 reglookup - windows NT+ registry reader/lookup tool 6 6 7 7 … … 11 11 12 12 =DESCRIPTION= 13 reglookup is designed to read Windoze registry elements and 14 print them out to stdout. It has several filtering options to 15 narrow the focus of the output. 13 reglookup is designed to read windows registry elements and 14 print them out to stdout in a CSV-like format. It has filtering 15 options to narrow the focus of the output. This tool is 16 designed to work with on windows NT/2K/XP/2K3 registries, though 17 your mileage may vary. 16 18 17 19 18 20 =OPTIONS= 19 - f<PREFIX_FILTER>20 Specify a path filter. Only keys/values under this21 registry path will be output.21 -p <PREFIX_FILTER> 22 Specify a path prefix filter. Only keys/values under 23 this registry path will be output. 22 24 23 -t <TYPE_FILTER>25 -t <TYPE_FILTER> 24 26 Specify a type filter. Only elements which match this 25 27 registry data type will be printed. Acceptable values 26 are: SZ,EXPAND_SZ,BIN,DWORD,MULTI_SZ,KEY 28 are: SZ,EXPAND_SZ,BINARY,DWORD,DWORD_BE,LINK,MULTI_SZ, 29 RSRC_LIST,RSRC_DESC,RSRC_REQ_LIST,KEY 27 30 28 -s Print security descriptors as well as keys/values/data. 29 (This feature's output is not standardized, and probably 30 contains bugs.) 31 31 -s Adds four additional columns to output containing 32 information from key security descriptors. The columns 33 are: owner, group, sacl, dacl. 34 (This feature's output probably contains bugs right now.) 35 36 -S Disables the printing of security descriptor 37 information. 38 32 39 -v Verbose output. 40 (Currently does little to nothing.) 33 41 34 42 … … 36 44 Required argument. Specifies the location of the 37 45 registry file to read. Typically, these files will be 38 found on a Windozepartition under46 found on a NTFS partition under 39 47 %SystemRoot%/system32/config. 40 48 41 49 42 50 =EXAMPLES= 43 To read and print an entire registry: 51 To read and print the contents of an entire system registry 52 file: 44 53 45 54 **reglookup /mnt/win/c/WINNT/system32/config/system** … … 48 57 key: 49 58 50 **reglookup - f'$$$PROTO.HIV/ControlSet002/Services'/mnt/win/c/WINNT/system32/config/system**59 **reglookup -p /ControlSet002/Services /mnt/win/c/WINNT/system32/config/system** 51 60 52 To limit the output to all registry values of type BIN :61 To limit the output to all registry values of type BINARY: 53 62 54 **reglookup -t BIN/mnt/win/c/WINNT/system32/config/system**63 **reglookup -t BINARY /mnt/win/c/WINNT/system32/config/system** 55 64 56 And to limit the output to BIN values under the Services key:65 And to limit the output to BINARY values under the Services key: 57 66 58 **reglookup -t BIN -f'$$$PROTO.HIV/ControlSet002/Services'/mnt/win/c/WINNT/system32/config/system**67 **reglookup -t BINARY -p /ControlSet002/Services /mnt/win/c/WINNT/system32/config/system** 59 68 60 69 61 70 =BUGS= 62 Path filtering is currently a slow hack. 71 The current incarnation of this program has only been tested on 72 windows 2K/XP. 63 73 64 The current incarnation of this program has only been tested on 65 Windoze 2000. 74 Verbose output is not working. 66 75 67 76 You'll notice that registry paths aren't all the same as the 68 ones the equivalents you see in Windoze. Don't ask me why that69 is. I just work here.77 ones the equivalents you see in the windows registry editor. 78 Don't ask me why that is. I just work here. 70 79 71 80 This software should be considered unstable at this time. … … 73 82 74 83 =CREDITS= 75 This program is based on editreg.c by Richard Sharpe. 76 77 It has since been modified by Timothy D. Morgan. 84 This program was initially based on editreg.c by 85 Richard Sharpe. It has since been rewritten to use a modified 86 version the regfio library written by Gerald Carter. Heavy 87 modifications to the library and the original command line 88 interface have been done by Timothy D. Morgan. 78 89 79 90 Please see source code for a full list of copyrights.
Note: See TracChangeset
for help on using the changeset viewer.