|
|
|
@253
|
13 years |
tim |
added preliminary interface to security descriptors in pyregfi
misc …
|
|
|
|
@252
|
14 years |
tim |
updated pyregfi to work with regfi changes
renamed some functions for …
|
|
|
|
@251
|
14 years |
tim |
simplified NTTIME storage and conversions
|
|
|
|
@250
|
14 years |
tim |
added key caching
readded SK caching
fixed races and deadlocks
|
|
|
|
@249
|
14 years |
tim |
reorganized iterator code for simpler locking and easier future key caching
|
|
|
|
@238
|
14 years |
tim |
moved development documentation back to old location, adjusted build …
|
|
|
|
@233
|
14 years |
tim |
improved version information interface by adding a special purpose function
|
|
|
|
@232
|
14 years |
tim |
added a convenience openHive function in pyregfi
standardized static …
|
|
|
|
@228
|
14 years |
tim |
added a test case for pyregfi multithreaded use
updated the regfi …
|
|
|
|
@226
|
14 years |
tim |
several fixes for pyregfi Windows portability
better error handling …
|
|
|
|
@224
|
14 years |
tim |
added new regfi API function to help manage memory better
fixed …
|
|
|
|
@221
|
14 years |
tim |
added a lot of documentation for pyregfi and a few more attributes
|
|
|
|
@219
|
14 years |
tim |
updated time conversion to return a double for more precision
added …
|
|
|
|
@215
|
14 years |
tim |
improvements to smoketest script, additional test case
added a …
|
|
|
|
@209
|
14 years |
tim |
worked on pyregfi value data interface
added initial scons target for …
|
|
|
|
@207
|
14 years |
tim |
reworked regfi API to accomodate more convenient subkey/value searches …
|
|
|
|
@206
|
14 years |
tim |
simplified part of regfi API to move string encoding to the REGFI_FILE …
|
|
|
|
@203
|
14 years |
tim |
misc fixes
stripped _REC from some data type names
|
|
|
|
@202
|
14 years |
tim |
began implementing independent python subkey and value iterators
|
|
|
|
@201
|
14 years |
tim |
changed symbol visibility to hidden by default and explicitly exported …
|
|
|
|
@200
|
14 years |
tim |
redesigned python key iterator and test script
updated documentation
|
|
|
|
@199
|
14 years |
tim |
reworked part of regfi C API to make python wrappers simpler
continued …
|
|
|
|
@195
|
15 years |
tim |
removed talloc from mainline build tree, opting instead to depend upon …
|
|
|
|
@193
|
15 years |
tim |
added Michael's patch for enums and an error message fix
|
|
|
|
@186
|
15 years |
tim |
minor changes based on suggestions from Michael Cohen
|
|
|
|
@185
|
15 years |
tim |
reworked logging API again to simplify interface
updated …
|
|
|
|
@184
|
15 years |
tim |
redesigned memory management to allow for multiple references to …
|
|
|
|
@182
|
15 years |
tim |
redesigned regfi logging API to utilize thread-local storage
|
|
|
|
@180
|
15 years |
tim |
Added locks to make transactions on REGFI_FILE objects thread safe
…
|
|
|
|
@178
|
15 years |
tim |
reworked I/O to use callback functions
fixed a bug in mtime …
|
|
|
|
@172
|
15 years |
tim |
reorganized name interpretation code to correct issues in reglookup-recover
|
|
|
|
@169
|
15 years |
tim |
filled in additional, minimal documentation
|
|
|
|
@168
|
15 years |
tim |
merged remaining smb_deps items into regfi
began formatting API …
|
|
|
|
@167
|
15 years |
tim |
added more regfi API documentation
minor consistency change
|
|
|
|
@166
|
15 years |
tim |
fixed a bug in big data parsing
broke up some of REGFI_FILE …
|
|
|
|
@165
|
15 years |
tim |
added misc comments
|
|
|
|
@162
|
15 years |
tim |
added UTF-16LE support for value names
|
|
|
|
@161
|
15 years |
tim |
added support for UTF-16LE key names
|
|
|
|
@160
|
15 years |
tim |
reorganized classname parsing and interpretation code
|
|
|
|
@159
|
15 years |
tim |
began rearranging data parsing. Moved charater set conversion and …
|
|
|
|
@158
|
15 years |
tim |
simplified root key search
moved classname parsing up to regfi_load_key
|
|
|
|
@157
|
15 years |
tim |
reorganized data parsing in regfi
simplified some length validation
…
|
|
|
|
@152
|
15 years |
tim |
preliminary support for big data records
switched to using key flags …
|
|
|
|
@151
|
16 years |
tim |
parsed more items from regf header structure
improved feedback from …
|
|
|
|
@150
|
16 years |
tim |
integrated talloc into most of the rest of the regfi library
fixed a …
|
|
|
|
@149
|
16 years |
tim |
minor efficiency improvement for path construction in reglookup-recover
|
|
|
|
@148
|
16 years |
tim |
integrated talloc into range_list
fixed some uninitialized structure …
|
|
|
|
@147
|
16 years |
tim |
added talloc library
incorporated talloc into winsec and lru_cache …
|
|
|
|
@146
|
16 years |
tim |
reorganized SK caching
refined interface to HBIN functions
|
|
|
|
@145
|
16 years |
tim |
decoupled value parsing from key parsing
moved linking of value …
|
|
|
|
@143
|
16 years |
tim |
fixed a null pointer exception
removed some dependencies on less …
|
|
|
|
@140
|
16 years |
tim |
Misc error message changes.
Added and removed some comments.
…
|
|
|
|
@139
|
16 years |
tim |
rewrote subkey list parsing code to include more organized recursion …
|
|
|
|
@138
|
16 years |
tim |
extended error message logging to allow for message type filtering
…
|
|
|
|
@137
|
16 years |
tim |
Added error messages to most parse functions in regfi
Relaxed …
|
|
|
|
@136
|
16 years |
tim |
fixed various integer issues and memory allocation issues
polished …
|
|
|
|
@135
|
16 years |
tim |
cleaned up regfi API
started adding debugging infrastructure, but …
|
|
|
|
@134
|
16 years |
tim |
rewrote winsec library, stripping out Samba dependencies
eliminated …
|
|
|
|
@133
|
16 years |
tim |
minor changes to winsec library
fixed major bug with data_in_offset values
|
|
|
|
@132
|
16 years |
tim |
separated ACL parsing code from smb_deps into new winsec library
|
|
|
|
@131
|
16 years |
tim |
fixed an hbin length validation related to vk records
added hbin …
|
|
|
|
@128
|
16 years |
tim |
added secondary root key type found in Vista registries by Jolanta …
|
|
|
|
@127
|
16 years |
tim |
added preliminary support for 'ri' subkey lists.
cleaned up regfi API …
|
|
|
|
@126
|
16 years |
tim |
improved validation and output of key class names, MULTI_SZ and other …
|
|
|
|
@125
|
16 years |
tim |
added early version of class name parsing. additional work still needed.
|
|
|
|
@122
|
16 years |
tim |
fixed an incorrect malloc in range_list.c
minor documentation updates
|
|
|
|
@121
|
16 years |
tim |
fixed minor path/type filter bug in reglookup
misc code cleanups
|
|
|
|
@116
|
16 years |
tim |
fixed major bug in reglookup-recover; now recovers much more data …
|
|
|
|
@113
|
17 years |
tim |
fixed some VK record parsing bugs
added more strict checking on …
|
|
|
|
@112
|
17 years |
tim |
added path resolution to reglookup-recover
|
|
|
|
@111
|
17 years |
tim |
Switched license to GPLv3
Added early version of new tool, …
|
|
|
|
@110
|
17 years |
tim |
moved unallocated cell parsing back out of the main line hbin parsing
|
|
|
|
@109
|
17 years |
tim |
reworked SK record caching to prevent unnecessary loads.
SK records …
|
|
|
|
@108
|
17 years |
tim |
added least-recently-used cache structure.
set up SK records to use …
|
|
|
|
@107
|
17 years |
tim |
removed redundant hbin parsing
added flags parameter to regfi_open
|
|
|
|
@106
|
17 years |
tim |
replaced linked list hbin lookup with range_list based binary search
|
|
|
|
@105
|
17 years |
tim |
fully removed dependence on Samba parse structures from core library
|
|
|
|
@104
|
17 years |
tim |
replaced lf (hash list) parsing code
|
|
|
|
@103
|
17 years |
tim |
rewrote value list parsing routine
|
|
|
|
@102
|
17 years |
tim |
simplified root key search routines
rewrote sk record parsing
fixed …
|
|
|
|
@101
|
17 years |
tim |
rewrote VK record and data cell parsing
|
|
|
|
@99
|
17 years |
tim |
fixed a range_list bug
replaced NK parsing routine
|
|
|
|
@98
|
17 years |
tim |
adding experimental library which will be used to speed up hbin lookups
|
|
|
|
@97
|
17 years |
tim |
begun the work of rewriting the lowest layer parsing routines
|
|
|
|
@89
|
18 years |
tim |
Added contract comments to void_stack header. Minor cleanups in …
|
|
|
|
@84
|
18 years |
tim |
rearranged structure contents to reduce fragmentation on 64 bit …
|
|
|
|
@81
|
18 years |
tim |
Finished incorporating changes to reglookup to work with new regfi …
|
|
|
|
@80
|
18 years |
tim |
Major API updates for regfi, and started porting reglookup to the API. …
|
|
|
|
@79
|
18 years |
tim |
renamed regfio to regfi, since we aren't doing any output to the registry.
|
|
|
|
@78
|
18 years |
tim |
beginning process of rewriting regfio interface.
|
|
|
|
@77
|
18 years |
tim |
Improved support for unknown registry types.
Fixed potential security …
|
|
|
|
@72
|
18 years |
tim |
Added QWORD type support.
|
|
|
|
@68
|
18 years |
tim |
added usage printout to reglookup-timeline
cut left over unused junk …
|
|
|
|
@61
|
18 years |
tim |
various minor speedups and memory leak fixes. Added support for NONE …
|
|
|
|
@54
|
19 years |
tim |
Added some verbose output
code cleanup and minor bug fixes
|
|
|
|
@53
|
19 years |
tim |
Moved security descriptor parsing functions into regfio.c
Improved …
|
|
|
|
@42
|
19 years |
tim |
Changed to a CSV-like output format to accommodate extended fields
…
|
|
|
|
@41
|
19 years |
tim |
Added full printing of values, as with old code.
renamed type …
|
|
|
|
@38
|
19 years |
tim |
Cleaned up path2Stack. Added several supporting functions in …
|
|
|
|
@33
|
19 years |
tim |
Fixed some bugs.
rewrote testing code to allow for a path filter …
|
|
|
|
