Saturday, May 13, 2017

application to mount windows registry hive

we use winregfs to mount windows registry hive file as a file system

1- install winregfs
$ sudo apt-get install winregfs

2- for example we have windows 7 partition is mounted to /mnt
$ sudo mkdir /winreg
- to mount registry software section
$ sudo mount.winregfs /mnt/Windows/System32/config/SOFTWARE /winreg

- to mount registry system section
$ sudo mount.winregfs /mnt/Windows/System32/config/SYSTEM /winreg

No comments:

Post a Comment