1hivexget(1)                    Windows Registry                    hivexget(1)
2
3
4

NAME

6       hivexget - Get subkey from a Windows Registry binary "hive" file
7

SYNOPSIS

9        hivexget hivefile '\Path\To\SubKey'
10
11        hivexget hivefile '\Path\To\SubKey' name
12

NOTE

14       This is a low-level tool.  For a more convenient way to navigate the
15       Windows Registry in Windows virtual machines, see virt-win-reg(1).  For
16       proper regedit formatting, use hivexregedit(1).
17

DESCRIPTION

19       This program navigates through a Windows Registry binary "hive" file
20       and extracts either all the (key, value) data pairs stored in that
21       subkey or just the single named data item.
22
23       In the first form:
24
25        hivexget hivefile '\Path\To\SubKey'
26
27       "hivefile" is some Windows Registry binary hive, and "\Path\To\Subkey"
28       is a path within that hive.  NB the path is relative to the top of this
29       hive, and is not the full path as you would use in Windows (eg.
30       "HKEY_LOCAL_MACHINE\SYSTEM" is not a valid path).
31
32       If the subkey exists, then the output lists all data pairs under this
33       subkey, in a format similar to "regedit" in Windows.
34
35       In the second form:
36
37        hivexget hivefile '\Path\To\SubKey' name
38
39       "hivefile" and path are as above.  "name" is the name of the value of
40       interest (use "@" for the default value).
41
42       The corresponding data item is printed "raw" (ie. no processing or
43       escaping) except:
44
45       1.  If it's a string we will convert it from Windows UTF-16 to UTF-8,
46           if this conversion is possible.  The string is printed with a
47           single trailing newline.
48
49       2.  If it's a multiple-string value, each string is printed on a
50           separate line.
51
52       3.  If it's a numeric value, it is printed as a decimal number.
53

SEE ALSO

55       hivex(3), hivexml(1), hivexsh(1), hivexregedit(1), virt-win-reg(1),
56       guestfs(3), <http://libguestfs.org/>, virt-cat(1), virt-edit(1).
57

AUTHORS

59       Richard W.M. Jones ("rjones at redhat dot com")
60

62       Copyright (C) 2009 Red Hat Inc.
63
64       This program is free software; you can redistribute it and/or modify it
65       under the terms of the GNU General Public License as published by the
66       Free Software Foundation; either version 2 of the License, or (at your
67       option) any later version.
68
69       This program is distributed in the hope that it will be useful, but
70       WITHOUT ANY WARRANTY; without even the implied warranty of
71       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
72       General Public License for more details.
73
74       You should have received a copy of the GNU General Public License along
75       with this program; if not, write to the Free Software Foundation, Inc.,
76       51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
77
78
79
80hivex-1.3.21                      2021-08-02                       hivexget(1)
Impressum