Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

reglookup-recover(1) [debian man page]

reglookup(1)															      reglookup(1)

NAME

       reglookup-recover - Windows NT+ registry deleted data recovery tool

SYNOPSIS

       reglookup-recover [options] registry-file

DESCRIPTION

       reglookup-recover attempts to scour a Windows registry hive for deleted data structures and outputs those found in a CSV-like format.

OPTIONS

       reglookup-recover accepts the following parameters:

       -v     Verbose output.

       -h     Enables the printing of a column header row. (default)

       -H     Disables the printing of a column header row.

       -l     Display cells which could not be interpreted as valid registry structures at the end of the output.

       -L     Do not display cells which could not be interpreted as valid registry structures. This is the default behavior.

       -r     Display raw cell contents for cells which were interpreted as intact data structures. This additional output will appear on the same
	      line as the interpreted data.

       -R     Do not display raw cell contents for cells which were interpreted as intact data structures. This is the default behavior.

       registry-file
	      Required argument. Specifies the location of the registry file to read. The system registry files should be  found  under:  %System-
	      Root%/system32/config.

OUTPUT

       reglookup-recover  generates  a comma-separated values (CSV) like output and writes it to stdout. For more information on the syntax of the
       general format, see reglookup(1).

       This tool is new and the output format, particularly the included columns, may change in future	revisions.  When  this	format	stablizes,
       additional documentation will be included here.

EXAMPLES

       To dump the recoverable contents of a system registry hive:

	    reglookup-recover /mnt/win/c/WINDOWS/system32/config/system

       Extract all available unallocated data, including unparsable unallocated space and the raw data associated with parsed cells in a user-spe-
       cific registry:

	    reglookup-recover -r -l '/mnt/win/c/Documents and Settings/user/NTUSER.DAT'

BUGS

       This program has been smoke-tested against most current Windows target platforms, but a comprehensive test suite has not  yet  been  devel-
       oped.   (Please	report results to the development mailing list if you encounter any bugs. Sample registry files and/or patches are greatly
       appreciated.)

       This program is new as of RegLookup release 0.9.0 and should be considered unstable.

       For more information on registry format details	and  the  recovery  algorithm,	see:  http://sentinelchicken.com/research/registry_format/
       http://sentinelchicken.com/research/registry_recovery/

CREDITS

       This program was written by Timothy D. Morgan.

LICENSE

       Please see the file "LICENSE" included with this software distribution.

       This  program  is  distributed  in  the	hope  that  it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MER-
       CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License version 3 for more details.

SEE ALSO

       reglookup-timeline(1) reglookup-recover(1)

File Conversion Utilities					   8 March 2010 						      reglookup(1)

Check Out this Related Man Page

Moose::Meta::TypeConstraint::Registry(3)		User Contributed Perl Documentation		  Moose::Meta::TypeConstraint::Registry(3)

NAME

       Moose::Meta::TypeConstraint::Registry - registry for type constraints

VERSION

       version 2.0604

DESCRIPTION

       This class is a registry that maps type constraint names to Moose::Meta::TypeConstraint objects.

       Currently, it is only used internally by Moose::Util::TypeConstraints, which creates a single global registry.

INHERITANCE

       "Moose::Meta::TypeConstraint::Registry" is a subclass of Class::MOP::Object.

METHODS

       Moose::Meta::TypeConstraint::Registry->new(%options)
	   This creates a new registry object based on the provided %options:

	   o	   parent_registry

		   This is an optional Moose::Meta::TypeConstraint::Registry object.

	   o	   type_constraints

		   This is hash reference of type names to type objects. This is optional. Constraints can be added to the registry after it is
		   created.

       $registry->get_parent_registry
	   Returns the registry's parent registry, if it has one.

       $registry->has_parent_registry
	   Returns true if the registry has a parent.

       $registry->set_parent_registry($registry)
	   Sets the parent registry.

       $registry->get_type_constraint($type_name)
	   This returns the Moose::Meta::TypeConstraint object from the registry for the given name, if one exists.

       $registry->has_type_constraint($type_name)
	   Returns true if the registry has a type of the given name.

       $registry->add_type_constraint($type)
	   Adds a new Moose::Meta::TypeConstraint object to the registry.

       $registry->find_type_constraint($type_name)
	   This method looks in the current registry for the named type. If the type is not found, then this method will look in the registry's
	   parent, if it has one.

BUGS

       See "BUGS" in Moose for details on reporting bugs.

AUTHOR

       Moose is maintained by the Moose Cabal, along with the help of many contributors. See "CABAL" in Moose and "CONTRIBUTORS" in Moose for
       details.

COPYRIGHT AND LICENSE

       This software is copyright (c) 2012 by Infinity Interactive, Inc..

       This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.

perl v5.16.2							    2012-09-19				  Moose::Meta::TypeConstraint::Registry(3)
Man Page