X-Git-Url: http://git.annexia.org/?a=blobdiff_plain;f=sh%2Fhivexget.pod;h=36ad71cb38d5a52fc9971d139e7a50ec8b1e0d00;hb=2419bda3b4b47687c787a2937238fee932ad66e5;hp=4fbac1324b0ba02fd6dbeb9acb8b29f62cccefc4;hpb=e8928b001ed31694031257202775375e2f50e1a8;p=hivex.git diff --git a/sh/hivexget.pod b/sh/hivexget.pod index 4fbac13..36ad71c 100644 --- a/sh/hivexget.pod +++ b/sh/hivexget.pod @@ -10,11 +10,13 @@ hivexget - Get subkey from a Windows Registry binary "hive" file hivexget hivefile '\Path\To\SubKey' name -=head1 DESCRIPTION +=head1 NOTE + +This is a low-level tool. For a more convenient way to navigate the +Windows Registry in Windows virtual machines, see L. +For proper regedit formatting, use L. -I This is a low-level tool. For a more convenient way to -navigate the Windows Registry in Windows virtual machines, see -L. +=head1 DESCRIPTION This program navigates through a Windows Registry binary "hive" file and extracts I all the (key, value) data pairs @@ -27,10 +29,10 @@ In the first form: C is some Windows Registry binary hive, and C<\Path\To\Subkey> is a path within that hive. I the path is relative to the top of this hive, and is I the full path as you would use in Windows -(eg. C<\HKEY_LOCAL_MACHINE> is not a valid path). +(eg. C is not a valid path). If the subkey exists, then the output lists all data pairs under this -subkey, in a format compatible with C in Windows. +subkey, in a format similar to C in Windows. In the second form: @@ -66,6 +68,7 @@ If it's a numeric value, it is printed as a decimal number. L, L, L, +L, L, L, L,