Extract and analyze Windows Registry hive files on Unix-like systems
Library and tools for extracting the contents of Windows Registry hive files
hivexshhivexmlhivexregedithivexget$ hivexsh /path/to/HKLM$ hivexml /path/to/SAM > registry_dump.xml$ hivexget /path/to/SOFTWARE 'Microsoft\Windows\CurrentVersion' ProductName