Targeted Function Tool
  • Amcache
  • Registry

python-registry is a pure Python library that provides read-only access to Windows NT Registry files. These include NTUSER.DAT, userdiff, and SAM. The interface is two-fold: a high-level interface suitable for most tasks, and a low level set of parsing objects and methods which may be used for advanced study of the Windows NT Registry. This library is compatible with Windows,Linux, and MacOS, making it accessible and functional across all major operating systems.