Registry Search utility
Posted: 18 Feb 2018, 16:22
Some registry search utilities exist, but I wanted to create my own customizeable one because the registry is sensitive and I want to know exactly what the application is doing.
Github Link: https://github.com/berban/RegistrySearch
Download (includes RegJump.exe): https://github.com/berban/RegistrySearc ... master.zip
Not a whole lot to explain with the script. Search by key or value name in the "Name" box, or search by value (data contents) in the "Value" box, or search using both criteria (OR-type search.) Checking "RegEx" changes both name and value strings to regular expressions. Double-click an entry in the treeview to open it in regedit.exe.
This script relies on the systernals utility "RegJump" (https://docs.microsoft.com/en-us/sysint ... ds/regjump) which to be honest is pretty hack-y and doesn't always work. I think it's basically AutoHotkey keystrokes. If you want to use an alternate method, just replace the function "RegJump()" at the top of the main code.
There's a few settings in the "User Settings" section of the .ini file, but overall it's super basic so just add your own customizations to the code if you want more functionality (e.g. name AND value search, export results to text, edit keys from the treeview, etc.) Let me know if you have questions about anything.
Github Link: https://github.com/berban/RegistrySearch
Download (includes RegJump.exe): https://github.com/berban/RegistrySearc ... master.zip
Not a whole lot to explain with the script. Search by key or value name in the "Name" box, or search by value (data contents) in the "Value" box, or search using both criteria (OR-type search.) Checking "RegEx" changes both name and value strings to regular expressions. Double-click an entry in the treeview to open it in regedit.exe.
This script relies on the systernals utility "RegJump" (https://docs.microsoft.com/en-us/sysint ... ds/regjump) which to be honest is pretty hack-y and doesn't always work. I think it's basically AutoHotkey keystrokes. If you want to use an alternate method, just replace the function "RegJump()" at the top of the main code.
There's a few settings in the "User Settings" section of the .ini file, but overall it's super basic so just add your own customizations to the code if you want more functionality (e.g. name AND value search, export results to text, edit keys from the treeview, etc.) Let me know if you have questions about anything.