RegRipper

New Plugin (CCleaner) Submitted

Brett Shavers — Thu, 23 Feb 2012 02:59:08 +0000

Adrian Leong (http://cheeky4n6monkey.blogspot.com) submitted a neat plugin for CCleaner information. Very nice Adrian and thanks for sharing!

And don’t forget to check out Adrian’s blog.

As a reminder, there are two sites for RegRipper pluggins, both links are below.

Harlan’s Original Code and supporting information http://code.google.com/p/winforensicaanalysis/

Supplemental plugins submitted by RR users http://code.google.com/p/regripperplugins/

New Plugin from Brad Reninger

Brett Shavers — Wed, 15 Feb 2012 18:32:40 +0000

Brad Reninger wrote a new plugin that has been incorporated in the latest supplemental plugin zip file. (http://code.google.com/p/regripperplugins/).

EMDMgt.pl script. The script parses the EMDMgt registry key located in the SOFTWARE HIVE. This key identifies the volume serial number of USB devices.

Thanks Brad!

New Plugin and Wiki

Brett Shavers — Wed, 01 Feb 2012 15:50:05 +0000

NEW PLUGIN by Corey Harrell: filesnottosnapshot.pl that extracts from SYSTEM registry files and folders not backed up in Volume Shadow Copies. This is included in the latest RR download (http://code.google.com/p/regripperplugins/).

On the supplemental RegRipper plugin site, a new page has been created (http://code.google.com/p/regripperplugins/wiki/History). For any plugin writers that would like to maintain a revision history of their plugin, you have full access to the Google Code site to do so. That includes uploading new/updated plugins and wiki access. If you want access, send me an email – bshavers (at) gmail (dot) com. You’ll need a Gmail email account because it is Google Code…and yes, I don’t agree with Google’s privacy policy either…

RegRipper Updates

Brett Shavers — Wed, 01 Feb 2012 00:05:01 +0000

There have been continual updates in plugin rewrites, new plugins, and Harlan’s newest WFA/3 supporting files available online. As a reminder, both links are below.

http://code.google.com/p/winforensicaanalysis/

http://code.google.com/p/regripperplugins/

And as another reminder, if you have written a plugin…share it. We would all like to not only share in your labor, but also help test the plugins to ensure it works.

Calling all plugin writers!

Brett Shavers — Sat, 11 Jun 2011 16:27:45 +0000

Taking some great suggestions to keep track of submitted plugins, as well as to keep track of each plugin version, supplemental plugins are now being hosted on Google Code at:

http://code.google.com/p/regripperplugins/

If you have written a plugin or have one to submit, send me an email and I’ll give you access to the site to upload and maintain your plugin. Anyone can download freely, but access to upload is available only to those that have written/are writing plugins.

Its a work in progress (isn’t everything?) but as an added supplement to Harlan’s work, this is probably the best method of having plugins immediately available as they can be directly uploaded by the plugin writers.

So, if you’ve already written a plugin and want access, send me an email and I’ll give you access to the site.

Brett

Download update

Brett Shavers — Fri, 03 Jun 2011 01:54:04 +0000

After a few suggestions to make downloads easier for the additional RegRipper plugins, you can go directly to a Google Code site at:

http://code.google.com/p/regripperplugins/

Now, if you have written a plugin (or dozens), you can have access to uploading and maintaining your plugin directly. This will allow for the fastest distribution of plugins with a great version control system. Send me an email if you want access now to upload your plugin/s, otherwise, let me know when you need to upload a plugin and I’ll set you up with access.

This is an additional resource of RegRipper of submitted plugins beyond Harlan’s original set, which is located here:

http://code.google.com/p/winforensicaanalysis/

Hopefully, this setup will work out best to get the plugins out there and accessible.

From Cameron Howell and Francesco Picasso

Brett Shavers — Thu, 14 Apr 2011 22:46:06 +0000

This newly submitted plugin from Cameron is a modified version of Harlan’s officedocs module to work with Office 2010 MRU entries (Word, Excel, Access, and PowerPoint). Thanks to Cameron!

And thanks to Francesco Picasso for sending in his updated plugins.

New Site

Brett Shavers — Wed, 13 Apr 2011 20:35:08 +0000

I know…I know….a change of the website address from RegRipper.net to RegRipper.wordpress.com is inconvenient with your current bookmark. Without ranting too much, I made this switch for several reasons (like spending too much time keeping porn out of the site, forum moderating, other maintenance issues, etc…).

Except for the address change, everything else is the same. Harlan’s RegRipper is still here and will easier for me to keep up with plugins being submitted from everyone.

New plugin added

Brett Shavers — Wed, 30 Mar 2011 00:19:03 +0000

Pierre-Yves Bonnetain sent in a new plugin that will display the LiveContacts GUID and
associated user name (from the NTUSER hive). It’s contributions of a single plugin, or even testing if a plugin works that makes all the difference in RegRipper. Sometimes a plugin may have an error. If you can catch it, and perhaps either correct it or notify the writer of that plugin of the error, you’ll be doing a great service to everyone.

Thanks Pierre-Yves for your work!

A few plugins fixed and updated

Brett Shavers — Tue, 29 Mar 2011 17:12:01 +0000

The RR zip package has been updated with a few fixed plugins, from the download page.