Merge pull request #67 from reece394/DEFAULTREG

Add Support for DEFAULT Registry Hive
EricZimmerman · Sep 3, 2024 · d8cbc72 · d8cbc72
2 parents 8ec7122 + 3cdf98b
commit d8cbc72
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/RECmd/Program.cs b/RECmd/Program.cs
@@ -505,6 +505,7 @@ private static void DoWork(string d, string f, string kn, string vn, string bn,
             okFileParts.Add("SECURITY");
             okFileParts.Add("DRIVERS");
             okFileParts.Add("COMPONENTS");
+            okFileParts.Add("DEFAULT");
 
             IEnumerable<string> files2;
 
@@ -640,6 +641,7 @@ private static void DoWork(string d, string f, string kn, string vn, string bn,
                 "*SYSTEM",
                 "*SAM",
                 "*SOFTWARE",
+                "*DEFAULT",
                 "*AMCACHE.HVE",
                 "*SYSCACHE.hve",
                 "*SECURITY",